JFrog Ltd. , the Liquid Software company and creators of the JFrog Software Supply Chain Platform, today announced new solutions integrated with Zscaler, Cloudflare, and Netskope – three of the industry's leading Secure Access Service Edge (SASE) providers – to stop malicious packages at the network level before they reach users' machines.
The JFrog Traffic Controller universally works with SASE solutions and JFrog Curation to deliver network-layer enforcement that automatically reroutes software package download requests through JFrog Artifactory as the single source of truth – ensuring all software developers and AI agents can develop safely at speed, while giving the organization a traffic enforcement solution to prevent bypasses.
"Open source has powered software innovation for decades, but in today's zero-trust world, simply enabling traffic is no longer enough. Organizations need control over what enters their software supply chain, whether it is requested by a developer, an AI agent, or an automated tool. The answer is not another security alert or another gate that disrupts the developer workflow. It is a universal control point that ensures every package flows through one trusted system of record, where policy can be governed and enforced," said Shlomi Ben Haim, Co-Founder and CEO, JFrog. "JFrog Traffic Controller extends that enforcement to the network edge, creating one trusted path for software consumption with no exceptions, while developers and AI agents continue working without disruption."
Today's threat extends well beyond known malicious packages. AI coding agents like Claude Code, Cursor, Copilot, and Kiro now run directly on developer machines, autonomously pulling dependencies, installing libraries, and invoking build processes with little to no review. Agents don't always follow proxy configurations, consult approved package lists, or pause before fetching packages from default public registries.
The window between disclosure and active exploitation has shrunk to mere hours, making comprehensive visibility into every software component entering the organization the only reliable way to answer, "are we exposed?" before attackers already know the answer. Gartner recognized these increasing stakes – citing software supply chains as one of "four critical and unpredictable threats where attackers hold a significant advantage."
The JFrog Software Supply Chain Platform helps stop malicious and unwanted packages at the network layer and creates a complete, auditable record of every package entering the organization across companies using Zscaler, Cloudflare, and Netskope simultaneously. Rather than simply blocking out-of-policy requests, JFrog Traffic Controller transparently reroutes outbound package downloads through JFrog Artifactory, where JFrog Curation inspects each package against the configured security, license, and quality policies before it enters the organization.
"By partnering with Cloudflare, Netskope and Zscaler, our Traffic Controller works natively with the security infrastructure our customers already use," said Gal Marder, Chief Strategy Officer, JFrog. "We're making it possible for the entire software security ecosystem to enforce the same standard with zero friction: every package needs to be curated before first use, every transaction on record, no exceptions."
The JFrog Traffic Controller solution is available immediately through JFrog Curation, supporting Zscaler Internet Access (ZIA), Cloudflare Gateway with TLS-inspect and firewall policies, and Netskope One SSE with real-time protection policies. Adyen uses JFrog Curation as real-time firewall to block malicious open-source packages, enabling safe development without disruption.
"Bringing JFrog's package intelligence into Netskope's real-time protection policies gives joint customers a contextual, policy-driven answer to every package download," said David Willis, Vice President, Technology Alliances, Netskope.
About JFrog
JFrog Ltd., the creators of the unified DevOps, DevSecOps and MLOps platform, is on a mission to create a world of software delivered without friction from developer to production. Driven by a "Liquid Software" vision, the JFrog Software Supply Chain Platform is a single system of record that powers organizations to build, manage, and distribute software quickly and securely that is available, traceable, and tamper-proof. Integrated security features also help identify, protect, and remediate against threats and vulnerabilities. JFrog's hybrid, universal, multi-cloud platform is available as both SaaS services across major cloud service providers and self-hosted. Millions of users and 7K+ customers worldwide, including a majority of the Fortune 100, depend on JFrog solutions to securely embrace digital transformation in the AI era.
