# Manage AI and Software Artifacts at Scale

Ensure developers and agents have uninterrupted access to trusted,

governed artifacts to accelerate autonomous software delivery

## What is Artifactory

JFrog Artifactory is a universal artifact management platform that serves as the system of record for everything in your software supply chain, from traditional binaries, packages, containers, and releases to AI/ML models and agent-specific assets like skills, plugins, and primitives.

As the central hub for DevOps, developers, and AI engineering teams, Artifactory integrates with your existing tools and workflows to automate delivery for both humans and AI agents, capture attestations, ensure release integrity, and provide unrivaled visibility across the development lifecycle.

Dependency management, proxying, and caching

Software governance and lifecycle management

Kubernetes, container, model, and agent registry

A single source of truth for humans and agents

## See Artifactory in Action

Discover how Artifactory, the industry-leading solution for universal repository management, seamlessly integrates DevOps work streams to power fast, reliable, and secure software releases for enterprise giants and booming startups alike.

## Artifact management the way it should be

### Universal

### Manage every artifact and release  **in a single place**

Eliminate silos and sprawl with the artifact manager that sets the bar for universality.

- 60+ artifact types: packages, files, and AI assets
- 100s of ecosystem integrations
- Multiple installation and deployment options
- Pre-vetted IDE extensions, agent plugins, skills, and MCP servers

### Scalable

### **Effortlessly scale your SDLC**  across multiple sites

Deploy across any topology and environment strategy to support growing global development and deliver ultimate uptime & resiliency.

- Premium 99.99% in-region uptime SLA
- Automated bi-directional repository sync
- Synchronize policy, assets, and access across multiple sites
- Project-based resource management
- Fully managed SaaS, self-managed, multi-cloud, and hybrid support

### Secure

### **Lay the foundation for a secure software supply chain**

Secure your supply chain from a single place and control how packages are brought in, used, and accessed across your organization.

- Proxy public registries and AI model hubs, preventing direct download from the internet
- Robust RBAC and governance policies
- Enterprise platform security (SSO, PrivateLink, etc.)
- Identify and block vulnerable packages, IDE extensions, and AI assets from use

### Automated

### Improve build speeds and  **accelerate CI/CD pipelines**

Cache dependencies and builds close to their consumption points to ensure fast availability. Take advantage of multiple options to power workflow automation.

- Dependency and build caching
- Open-source JFrog CLI
- Rest APIs for nearly everything
- Custom plugins with robust event triggers

### Performance

### **Deliver enterprise performance while optimizing costs**

Streamline your workflows by preventing duplicates, removing unneeded artifacts, and archiving non-operational assets kept for regulatory purposes.

- Checksum optimized storage and replication
- Automated cleanup and asset archival
- Location based DNS routing

## Over 6,500 DevOps Teams Trust JFrog

Serving over 80% of the Fortune 100

## Create an unified agentic software supply chain

Version, manage, and secure every AI artifact, from models to agents, in a way that makes sense for stakeholders across your org.

- Proxy Hugging Face, Nvidia NGC, and other AI model sources
- Manage private models with a simple SDK
- Enterprise registries for MCP servers and agent assets
- Automatically route AI coding agents through Artifactory for secure, governed access

## Simplify auditing and governance across the SDLC

Manage, collect, and attest every action taken to bring a piece of software to life, whether by a human or an agent, from coding to testing to sign offs.

- Immutable release context, tracking, and auditing
- Security policy and promotion gating
- Attestation and evidence capture

## Supercharge secure developer and agent workflows

Empower developers, and the AI agents working alongside them, to find the best packages for their projects, live in their IDE, without changing anything about the way they work.

Find packages for use in projects

Secured IDE plugins and agent assets

Single URL resolution

## Powering enterprise software development lifecycles

Artifactory serves as mission-critical infrastructure to accelerate, secure, and create visibility across every team building software, human and agent alike.

### The Trusted Source for   Curated Artifacts, IDE Extensions, and AI Assets

Curate an approved set of artifacts, IDE extensions, models, MCP servers, agent plugins, and skills for global development teams and the AI agents working alongside them. Proactively identify and block open source and AI supply chain risks before development starts. Keep a locally cached set of artifacts always available to the developers and agents who need them.

### Enhance the Integrity, Reliability, and Speed of CI/CD

Connect the disparate tools and workflows of your CI/CD with Artifactory at the center. Receive and serve up required dependencies and builds wherever needed while simultaneously capturing important metadata.

### Ensure Constant Shared Access for Distributed Teams

Take software to the most remote, resource-constrained parts of any organization. Combine Artifactory’s replication, federation, and distribution capabilities to distribute software across teams in a highly performant and resilient manner.

### Serve Components to Production Runtimes

Take advantage of the most advanced registry available today. Deploy Artifactory edges close to consumption points in a highly-available configuration. Leverage a single source for images, helm charts, IaC files, and more that maintains traceability from developer to production.

## Accelerate AI & Software Delivery with Built-In Security  Explore Other JFrog Products

### JFrog AppTrust

Automate release governance with signed evidence at every lifecycle gate

### JFrog Curation

Seamlessly curate software packages and ML models

### JFrog Xray

Integrated SCA for software artifacts and ML models

### JFrog AI Catalog

Secure and govern every AI model, MCP server, and agent skill your developers consume

## Additional JFrog Artifactory Resources

### Frequently Asked Questions

##### What types of artifacts does Artifactory manage?

Artifactory is universal, meaning it supports a wide variety of package formats and file, including Maven (Java), npm (Node.js), PyPI (Python), Docker, Helm, NuGet (.NET), Debian, RPM, Terraform, ML Models, and many more.

##### How do I upload artifacts to Artifactory?

The method for uploading depends on the package type. Typically, you'll use command-line tools specific to your package manager (like ‘npm publish’ for npm) configured to point to your Artifactory repository. Artifactory also provides a web interface for manual uploads.

##### Can I integrate my CICD tools with Artifactory?

Yes, Artifactory is designed to integrate seamlessly with popular CI/CD tools like Jenkins, GitHub Actions, Azure DevOps and many more. This integration allows for automated artifact resolution and deployment as part of your build and release pipelines.

##### Can I manage my org’s in-house Agent Skills with JFrog Artifactory?

Yes, you can manage and version all your first-party Agent Skills in JFrog Artifactory with full role-based access controls.

##### What AI artifacts does Artifactory support?

Artifactory manages AI/ML models, MCP servers, Agent Skills, Agent Plugins, and Agent Packages, each with role-based access, versioning, and integrated governance.
