Sold by: JFrog
Deployed on AWS
Automate trusted releases across the agentic software supply chain
4.2
Overview
Limited time offer: Get JFrog Pro for just $50/month, a $100/month savings. Available only through June 4, 2027.
Trusted by millions of developers, engineers, architects, and security professionals at thousands of enterprises, including the majority of the Fortune 100, the cloud-native JFrog Software Supply Chain Platform is the single system of record for all software packages, data, and AI assets across the software supply chain.
The JFrog Platform on AWS manages every input and output across your software supply chain with complete visibility and control. This massively scalable, fit-for-purpose platform is available as a fully managed SaaS, self-managed, and hybrid solution, giving organizations the deployment flexibility this AI era demands. By embedding security and evidence-based governance directly into development workflows from the first line of code to runtime, JFrog enables trusted, risk-mitigated releases without slowing teams down. And as your software factory evolves, JFrog governs every AI model, agent skill, and MCP server alongside traditional artifacts in one place, securing your entire agentic software supply chain.
JFrog Enterprise subscriptions include 24x7 Support and optional in-region 99.99% uptime SLA, plus an assigned support resource with regular touch points. The JFrog Platform is often leveraged to consolidate enterprise DevSecOps solutions for companies utilizing GitLab, Sonatype, Snyk, or Veracode, among others. Contact JFrog at cloud@jfrog.com for private offers on annual subscriptions, or visit < www.jfrog.com/pricing > for more information.
Key products and capabilities:
- JFrog Artifactory: Universal artifact management
- JFrog Xray: Modern, holistic SCA
- JFrog Advanced Security: Contextual analysis of vulnerabilities
- JFrog Curation: Early blocking of malicious open source packages
- JFrog AppTrust: Application risk governance
- JFrog ML: Control and govern AI/ML development
- JFrog AI Catalog: Detect, secure, and control every AI asset
- JFrog Runtime: Real-time Kubernetes security monitoring
- JFrog Distribution: Speed up secure software consumption
- JFrog Connect: IoT device management
Highlights
- 60+ natively supported package and file types, including ML models and generic repositories.
- Comprehensive, enterprise-grade security solution integrated across the entire software supply chain, eliminating tool sprawl and alert fatigue. Go beyond scanning with contextual analysis and vulnerability prioritization, anti-tampering mechanisms, and signed provenance, ensuring best practices and compliance.
- Fast, secure distribution of verified, multi-repository release bundles to sync large-scale geo-distributed teams and accelerate deployments to any target: SaaS, self-managed, or connected devices.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/month |
|---|---|
Pro | $50.00 |
Enterprise X | $950.00 |
Dimension | Cost/unit |
|---|---|
JFrog Consumption Unit | $0.01 |
Dimensions summary
You buy this platform through a contract with three purchasing options. The JFrog Consumption Unit bills against a pool of consumption units, letting you draw down usage across the platform. The Pro and Enterprise X options are subscription tiers, each priced in units. Pro covers base package and model management with a set amount of included consumption. Enterprise X builds on Pro, adding high-availability setup, artifact federation, and enterprise access controls. Additional consumption above the included base is available and billed on usage, with tiered rates that lower the per-GB cost as consumption grows.
Top-of-mind questions for buyers
Both storage and data transfer count toward your total monthly consumption. Your plan includes a base amount of consumption measured in GB. Once you pass that included base, extra usage is billed automatically based on the GB you consume.
Extra consumption is priced in tiers by GB consumed. Each tier discount applies only to the consumption within that tier, not your whole usage. So as your GB volume rises into higher tiers, the per-GB rate for those additional GB drops.
The JFrog Consumption Unit draws down against a pool of units as you use the platform. Pro and Enterprise X are subscription tiers with a fixed included base of consumption. Usage above that base is billed automatically. Consumption Unit fits variable usage; the tiers suit steady, predictable workloads.
jfrog.com
Helpful?
Vendor refund policy
Contact service@jfrog.com
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
24/7 SLA support service@jfrog.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Digital.ai
By Cloudsmith
Top
10
In Continuous Integration and Continuous Delivery, Application Development, Security
Top
50
In Agile Lifecycle Management
Top
10
In Source Control
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Universal Artifact Management
Support for 60+ natively supported package and file types, including ML models and generic repositories across the software supply chain.
Integrated Security Analysis
Contextual vulnerability analysis with prioritization, anti-tampering mechanisms, and signed provenance integrated across the entire software supply chain.
Software Supply Chain Visibility
Single system of record providing complete visibility and control over all software packages, data, and AI assets across the software supply chain.
Secure Distribution
Fast, secure distribution of verified multi-repository release bundles with capability to sync large-scale geo-distributed teams and accelerate deployments.
AI and ML Asset Governance
Control and governance of AI models, agent skills, and MCP servers alongside traditional artifacts within a unified platform.
AI-Powered Predictive Analytics
Generate predictive insights across the software lifecycle to enable data-driven decision making and smarter software investments.
Unified DevOps and Security Integration
Integrate DevOps and security capabilities across the full software lifecycle with unified platform architecture.
Multi-Environment Application Deployment
Deploy applications to any target environment including mainframes, VMs, containers, and cloud platforms with support for thousands of simultaneous deployments.
Enterprise Agile Planning and Scaling
Scale agile practices across all organizational levels from individual teams to entire product portfolios with enterprise-grade planning capabilities.
Application Security and Protection
Implement DevSecOps protections during the build process to prevent tampering, reverse-engineering, and attack vectors including credential theft, cryptojacking, and script injection.
Universal Package Format Support
Support for 30 package formats enabling centralized management of diverse artifact types across different package ecosystems.
Dependency Firewall with Vulnerability Scanning
Caching of packages from open-source repositories with vulnerability scanning and policy compliance validation before distribution to developers.
Zero Trust Security Architecture
Implementation of zero-trust security workflows across services, teams and users with automated access control and risk mitigation.
Cloud-Native Global Distribution
Globally distributed cloud-native infrastructure optimized for fast and reliable artifact delivery across distributed teams and geographic locations.
ISO27001 Compliance and Access Management
ISO27001 accreditation with centralized access control, compliance management and security best practices implementation for software intellectual property protection.
Standard contract
No
No
No
Customer reviews
papa s.
Centralized Artifact Management, Needs UI Improvements
Reviewed on Sep 23, 2026
Review provided by G2
What do you like best about the product?
I really like JFrog's centralized management of artifacts and dependencies, which simplifies managing and storing software artifacts and dependencies in our development and CI/CD workflow. I use Artifact to store, manage, and retrieve Maven artifacts and other build dependencies, and I find its broader artifact management capabilities beneficial.
What do you dislike about the product?
I think JFrog could improve its user interface and overall ease of navigation. Sometimes, the repository and artifact navigation feels a bit complex, especially when dealing with multiple repositories and projects.
What problems is the product solving and how is that benefiting you?
I use JFrog to solve the problem of managing software dependencies and build artifacts in a centralized way.
Financial Services
Highly Reliable, Scalable Artifact Repository with Strong CI/CD Integration
Reviewed on Sep 23, 2026
Review provided by G2
What do you like best about the product?
A highly reliable and scalable enterprise artifact repository that excels in CI/CD integration, though some users find it expensive and its search functionality a bit clunky
What do you dislike about the product?
JFrog is often described as expensive, especially for small to mid-sized teams. Many essential features—such as advanced security scanning with Xray or high availability—are locked behind premium enterprise tiers, and the open-source version lacks core functionality.
What problems is the product solving and how is that benefiting you?
Ultimately, JFrog solves the chaos of binary management. The overarching benefit is speed paired with security. It allows development teams to automate their pipelines, release software much faster, and sleep well knowing the software they are deploying is organized, traceable, and free of known vulnerabilities.
Naveen C.
Reliable and Secure, Yet Demands Expertise
Reviewed on Sep 20, 2026
Review provided by G2
What do you like best about the product?
I find JFrog Artifactory absolutely reliable with its pristine uptime, which is crucial for maintaining our data pipelines. I love how it automates handoff security and ensures our environment remains consistent, removing the need for manual checks. The way it caches our external Python packages is a lifesaver, ensuring our scheduled data pipelines never fail due to public repo outages or deleted internet packages. It also automates compliance processes, so I don't have to manually verify if an open source data connector is secure or carries a risky license.
What do you dislike about the product?
The UI/UX of JFrog feels clunky and dated, with a highly enterprise-focused design. Setting up fine-grained access, repository chains, and retention policies requires specialized skills, which can be challenging.
What problems is the product solving and how is that benefiting you?
JFrog eliminates pipeline failures from broken dependencies, guarantees environment consistency, and automates security compliance, without the need for manual checks.
Cedrick B.
Comprehensive Repository Manager with Cost Challenges
Reviewed on Sep 19, 2026
Review provided by G2
What do you like best about the product?
I use JFrog as a universal repository manager and love the best feature: the universal package support. It solves the issue of running separate registries for each technology, supporting over 30 packages so each team can use the same platform. JFrog really ensures my deployments are fast, secure, and reproducible. The initial setup was very easy and quick.
What do you dislike about the product?
I have some concerns about JFrog's pricing. It's notoriously expensive, particularly for small-to-medium businesses, startups, or individual developers. The tier-based pricing structure often locks crucial features, like advanced security scanning, behind high-tier enterprise licenses. This makes alternatives like Nexus Repository Manager or cloud-native registries more financially appealing for smaller teams.
What problems is the product solving and how is that benefiting you?
I use JFrog to store, manage, and secure binary packages, ensuring my deployments are fast and reproducible. It solves running separate registries by supporting over 30 packages on the same platform.
Obert M.
Reliable Docker Image Storage and Easy Setup
Reviewed on Sep 18, 2026
Review provided by G2
What do you like best about the product?
I appreciate JFrog for its reliability and security. It's a great platform for storing and managing my Docker images and machine learning artifacts. I really like that it's super easy to set up, regardless of tech level, which has made the transition for my team seamless. Switching from using different platforms for different tasks to a single platform like JFrog has simplified our workflow significantly.
What do you dislike about the product?
none
What problems is the product solving and how is that benefiting you?
JFrog stores my Docker images and ML artifacts on one platform securely and reliably.