Sold by: JFrog
Deployed on AWS
Automate trusted releases across the agentic software supply chain
4.2
Overview
Limited time offer: Get JFrog Pro for just $50/month, a $100/month savings. Available only through June 4, 2027.
Trusted by millions of developers, engineers, architects, and security professionals at thousands of enterprises, including the majority of the Fortune 100, the cloud-native JFrog Software Supply Chain Platform is the single system of record for all software packages, data, and AI assets across the software supply chain.
The JFrog Platform on AWS manages every input and output across your software supply chain with complete visibility and control. This massively scalable, fit-for-purpose platform is available as a fully managed SaaS, self-managed, and hybrid solution, giving organizations the deployment flexibility this AI era demands. By embedding security and evidence-based governance directly into development workflows from the first line of code to runtime, JFrog enables trusted, risk-mitigated releases without slowing teams down. And as your software factory evolves, JFrog governs every AI model, agent skill, and MCP server alongside traditional artifacts in one place, securing your entire agentic software supply chain.
JFrog Enterprise subscriptions include 24x7 Support and optional in-region 99.99% uptime SLA, plus an assigned support resource with regular touch points. The JFrog Platform is often leveraged to consolidate enterprise DevSecOps solutions for companies utilizing GitLab, Sonatype, Snyk, or Veracode, among others. Contact JFrog at cloud@jfrog.com for private offers on annual subscriptions, or visit < www.jfrog.com/pricing > for more information.
Key products and capabilities:
- JFrog Artifactory: Universal artifact management
- JFrog Xray: Modern, holistic SCA
- JFrog Advanced Security: Contextual analysis of vulnerabilities
- JFrog Curation: Early blocking of malicious open source packages
- JFrog AppTrust: Application risk governance
- JFrog ML: Control and govern AI/ML development
- JFrog AI Catalog: Detect, secure, and control every AI asset
- JFrog Runtime: Real-time Kubernetes security monitoring
- JFrog Distribution: Speed up secure software consumption
- JFrog Connect: IoT device management
Highlights
- 60+ natively supported package and file types, including ML models and generic repositories.
- Comprehensive, enterprise-grade security solution integrated across the entire software supply chain, eliminating tool sprawl and alert fatigue. Go beyond scanning with contextual analysis and vulnerability prioritization, anti-tampering mechanisms, and signed provenance, ensuring best practices and compliance.
- Fast, secure distribution of verified, multi-repository release bundles to sync large-scale geo-distributed teams and accelerate deployments to any target: SaaS, self-managed, or connected devices.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/month |
|---|---|
Pro | $50.00 |
Enterprise X | $950.00 |
Dimension | Cost/unit |
|---|---|
JFrog Consumption Unit | $0.01 |
Dimensions summary
You buy this platform through a contract with three purchasing options. The JFrog Consumption Unit bills against a pool of consumption units, letting you draw down usage across the platform. The Pro and Enterprise X options are subscription tiers, each priced in units. Pro covers base package and model management with a set amount of included consumption. Enterprise X builds on Pro, adding high-availability setup, artifact federation, and enterprise access controls. Additional consumption above the included base is available and billed on usage, with tiered rates that lower the per-GB cost as consumption grows.
Top-of-mind questions for buyers
Both storage and data transfer count toward your total monthly consumption. Your plan includes a base amount of consumption measured in GB. Once you pass that included base, extra usage is billed automatically based on the GB you consume.
Extra consumption is priced in tiers by GB consumed. Each tier discount applies only to the consumption within that tier, not your whole usage. So as your GB volume rises into higher tiers, the per-GB rate for those additional GB drops.
The JFrog Consumption Unit draws down against a pool of units as you use the platform. Pro and Enterprise X are subscription tiers with a fixed included base of consumption. Usage above that base is billed automatically. Consumption Unit fits variable usage; the tiers suit steady, predictable workloads.
jfrog.com
Helpful?
Vendor refund policy
Contact service@jfrog.com
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
24/7 SLA support service@jfrog.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Digital.ai
By Cloudsmith
Top
10
In Continuous Integration and Continuous Delivery, Application Development, Security
Top
50
In Agile Lifecycle Management
Top
10
In Source Control
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Universal Artifact Management
Support for 60+ natively supported package and file types, including ML models and generic repositories across the software supply chain.
Integrated Security Analysis
Contextual vulnerability analysis with prioritization, anti-tampering mechanisms, and signed provenance integrated across the entire software supply chain.
Software Supply Chain Visibility
Single system of record providing complete visibility and control over all software packages, data, and AI assets across the software supply chain.
Secure Distribution
Fast, secure distribution of verified multi-repository release bundles with capability to sync large-scale geo-distributed teams and accelerate deployments.
AI and ML Asset Governance
Control and governance of AI models, agent skills, and MCP servers alongside traditional artifacts within a unified platform.
AI-Powered Predictive Analytics
Generate predictive insights across the software lifecycle to enable data-driven decision making and smarter software investments.
Unified DevOps and Security Integration
Integrate DevOps and security capabilities across the full software lifecycle with unified platform architecture.
Multi-Environment Application Deployment
Deploy applications to any target environment including mainframes, VMs, containers, and cloud platforms with support for thousands of simultaneous deployments.
Enterprise Agile Planning and Scaling
Scale agile practices across all organizational levels from individual teams to entire product portfolios with enterprise-grade planning capabilities.
Application Security and Protection
Implement DevSecOps protections during the build process to prevent tampering, reverse-engineering, and attack vectors including credential theft, cryptojacking, and script injection.
Universal Package Format Support
Support for 30 package formats enabling centralized management of diverse artifact types across different package ecosystems.
Dependency Firewall with Vulnerability Scanning
Caching of packages from open-source repositories with vulnerability scanning and policy compliance validation before distribution to developers.
Zero Trust Security Architecture
Implementation of zero-trust security workflows across services, teams and users with automated access control and risk mitigation.
Cloud-Native Global Distribution
Globally distributed cloud-native infrastructure optimized for fast and reliable artifact delivery across distributed teams and geographic locations.
ISO27001 Compliance and Access Management
ISO27001 accreditation with centralized access control, compliance management and security best practices implementation for software intellectual property protection.
Standard contract
No
No
No
Customer reviews
Hamza A.
JFrog Simplifies Software Delivery with Reliable, Smooth Integrations
Reviewed on Oct 06, 2026
Review provided by G2
What do you like best about the product?
What I like most about JFrog is how much it simplifies managing and delivering software. It’s reliable, integrates smoothly with our existing tools, and saves us a lot of time when handling artifacts and deployments.
What do you dislike about the product?
The pricing can feel a bit high, and some features take time to learn. The interface could also be simpler for new users and teams, and the documentation could be clearer to make onboarding and day-to-day use easier.
What problems is the product solving and how is that benefiting you?
JFrog makes it easier for us to manage software packages and deployments, which saves time, reduces errors, and keeps our development process more organized overall.
Bassam B.
Helps with scanning but is expensive and the dashboard is not easy to set up
Reviewed on Oct 05, 2026
Review provided by G2
What do you like best about the product?
JFrog helps me scan for security vulnerabilities, especially in container issues like scanning Docker images. It also helps resolve programming-related issues through available plugins. I appreciate its use for deployment as it makes the process easier for me.
What do you dislike about the product?
Honestly, it's expensive and I expected it to be difficult in the initial setup. The manager struggled to set it up.
What problems is the product solving and how is that benefiting you?
JFrog helps me scan Docker image vulnerabilities and enhances deployment.
Ibrahim C.
Single System of Record Improves Standardization, but Pricing Is a Concern
Reviewed on Oct 03, 2026
Review provided by G2
What do you like best about the product?
Operate from a single system of record, reducing complexity and unlocking developer happiness, We're able to standardize across processes, ensure security
What do you dislike about the product?
I don't like the pricing, like I see it a bit too expensive although there is great value on the product, but still, so I think we need to find the balance in between
What problems is the product solving and how is that benefiting you?
Full workday every week to tooling inefficiencies, slow pipelines, and context switching. JFrog eliminates this with artifact management and security scanning embedded directly into the IDEs, AI coding assistants and CI/CD pipelines, letting AI agents handle routine tasks automatically
Salameh H.
Comprehensive, Scalable Artifact Management with Seamless CI/CD and Built-In Security
Reviewed on Oct 01, 2026
Review provided by G2
What do you like best about the product?
What I like best about JFrog is its comprehensive approach to managing the entire software supply chain. Artifactory acts as a single source of truth for binaries across virtually every package manager and language, which eliminates silos. On top of that, its seamless integration with CI/CD pipelines, robust enterprise scalability, and embedded security scanning with JFrog Xray make managing software artifacts both secure and effortless.
What do you dislike about the product?
While JFrog is an industry standard for artifact management, the main challenge is its cost and licensing complexity, especially as storage and user seats scale up for enterprise tiers. Additionally, the learning curve and admin overhead for managing fine-grained permissions, repository replication, and self-hosted instances can be steep for smaller teams that might prefer a lighter, plug-and-play solution.
What problems is the product solving and how is that benefiting you?
The Problem: Modern applications rely on dozens of different tech stacks, package managers (npm, Maven, PyPI, NuGet, Docker/OCI, Helm, etc.), and multi-cloud infrastructure. Managing these dependencies across disconnected registries creates fragmented workflows, security blind spots, and build failures due to external registry downtime.
How JFrog Solves It: JFrog Artifactory acts as a universal, binary repository manager that supports virtually every package format, framework, and build tool out-of-the-box.
The Benefit:
Consistency: Every developer and CI/CD agent pulls dependencies and pushes artifacts through a single, centralized hub.
Reliability: Caching remote dependencies locally prevents build breaks if external registries (like npmjs or Docker Hub) experience downtime or rate limits.
How JFrog Solves It: JFrog Artifactory acts as a universal, binary repository manager that supports virtually every package format, framework, and build tool out-of-the-box.
The Benefit:
Consistency: Every developer and CI/CD agent pulls dependencies and pushes artifacts through a single, centralized hub.
Reliability: Caching remote dependencies locally prevents build breaks if external registries (like npmjs or Docker Hub) experience downtime or rate limits.
papa s.
Centralized Artifact Management, Needs UI Improvements
Reviewed on Sep 23, 2026
Review provided by G2
What do you like best about the product?
I really like JFrog's centralized management of artifacts and dependencies, which simplifies managing and storing software artifacts and dependencies in our development and CI/CD workflow. I use Artifact to store, manage, and retrieve Maven artifacts and other build dependencies, and I find its broader artifact management capabilities beneficial.
What do you dislike about the product?
I think JFrog could improve its user interface and overall ease of navigation. Sometimes, the repository and artifact navigation feels a bit complex, especially when dealing with multiple repositories and projects.
What problems is the product solving and how is that benefiting you?
I use JFrog to solve the problem of managing software dependencies and build artifacts in a centralized way.