JFrog announced updates to its software supply chain platform, adding AI security features and tools to help organizations meet EU regulations. Its new AI-SEC offering gives organizations control over AI agents, skills, and models used in software development, addressing the risk of Shadow AI.
At its swampUP Europe 2026 conference, JFrog also introduced capabilities to support EU compliance, including a framework for the Digital Operational Resilience Act (DORA). The tools are designed to automate governance and provide signed evidence for every software release without slowing development.
The AI security features include local detection of Shadow AI on developer workstations and AI asset scanning with a Bring Your Own LLM Key (BYOK) option.