Sold by: JFrog
Deployed on AWS
The only platform to give you end-to-end visibility, security, and control
for automating delivery of trusted releases.
4.2
Overview
Trusted by millions of developers, engineers, architects, and security professionals at thousands of enterprises, including the majority of the Fortune 100, the cloud-native JFrog Software Supply Chain Platform is the single source of truth for all software packages, data, and ML models utilized and generated in the development process.
The JFrog Platform on AWS manages all software inputs and outputs, providing organizations with complete visibility across their supply chain. This flexible, massively scalable, and hybrid platform helps improve developer efficiency by reducing wait times from builds to security scans. It allows organizations to take to the clouds with agility, leveraging both managed and self-managed instances. Critically, it enables teams to manage application risk end-to-end by applying evidence-based policies across the SDLC. Finally, the JFrog Platform helps accelerate AI/ML pipelines by treating models like a package, simplifying AI development and ensuring the success of initiatives.
Contact JFrog at cloud@jfrog.com for private offers on annual subscriptions, or visit <www.jfrog.com/pricing > for more information.
The JFrog Platform is often leveraged to consolidate enterprise DevSecOps solutions for companies utilizing GitLab, Sonatype, Snyk, or Veracode, among other solutions. Key capabilities include:
- Universal artifact management with JFrog Artifactory
- Modern, holistic SCA with JFrog Xray
- Contextual analysis of vulnerabilities with JFrog Advanced Security
- Early blocking of malicious open source packages with JFrog Curation
- Application risk governance with JFrog AppTrust
- Control and govern AI/ML development with JFrog ML
- Simplify model discovery and access with JFrog AI Catalog
- AI-assisted remediation with Agentic Software Supply Chain Security
- Real-time Kubernetes security monitoring with JFrog Runtime
- Speed up secure software consumption with JFrog Distribution
- IoT device management with JFrog Connect
- Includes 24x7 Support and in-region 99.99% uptime SLA, plus an assigned support resource with regular touch points
Highlights
- 50+ natively supported package and file types, including ML models and generic repositories.
- Comprehensive, enterprise-grade security solution integrated across the entire SDLC, eliminating tool sprawl and alert fatigue. Go beyond scanning with contextual analysis and vulnerability prioritization, anti-tampering mechanisms, and signed provenance, ensuring best practices and compliance.
- Fast, secure distribution of verified, multi-repository release bundles to sync large-scale geo-distributed teams and accelerate deployments to any target: SaaS, self-managed, or connected devices.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/month |
|---|---|
Pro | $150.00 |
Enterprise X | $950.00 |
Dimension | Cost/unit |
|---|---|
JFrog Consumption Unit | $0.01 |
Vendor refund policy
Contact service@jfrog.com
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
24/7 SLA support service@jfrog.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Digital.ai
By Cloudsmith
Top
10
In Continuous Integration and Continuous Delivery, Application Development, Security
Top
50
In Agile Lifecycle Management
Top
10
In Source Control
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Artifact Repository Management
Universal artifact management supporting 50+ natively supported package and file types, including ML models and generic repositories.
Software Composition Analysis
Modern, holistic software composition analysis with contextual vulnerability analysis and prioritization across the software development lifecycle.
Supply Chain Security Governance
Application risk governance with evidence-based policy enforcement, anti-tampering mechanisms, and signed provenance across the entire software development lifecycle.
Secure Artifact Distribution
Fast, secure distribution of verified, multi-repository release bundles with geo-distributed synchronization capabilities to multiple deployment targets.
AI-Powered Predictive Analytics
Generate predictive insights across the software lifecycle to enable data-driven decision making and smarter software investments.
Unified DevOps and Security Integration
Integrate DevOps and security capabilities across the full software lifecycle to enable continuous delivery with built-in protections against tampering, reverse-engineering, and application-based attack vectors.
Enterprise Agile Planning and Scaling
Scale agile practices across all organizational levels from individual teams to entire product portfolios with consistency and efficiency.
Multi-Environment Application Deployment
Deploy applications to any target environment including mainframes, virtual machines, containers, and cloud platforms with support for thousands of simultaneous deployments and automatic rollback capabilities.
Continuous Testing at Scale
Enable enterprise-level testing with increased test coverage across web and mobile applications to deliver high-quality, error-free software.
Universal Package Format Support
Support for 30 package formats enabling organizations to create a single source of truth for artifact management across diverse software types.
Dependency Firewall with Vulnerability Scanning
Caching of packages from open-source repositories with vulnerability scanning and policy compliance validation before distribution to developers.
Zero Trust Security Architecture
Automated zero-trust workflows across services, teams and users for controlling software intellectual property and mitigating risks.
Cloud-Native Global Distribution
Fully managed, cloud-native architecture optimized for fast and reliable artifact delivery across distributed teams and geographic locations.
ISO27001 Accreditation and Access Control
ISO27001 accredited platform with comprehensive access management, compliance enforcement and security best practices implementation.
Standard contract
No
No
No
Customer reviews
henrix m.
Efficient Artifact Management with Minor UI Challenges
Reviewed on May 26, 2026
Review provided by G2
What do you like best about the product?
I appreciate the ease of access with JFrog, which makes it more convenient for managing artifacts. I also like the universal package management and JFrog Xray features.
What do you dislike about the product?
The UI feels complex at times, and simplifying the configuration of CI/CD tools would be helpful. The initial setup was somewhat complex.
What problems is the product solving and how is that benefiting you?
I use JFrog for artifact management and shipping my software. I like the ease of access.
Financial Services
Powerful Artifactory & Security Scanning, but Costly and Complex to Get Started
Reviewed on May 21, 2026
Review provided by G2
What do you like best about the product?
The artifactory is with no doubt the killer feature. I can save docker images, npm packages, AI models and so on… without frictions. Also the ecosystem is really good, especially the security scanning
What do you dislike about the product?
High costs and unpredictability of it. Complex ecosystem, hard entry barrier. Resource intensive sometimes. Although, sometimes is overkill as there are several registries like GitHub and gitlab when they already let you host if you use them
What problems is the product solving and how is that benefiting you?
hundreds of automated servers run tests simultaneously, when every single test server tries to pull/push giant Docker images from external clouds at the same time, it chokes the network bandwidth and creates massive delays. It let us speed up time to market features
Banking
Great Fit for DevOps Pipelines with Strong Xray Security and Versioning
Reviewed on May 19, 2026
Review provided by G2
What do you like best about the product?
I like that it fits my DevOps pipelines and it has great security feature with Xray. It's great for artifact versioning beacause i have several different enviroments to manage
What do you dislike about the product?
Sometimes i get weird alert messages that dont address the proper issue, also retention policy gets to not work properly as defined. Sometimes remote repository image pull works slower
What problems is the product solving and how is that benefiting you?
Im using Jfrog as a centralizing place for all of my artifacts used inside the CI/CD pipelines. Also it helps me with the promotion problems, promotion of one artifact all along
Himanshu J.
Strong artifact management platform for DevOps teams
Reviewed on May 15, 2026
Review provided by G2
What do you like best about the product?
JFrog is really useful when you need a centralized place to manage build artifacts, Docker images, packages and dependencies across teams. Security scanning and supply chain visibility are nice additions, especially with modern DevSecOps expectations.
What do you dislike about the product?
The UI feels capable but not always intuitive. Finding specific settings or admin configurations sometimes takes more clicks than it should.
Initial setup can also be heavier than expected if you’re not already familiar with artifact repository concepts. Storage management and cleanup policies need planning too, otherwise things can grow messy fast.
Initial setup can also be heavier than expected if you’re not already familiar with artifact repository concepts. Storage management and cleanup policies need planning too, otherwise things can grow messy fast.
What problems is the product solving and how is that benefiting you?
It solves the dependency/artifact chaos problem. Instead of builds depending on public registries or scattered package sources, everything becomes controlled and reproducible.
Arkajit D.
Efficient, Scalable Artifact Management That Streamlines the Software Delivery Lifecycle
Reviewed on May 11, 2026
Review provided by G2
What do you like best about the product?
The thing that I appreciate most about JFrog is its efficiency in managing artifacts, distributing software, scanning for security vulnerabilities, and handling DevOps practices in one single platform without adding any extra operational complexity.
In rapidly scaling engineering setups, where there is constant creation, deployment, and management of cloud-based applications from multiple engineering teams, having control over software packages, their dependencies, and the release pipelines has been a challenge. JFrog has been immensely useful for streamlining and improving the entire software delivery lifecycle.
The ability to manage artifacts and packages via JFrog Artifactory stands out as one of the main advantages for me.
Performance and scalability have also been strong in my experience, particularly when handling large-scale artifact storage, container registries, and high-frequency deployment pipelines.
In rapidly scaling engineering setups, where there is constant creation, deployment, and management of cloud-based applications from multiple engineering teams, having control over software packages, their dependencies, and the release pipelines has been a challenge. JFrog has been immensely useful for streamlining and improving the entire software delivery lifecycle.
The ability to manage artifacts and packages via JFrog Artifactory stands out as one of the main advantages for me.
Performance and scalability have also been strong in my experience, particularly when handling large-scale artifact storage, container registries, and high-frequency deployment pipelines.
What do you dislike about the product?
Dislikes about JFrog include its complexity to be configured and managed in large environments with customized CI/CD workflows. In other words, while the platform is indeed very useful and powerful in enterprise DevOps and artifact management use cases, at times it could be somewhat complicated to set up.
One particular difficulty I've encountered is the necessity to understand various aspects of repository management, including permission handling, pipeline integration, and software supply chains. It becomes somewhat burdensome to onboard engineers into using the platform if there are not so many of them or their background is somewhat simple.
In terms of usability and user experience, one might say that the platform is very efficient and offers lots of opportunities but some administrative functions may come as challenging. Namely, working with multiple repositories, access controls, and distributed environments at once can require certain skills and experience.
Finally, I would mention some of the difficulties I had with some of the integrations and automation processes. While JFrog works excellently within different CI/CD ecosystems in general, it might take some effort to make the most out of advanced workflow configurations and automations.
One particular difficulty I've encountered is the necessity to understand various aspects of repository management, including permission handling, pipeline integration, and software supply chains. It becomes somewhat burdensome to onboard engineers into using the platform if there are not so many of them or their background is somewhat simple.
In terms of usability and user experience, one might say that the platform is very efficient and offers lots of opportunities but some administrative functions may come as challenging. Namely, working with multiple repositories, access controls, and distributed environments at once can require certain skills and experience.
Finally, I would mention some of the difficulties I had with some of the integrations and automation processes. While JFrog works excellently within different CI/CD ecosystems in general, it might take some effort to make the most out of advanced workflow configurations and automations.
What problems is the product solving and how is that benefiting you?
In the past, our development process had an inefficient workflow of artifact storage, dependency management, and CI/CD pipeline. As applications were delivered on cloud, microservice, container, and cross-team levels, it was very hard to maintain transparency and governance of software packages and releases.
The biggest advantage I found with JFrog is its ability to manage artifacts and packages through JFrog Artifactory. Previously, we had to manage different repositories and track dependencies manually, but now it’s way more organized. It's pricing is also balanced.
The biggest advantage I found with JFrog is its ability to manage artifacts and packages through JFrog Artifactory. Previously, we had to manage different repositories and track dependencies manually, but now it’s way more organized. It's pricing is also balanced.