Sold by: JFrog
Deployed on AWS
Automate trusted releases across the agentic software supply chain
4.2
Overview
Limited time offer: Get JFrog Pro for just $50/month, a $100/month savings. Available only through June 4, 2027.
Trusted by millions of developers, engineers, architects, and security professionals at thousands of enterprises, including the majority of the Fortune 100, the cloud-native JFrog Software Supply Chain Platform is the single system of record for all software packages, data, and AI assets across the software supply chain.
The JFrog Platform on AWS manages every input and output across your software supply chain with complete visibility and control. This massively scalable, fit-for-purpose platform is available as a fully managed SaaS, self-managed, and hybrid solution, giving organizations the deployment flexibility this AI era demands. By embedding security and evidence-based governance directly into development workflows from the first line of code to runtime, JFrog enables trusted, risk-mitigated releases without slowing teams down. And as your software factory evolves, JFrog governs every AI model, agent skill, and MCP server alongside traditional artifacts in one place, securing your entire agentic software supply chain.
JFrog Enterprise subscriptions include 24x7 Support and optional in-region 99.99% uptime SLA, plus an assigned support resource with regular touch points. The JFrog Platform is often leveraged to consolidate enterprise DevSecOps solutions for companies utilizing GitLab, Sonatype, Snyk, or Veracode, among others. Contact JFrog at cloud@jfrog.com for private offers on annual subscriptions, or visit < www.jfrog.com/pricing > for more information.
Key products and capabilities:
- JFrog Artifactory: Universal artifact management
- JFrog Xray: Modern, holistic SCA
- JFrog Advanced Security: Contextual analysis of vulnerabilities
- JFrog Curation: Early blocking of malicious open source packages
- JFrog AppTrust: Application risk governance
- JFrog ML: Control and govern AI/ML development
- JFrog AI Catalog: Detect, secure, and control every AI asset
- JFrog Runtime: Real-time Kubernetes security monitoring
- JFrog Distribution: Speed up secure software consumption
- JFrog Connect: IoT device management
Highlights
- 60+ natively supported package and file types, including ML models and generic repositories.
- Comprehensive, enterprise-grade security solution integrated across the entire software supply chain, eliminating tool sprawl and alert fatigue. Go beyond scanning with contextual analysis and vulnerability prioritization, anti-tampering mechanisms, and signed provenance, ensuring best practices and compliance.
- Fast, secure distribution of verified, multi-repository release bundles to sync large-scale geo-distributed teams and accelerate deployments to any target: SaaS, self-managed, or connected devices.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/month |
|---|---|
Pro | $50.00 |
Enterprise X | $950.00 |
Dimension | Cost/unit |
|---|---|
JFrog Consumption Unit | $0.01 |
Dimensions summary
You buy this platform through a contract with three purchasing options. The JFrog Consumption Unit bills against a pool of consumption units, letting you draw down usage across the platform. The Pro and Enterprise X options are subscription tiers, each priced in units. Pro covers base package and model management with a set amount of included consumption. Enterprise X builds on Pro, adding high-availability setup, artifact federation, and enterprise access controls. Additional consumption above the included base is available and billed on usage, with tiered rates that lower the per-GB cost as consumption grows.
Top-of-mind questions for buyers
Both storage and data transfer count toward your total monthly consumption. Your plan includes a base amount of consumption measured in GB. Once you pass that included base, extra usage is billed automatically based on the GB you consume.
Extra consumption is priced in tiers by GB consumed. Each tier discount applies only to the consumption within that tier, not your whole usage. So as your GB volume rises into higher tiers, the per-GB rate for those additional GB drops.
The JFrog Consumption Unit draws down against a pool of units as you use the platform. Pro and Enterprise X are subscription tiers with a fixed included base of consumption. Usage above that base is billed automatically. Consumption Unit fits variable usage; the tiers suit steady, predictable workloads.
jfrog.com
Helpful?
Vendor refund policy
Contact service@jfrog.com
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
24/7 SLA support service@jfrog.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Digital.ai
By Cloudsmith
Top
10
In Continuous Integration and Continuous Delivery, Application Development, Security
Top
50
In Agile Lifecycle Management
Top
10
In Source Control
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Universal Artifact Management
Support for 60+ natively supported package and file types, including ML models and generic repositories across the software supply chain.
Integrated Security Analysis
Comprehensive security solution with contextual vulnerability analysis, vulnerability prioritization, anti-tampering mechanisms, and signed provenance integrated across the entire software supply chain.
Supply Chain Visibility and Control
Single system of record providing complete visibility and control over all inputs and outputs across the software supply chain with evidence-based governance embedded in development workflows.
Secure Software Distribution
Fast, secure distribution of verified multi-repository release bundles with capability to sync large-scale geo-distributed teams and accelerate deployments to SaaS, self-managed, or connected devices.
AI and ML Asset Governance
Control and governance of AI models, agent skills, and MCP servers alongside traditional artifacts with detection, security, and control capabilities for every AI asset.
AI-Powered Predictive Analytics
Generate predictive insights across the software lifecycle to enable data-driven decision making and smarter software investments.
Unified DevOps and Security Integration
Integrate DevOps and security capabilities across the full software lifecycle to enable continuous delivery with built-in protections against tampering, reverse-engineering, and application-based attack vectors.
Enterprise Agile Planning and Scaling
Scale agile practices across all organizational levels from individual teams to entire product portfolios with consistency and efficiency.
Multi-Environment Application Deployment
Deploy applications to any target environment including mainframes, virtual machines, containers, and cloud platforms with support for thousands of simultaneous deployments and automatic rollback capabilities.
Continuous Testing at Scale
Enable enterprise-level testing with increased test coverage across web and mobile applications to deliver high-quality, error-free software.
Universal Package Format Support
Support for 30 package formats enabling organizations to create a single source of truth for artifact management across diverse software types.
Dependency Firewall with Vulnerability Scanning
Caching of packages from open-source repositories with vulnerability scanning and policy compliance validation before distribution to developers.
Zero Trust Security Architecture
Automated zero-trust workflows across services, teams and users for controlling software intellectual property and mitigating risks.
Cloud-Native Global Distribution
Fully managed, cloud-native architecture optimized for fast and reliable artifact delivery across distributed teams and geographic locations.
ISO27001 Accreditation and Access Control
ISO27001 accredited platform with comprehensive access management, compliance enforcement and security best practices implementation.
Standard contract
No
No
No
Customer reviews
Hospital & Health Care
Reliable Package and Asset Distribution via GitHub Actions
Reviewed on Aug 06, 2026
Review provided by G2
What do you like best about the product?
Honestly, I haven't explored too much but have some basic idea. We use it mainly for the package / asset distribution. Few GitHub actions are set up to push the builds / artifacts which are later used across applications.
What do you dislike about the product?
Sorry but don't have in depth knowledge, so cannot talk about that. The UI is okiesh, I think the authentication workflow could be improved. I see within few minutes my session expires and have to relogin.
What problems is the product solving and how is that benefiting you?
Asset storage, delivery (securely), regular scanning and much more.
I also like the GitHub, Attlasian integration features inhouse. Overall all good.
I also like the GitHub, Attlasian integration features inhouse. Overall all good.
Manufacturing
Centralized Artifact Management That Streamlines CI/CD
Reviewed on Aug 06, 2026
Review provided by G2
What do you like best about the product?
What I like most about JFrog is its centralized artifact management and its seamless integration with CI/CD pipelines. It offers a dependable way to store, manage, and distribute binaries across development teams, while also strengthening traceability and security. I also appreciate the user-friendly interface, the automation features, and the support for multiple package types, which together help streamline software delivery and improve overall development efficiency.
What do you dislike about the product?
One area where JFrog could improve is the learning curve for new users. Some advanced features and repository configurations can be complex to understand initially. Additionally, troubleshooting permission issues or repository settings can sometimes require more detailed documentation and administrative support.
What problems is the product solving and how is that benefiting you?
JFrog solves the challenge of managing and distributing software artifacts and dependencies across the development lifecycle. It provides a centralized repository that helps ensure build consistency, version control, and traceability. For our team, this has streamlined CI/CD processes, reduced dependency-related issues, improved release reliability, and made it easier to manage and secure software packages across multiple projects and environments.
Vivek K.
Universal Package Management Simplified with JFrog
Reviewed on Aug 06, 2026
Review provided by G2
What do you like best about the product?
I like the universal package management feature of JFrog, as it really makes life easier for us. We were pushing Docker images, Helm charts, Maven artifacts, and packages, and having a centralized system saves us a lot of time and configuration overhead. Furthermore, the initial setup was pretty easy, thanks to the help from the professional services and onboarding teams.
What do you dislike about the product?
I think there is room for improvement in the areas of permission and onboarding. The permission targets and the role-based access control models are powerful but can be overly complex sometimes, making managing permissions a bit complicated. The UI responsiveness could also be better. Additionally, I find the pricing for smaller teams to be an issue. The cost difference between basic usage and enterprise functionality is hard to justify, particularly for smaller teams, and I think this could be looked into by the CFO.
What problems is the product solving and how is that benefiting you?
I rely on JFrog for universal package management. It centralizes docker images, home charts, and Maven artifacts into a single source, eliminating manual tasks and multiple registry tools, saving a lot of configuration overhead and simplifying our work.
Jagmohan D.
Easy-to-Find Artifacts and Strong Supply Chain Auditing with Xray
Reviewed on Aug 04, 2026
Review provided by G2
What do you like best about the product?
The best thing about JFrog is how accessible it makes artifacts. They’re arranged so everything is easy to find and not scattered across projects. It also has many features that enable you to audit supply chain risk, with Xray being the best of them.
What do you dislike about the product?
From the perspective of people who have a hard time using JFrog, I’d say that finding different artifacts can be confusing. Sometimes the artifact is there, but we still have to go to different places to locate it.
What problems is the product solving and how is that benefiting you?
It helps us solve the problem of removing vulnerabilities from the artifacts our organization uses. We decided that we won’t use any artifact with critical vulnerabilities, and JFrog Xray reports help us achieve that.
Chaitya M.
JFrog Makes Software Delivery More Efficient
Reviewed on Jul 25, 2026
Review provided by G2
What do you like best about the product?
What I like best about JFrog is its support for multiple package types and its centralised artifact management. It makes it easy to store, organise, and share artifacts across different projects from a single platform. The built-in security scanning is also very useful, as it helps detect vulnerabilities early. Overall, JFrog simplifies the software delivery process and integrates well with modern CI/CD pipelines.
What do you dislike about the product?
One downside of JFrog is that it has a steep learning curve, especially for new users. Setting up repositories, permissions, and integrations can take some time if you're not familiar with the platform. It can also feel overwhelming due to the number of features available, and troubleshooting configuration issues isn't always straightforward. However, once everything is set up, it becomes much easier to manage.
What problems is the product solving and how is that benefiting you?
JFrog helps us manage all our software artifacts in one central place, making it easier to store, version, and distribute packages across different environments. It also improves our CI/CD process by integrating smoothly with build and deployment tools. The built-in security scanning helps identify vulnerabilities early, reducing risks and saving time during releases. Overall, it makes software delivery more organised, secure, and efficient.