Software Pricing and Packages | JFrog
Platform Pricing & Plans
The Single Source of Truth for your Software Supply Chain
Have a pricing question?
SaaS Self-Managed
Limited Time Offer
Pro
Artifactory - The Universal Private Registry for all Binaries and AI Artifacts.
$150 / Month
$50 / Month
Save $100/mo
Buy on Marketplace
- DevOps
- 25 GB Base Consumption
Additional consumption available and billed automatically based on usage.
- Universal Binary Management
The world’s most advanced artifact, container, AI asset, and ML model management solution with native support for 60+ technologies including public registry proxying, and single URL resolution.
- Scalable Container Registry
Manage containers alongside Helm charts to easily deploy applications to production with full traceability. JFrog’s image layer-based container management optimizes consumption for faster transfers and scans while providing detailed visibility into the application layer.
- Unlimited Docker Hub Pulls
Our relationship with Docker provides JFrog SaaS users unlimited unauthenticated public Docker Hub registry pulls via the JFrog Platform to ensure uninterrupted pipelines.
- Comprehensive AI Model Registry
JFrog offers the most advanced model registry allowing teams to store all model data, files, and components together for simplified versioning, traceability, and distribution.
AI Asset Repositories NEW Bring the assets your agents rely on directly under your control. Manage MCP Servers, Skills, Plugins, and APM files from one centralized system of record.
OOTB CI/CD Integration
Enhance pipeline automation to accelerate software delivery. JFrog integrates with every popular CI/CD system from Jenkins to GitHub Actions.
- Multi-agent Support NEW Natively connect the JFrog Platform to your preferred coding agents so agents operate within you policies and leverage a trusted path for package resolution. Supports Claude, Codex, Cursor, Devin, VS Code, IntelliJ, CoPilot, OpenCode, and Kiro.
Full Features
Enterprise X
Highly Available, Secure & Trusted System of Record for All Artifacts and AI Assets at Enterprise Scale.
Customize Package
Unified Security
Ultimate Security
Starting at:
$950 / Month
Buy on Marketplace
Request a Quote
Everything in Pro, plus: 99.9% Uptime | 24/7 SLA Support
- DevOps
- 125 GB Base Consumption
Additional consumption available. Scaleable consumption rates available with annual contracts.
- Repository Federation
Extend your SDLC across multiple locations by automatically syncing artifacts across federated (linked) repositories in different sites with one way and bi-directional replication.
- Automated Cleanup
Run user-defined automated policies to ensure the hygiene of your repositories. All cleanup runs are logged and auditable.
- Enterprise Access Control (SSO)
Manage users and groups at scale with OOTB identity management integrations using SAML and SCIM. Manage granular RBAC permissions for full control over access and interactions platform-wide.
- Unified Platform Experience with GitHub
Sync roles, projects, job outcomes, security results, and artifact details across GitHub and JFrog for seamless visibility and navigation across platforms. Includes native integration with GitHub Actions. *Integration of advanced scanning results from JFrog into GitHub requires appropriate JFrog security solutions.
DevSecOps
- Code & Binary SCA
Identify and resolve security vulnerabilities (CVEs) and license compliance issues in your open-source dependencies for both source code and binaries.
- ML Model Scanning & Security
Extend package scanning capabilities to ML models to identify vulnerabilities, malicious models, license issues, and operational risk.
- JFrog Advanced Security
The only application security suite built directly into your software system of record, giving you an unbroken, auditable line of security from code to runtime. Includes. See full list of capabilities
Contextual analysis for efficient vulnerability remediation
- Robust Software Composition Analysis (SCA)
- Leaked secrets detection
- Runtime Integrity security
- Code security scanning (SAST)
- Misconfigurations
- IaC scanning
JFrog Curation
Now with Package Traffic Controller and coverage for all AI asset types.
The proactive gatekeeper that blocks risky and non-compliant open-source packages, AI assets (models, skills, MCP servers), and IDE extensions from entering the organization, protecting your software supply chain. Automatically enforces company policy and serves up compliant alternatives, ensuring a frictionless developer workflow and a complete audit trail.
- Snippet Detection
Your code's "insurance policy": Trust that every snippet, whether AI-generated or not, is visible, secure, compliant and in an auditable SBOM.
Zero Touch Remediation NEW Automatically replaces vulnerable or risky packages already running in your pipelines by matching the best available patched version from multiple sources, without breaking builds or interrupting developers.
Universal Patch Coverage NEW Zero-Touch Remediation's fix coverage includes third-party maintained images and packages from ecosystem partners. JFrog automatically selects and applies the best available fix, governed by your policies. Supports Chainguard, Echo, Moderne, Seal Security, Broadcom (Tanzu), Tuxcare, and Red Hat.
Package Traffic Controller NEW Bring software supply chain security to the network edge via integration with Zscaler, Netskope, and Cloudflare. Traffic Controller intercepts developer and agent direct public registry requests and reroutes them through JFrog to ensure security and governance policies apply.
AI Sec & Automation
- Universal AI Asset Registry NEW Your MCP and Skills private registry. One source to manage, serve, and govern access the AI primitives used in your organization - models, MCP servers, skills, plugins and more.
AI Asset Security Scanning NEW Keep your organization safe with AI powered scanners that detect and block malicious elements in skills, MCP servers, and plugins. Leverage JFrog provided models, or provide your own model key. Available with Unified Security
AI Asset Enforcement NEW Prevent unapproved AI assets from being used by agents and developers natively in the coding agent with Agent Guard. Only approved assets run. Available with Unified Security.
Shadow AI Detection
Actively detect unmanaged and uncontrolled AI assets in your software supply chain and developer workstations. Available with Unified Security.
Full Features
Full Platform Experience
Enterprise +
Unified Platform Powering DevOps, Security, Governance and Compliance for the AI-driven Software Supply Chain.
Customize Package
Unified Security
Ultimate Security
Custom Pricing:
Let's Talk
Contact Us
Everything in Enterprise X, plus: Multisite Federation and Distribution
- DevOps
- Custom Consumption
Define the level of consumption you require with the best rates available at scale.
- 99.99% Guarantee
Step up to the only 99.99% in-region availability for mission-critical resilience. Premium infrastructure delivers the performance predictability required to maintain non-stop software delivery at any scale.
Platform Federation NEW Simplify management and unite multiple JFrog sites as one federated system. Projects, access, and policies are defined once and synced to every relevant site. Repositories are provisioned and populated automatically via Stage-to-Site mapping.
Advanced Latency Optimization
Accelerate the distribution and consumption of artifacts across complex topologies of your choice with the use of private edge nodes and CDN.
- Enhanced Network Access
Control access to JFrog sites with IP and geo filtering while optimizing performance via DNS routing.
- Immutable Release Distribution
Ensure the integrity of your releases through to consumption with immutable multi-technology Release Bundles (validated SBOM) and permission-based distribution Edges.
- Smart Archiving
Simplify auditing, optimize performance and deliver data retention compliance with automated, policy-based, long-term archiving as a service and one-click restore. Multi-year contract required.
- 24/7 High Touch Support
The support you need to accelerate time to value and maximize long term benefit from the JFrog Platform. Includes critical incident management, ongoing account planning/reviews, and an assigned technical account lead.
DevSecOps
- Transitive Contextual Analysis
Gain applicability information along with a clear remediation path for transitive dependency CVEs.
- IDE Extensions Control
Safeguard developer environments by validating and governing third-party extensions, eliminating hidden risks in the toolchain.
- Agentic Remediation
Accelerate code delivery, reduce risk, and build software with confidence through real-time AI-automated source code and dependency vulnerability remediation.
- Runtime Impact
Extend Runtime Integrity to provide additional layers of analysis delivering workload and process level insights including tracing issues back to the developer owner.
- Bundle & Save
- AI Sec & Automation
- Experiment Tracking
Keep a comprehensive record of all your machine learning experiments, including code, data, hyperparameters, and results, to ensure reproducibility and collaboration.
- Multi-Environment Setup
Deploy model services across multiple environments for consistency across all stages such as development, staging, and production.
- Multi-Cloud Deployments
Deploy model services across multiple cloud providers.
- Multi-Region Deployments
Ensure high availability and low latency for your global users by deploying models across different geographic regions.
- Advanced Deployments
Leverage A/B testing and shadow deployments for enhanced evaluation of model performance.
- Feature Store
Store, manage, and serve machine learning features for training and inference ensuring consistency, reusability, and discoverability of features across teams and models, accelerating development and improving model performance.
- Bundle & Save
- DevGovOps with AppTrust
- Application Business Context
Minimize MTTR and confusion by assigning owners and business criticality to each application. Use JFrog AppTrust to automatically assign packages and artifacts to applications.
Extensive Compliance Policies NEW Establish control over software at the application and repository level. Build and apply policies that govern both the lifecycle of a release and how it was built. AI verification policies use plain language to ensure the intent, process, and tools used to create a release complies with your standards. Available with AppTrust.
OOTB Compliance Frameworks NEW Apply pre-built DORA, CRA, and NIST policy templates to release gates with one click. Ensure proper scoping and coverage with real-time compliance scoring. Available with AppTrust.
Continuous Application Governance
Continuously monitor for security, quality, and compliance at every stage, even post-release support windows. Identify and prioritize new CVEs and malicious packages in production applications for fast remediation. Available with AppTrust.
Prompt-to-Release Traceability NEW Automatically capture agent interactions and generating a signed evidence chain from commits, PRs, and Jira tickets, attached to every application version. Generate a complete audit picture to support compliance and regulation. Available with AppTrust.
Partner Evidence Ecosystem
Streamline compliance and operations by automatically collecting evidence (attestations) throughout the application lifecycle. Leverage JFrog Artifactory and JFrog’s extensive ecosystem of partners such as NVIDIA, GitHub and ServiceNow.
Policy-as-Code Playground NEW Give every team member the power to generate policy-as-code. Translate plain english into Rego-based policies via an AI assisted workspace. Once your policy is defined, validate it against real application versions to ensure it works as intended before deployment.
Full Features
Pro X
Artifactory - The Universal Private Registry for all Binaries and AI Artifacts.
Starting at
$27,000 / Year
Request a Quote
1 Server | 24/7 SLA Support
- DevOps
Universal Binary Repository
Scalable Container Registry
Comprehensive AI Model Registry
OOTB CI/CD Integration
Enhance pipeline automation to accelerate software delivery. JFrog integrates with every popular CI/CD system from Jenkins to GitHub Actions.
- SCA & Model Security
Accuracy optimized scanners identify vulnerabilities, malicious packages, license issues, and operational risk in open source software including ML models and containers.
Full Features
Enterprise X
Highly Available, Secure & Trusted System of Record for All Artifacts and AI Assets at Enterprise Scale.
Customize Package
Unified Security
Ultimate Security
Starting at:
$51,000 / Year
Request a Quote
Everything in Pro X, plus: 3 Servers | 24/7 SLA Support
- DevOps
- High Availability Setup
Deploy multiple redundant nodes to ensure continuous uptime, load balancing, and failover support.
Repository Federation
Automated Cleanup
Run user-defined automated policies to ensure the hygiene of your repositories. All cleanup runs are logged and auditable.
Enterprise Access Control (SSO)
Unified Platform Experience with GitHub
Identify and resolve security vulnerabilities (CVEs) and license compliance issues in your open-source dependencies for both source code and binaries.
- ML Model Scanning & Security
Extend package scanning capabilities to ML models to identify vulnerabilities, malicious models, license issues, and operational risk.
JFrog Advanced Security
JFrog Curation
Now with Package Traffic Controller and coverage for all AI asset types.
- Snippet Detection
Your code's "insurance policy": Trust that every snippet, whether AI-generated or not, is visible, secure, compliant and in an auditable SBOM.
AI Sec & Automation
- Universal AI Asset Registry NEW Your MCP and Skills private registry. One source to manage, serve, and govern access the AI primitives used in your organization - models, MCP servers, skills, plugins and more.
Shadow AI Detection
Actively detect unmanaged and uncontrolled AI assets in your software supply chain and developer workstations. Available with Unified Security.
Full Features
Full Platform Experience
Enterprise +
Highly Available, Secure & Trusted System of Record for All Artifacts and AI Assets at Enterprise Scale.
Customize Package
Unified Security
Ultimate Security
Custom Pricing:
Let's Talk
Contact Us
Everything in Enterprise X, plus: 6 Servers | Multisite Federation and Distribution
- DevOps
Platform Federation NEW Simplify management and unite multiple JFrog sites as one federated system. Projects, access management, and policies are defined once and synced to every relevant site. Repositories are provisioned and populated automatically via Stage-to-Site mapping.
Advanced Latency Optimization
Accelerate the distribution and consumption of artifacts across complex topologies of your choice with the use of private edge nodes and CDN.
- Immutable Release Distribution
Ensure the integrity of your releases through to consumption with immutable multi-technology Release Bundles (validated SBOM) and permission-based distribution hubs.
Smart Archiving
24/7 High Touch Support
Gain applicability information along with a clear remediation path for transitive dependency CVEs.
- IDE Extensions Control
Safeguard developer environments by validating and governing third-party extensions, eliminating hidden risks in the toolchain.
- Agentic Remediation
Accelerate code delivery, reduce risk, and build software with confidence through real-time AI-automated source code and dependency vulnerability remediation.
Runtime Impact
AI Sec & Automation
- Experiment Tracking
Multi-Cloud Deployments
Deploy model services across multiple cloud providers.
- Multi-Region Deployments
Ensure high availability and low latency for your global users by deploying models across different geographic regions.
- Advanced Deployments
Leverage A/B testing and shadow deployments for enhanced evaluation of model performance.
Feature Store
DevGovOps with AppTrust
- Application Business Context
Continuous Application Governance
Partner Evidence Ecosystem
Full Features
*Optional add-ons for enhanced software supply chain security.
JFrog Bundles
JFrog Security Bundles
Unified Security
Protect your SSC from code to production: Block risks, remediate efficiently and cover source and binary code. Available for Enterprise X and Enterprise +
Ultimate Security
Includes Unified, plus: AI catalog and full App Risk Governance. Fulfill your SSC security and compliance needs within one platform. Available for
Enterprise +
| Security Bundles | Unified | Ultimate |
|---|---|---|
| Base Bundle | 200 Devs | 200 Devs |
| Add additional Devs as needed with volume discounts available. | ||
| JFrog Curation | ✓ | ✓ |
| Now with Package Traffic Controller and coverage for all AI assets. The proactive gatekeeper that blocks risky and non-compliant open-source packages, AI assets (models, skills, MCP servers), and IDE extensions from entering the organization, protecting your software supply chain. Automatically enforces company policy and serves up compliant alternatives, ensuring a frictionless developer workflow and a complete audit trail. |
||
| Agentic Remediation | ✓ | ✓ |
| Now with AutoPR. Accelerate code delivery, reduce risk, and build software with confidence through real-time AI-automated source code vulnerability remediation. Automatically push verified, targeted, and context-aware fixes to pull requests. | ||
| JFrog Advanced Security | ✓ | ✓ |
| The only application security suite built directly into your software system of record, giving you an unbroken, auditable line of security from code to runtime. Includes. See full list of capabilities - Contextual analysis for efficient vulnerability remediation - Robust Software Composition Analysis (SCA) - Leaked secrets detection - Runtime Integrity security - Code security scanning (SAST) - Misconfigurations - IaC scanning |
||
| IDE Extensions Control | ✓ | ✓ |
| Safeguards developer environments by validating and governing third-party extensions, eliminating hidden risks in the toolchain. | ||
| Snippet Detection | ✓ | ✓ |
| Your code's "insurance policy": Trust that every snippet, whether AI-generated or not, is visible, secure, compliant and in an auditable SBOM. | ||
| Zero Touch Remediation | ✓ | ✓ |
| Automatically replaces vulnerable or risky packages already running in your pipelines by matching the best available patched version from multiple sources, without breaking builds or interrupting developers. | ||
| Package Traffic Controller | ✓ | ✓ |
| Bring software supply chain security to the network edge via integration with Zscaler, Netscope, and Cloudflare. Traffic Controller intercepts developer and agent direct public registry requests and reroutes them through JFrog to ensure security and governance policies apply. | ||
| JFrog AI Security | ✓ | ✓ |
| Ensure agents and developers are only using secure, vetted, and approved AI assets. Accelerate agentic development adoption without risking governance, security, and compliance. Supports MCP servers, agent skills, plugins, and APM with coding agent-native enforcement and Shadow AI detection. | ||
| JFrog AppTrust (DevGovOps) | — | ✓ |
| Trust your software’s security and drive compliant releases with evidence-based controls and contextualized insights. |
||
| Transitive Contextual Analysis | — | ✓ |
| Detect, manage, secure, and govern not just the libraries you directly import, but also all the hidden, nested dependencies beneath them. | ||
| Runtime Impact | $ | $ |
| Extend Runtime Integrity to provide additional layers of analysis to provide workload and process level insights including tracing issues back to the developer owner. |
JFrog MLOps Bundles
Unified MLOps
Streamline the creation, management, monitoring and deployment of AI and ML models. Available for Enterprise X and Enterprise +.
Ultimate MLOps
Deliver secure, resilient, and highly performant production AI/ML deployments with teams of all sizes. Available for
Enterprise + subscriptions.
| MLOps Bundles | Unified | Ultimate |
|---|---|---|
| Base Bundle | 200 Devs | 500 Devs |
| Add additional Devs as needed with volume discounts available. | ||
| Model Registry | ✓ | ✓ |
| JFrog offers the most advanced model registry allowing teams to store all model data, files, and components together for simplified versioning, traceability, and distribution. | ||
| Experiment Tracking | ✓ | ✓ |
| Keep a comprehensive record of all your machine learning experiments, including code, data, hyperparameters, and results, to ensure reproducibility and collaboration. | ||
| Model Data Analytics | ✓ | ✓ |
| Analyze your model's performance and behavior in production by monitoring runtime metrics, model data, performance, and more. | ||
| Model Monitoring | ✓ | ✓ |
| Monitor and analyze the performance, health, and behavior of models in production to ensure they remain accurate and reliable. | ||
| AI/ML Serving | ✓ | ✓ |
| Take models to production and track their performance without the infrastructure hassle with model serving (realtime / batch streaming), model monitoring and observability, drift monitoring, and analytics / visualization | ||
| Multi-Environment Setup | — | ✓ |
| Deploy model services across multiple environments for consistency across all stages such as development, staging, and production. | ||
| Advanced Deployment Strategies | — | ✓ |
| Implement sophisticated deployment techniques like shadow deployments and A/B testing to minimize risk and evaluate new model versions with confidence. Safely test and roll out updates to a subset of users before a full-scale deployment. | ||
| Feature Store | — | ✓ |
| Store, manage, and serve machine learning features for training and inference ensuring consistency, reusability, and discoverability of features across teams and models, accelerating development and improving model performance. | ||
| Multi-Cloud Deployment | — | ✓ |
| Deploy model services across multiple cloud providers. | ||
| Multi-Region Deployment | — | ✓ |
| Ensure high availability and low latency for your global users by deploying models across different geographic regions. |
JFrog Bundles
JFrog Security Bundles
Unified Security
Protect your SSC from code to production: Block risks, remediate efficiently and cover source and binary code. Available for Enterprise X and Enterprise +.
Ultimate Security
Includes Unified, plus: AI catalog and full App Risk Governance. Fulfill your SSC security and compliance needs within one platform. Available for
Enterprise +
JFrog MLOps Bundles
Unified MLOps
Streamline the creation, management, monitoring and deployment of AI and ML models. Available for Enterprise X and Enterprise +.
Ultimate MLOps
Deliver secure, resilient, and highly performant production AI/ML deployments with teams of all sizes. Available for
Enterprise + subscriptions.
Arty, our AI sales rep, requires cookies to work
Accept All Cookies .
.
.
Serving over 80% of the Fortune 100
-
-
-
-
-
-
-
-
- -
-
-
-
-
-
-
-
-
- -
Feature Comparison Spotlight
SaaS Self-Managed
Pro
$150 / Month
$50 / Month
Save $100/mo
Buy on Marketplace
Enterprise X
Starting at:
$950 / Month
Request a Quote
Buy on Marketplace
Enterprise +
Custom Pricing:
Let's Talk
Contact Us
Platform Management & Consumption
Base Consumption Included
Additional consumption is available for additional cost based on GB consumed. Tier consumption discounts available.
25 GB | Additional consumption available
125 GB | Additional consumption available
Custom
Projects
Facilitate assignment, control, and access of project resources.
✓
✓
✓
Support
JFrog has support engineers and technical success managers around the world to meet the mission critical needs of our customers.
Community
24/7 SLA
High Touch Support
Gold Support
Upgrade to Gold Level support, offering 90 min critical response SLAs, 4 extra support contacts, 40 annual hrs professional services, and more.
‐
$
$
Platinum Support
Our highest caliber support - 30 minute critical response with session, unlimited support contacts, onsite engagements, 100 annual professional service hours, and more.
‐
‐
$
99.99% Uptime Guarantee (Premium Availability)
‐
‐
$
Host and Region Choice
JFrog supports 30 locations across 3 cloud providers. Check Status
✓
✓
✓
Unlimited Docker Hub Pulls
Unlimited Docker Hub pulls to the public registry
✓
✓
✓
Log Analysis
✓
✓
✓
REST API and Ecosystem Integrations
✓
✓
✓
Artifactory Query Language
Enhance the power of custom applications and extensions built on top of the JFrog Platform with custom queiries providing data related to the artifacts and builds stored within Artifactory.
✓
✓
✓
JFrog CLI
JFrog CLI is a compact and smart client provides a simple interface to access to JFrog products in order to drive automation of development and CI processes.
✓
✓
✓
JFrog Agent Plugin
Connect your coding agents natively to your JFrog Platform with simple org-wide rollout. The JFrog Agent Plugin bundles JFrog Platform Skills, MCP Server, and Agent Guard governance directly inside each developer's AI IDE.
✓
✓
✓
JFrog Workers (Advanced Plugins )
Workers is a service that allows you to extend your JFrog Platform and control your execution flows via a server-less execution environment.
‐
✓
✓
Hybrid and Multi-Cloud
Connect the JFrog Platform across SaaS and self-managed installations including across multiple cloud providers and on-prem installations.
‐
✓
✓
Multisite Artifact Synchronization
Connect repositories across multiple locations for automated sync. This enables use cases such as distributed development and disaster recovery.
‐
✓
✓
Remote MCP Server
Provide your agents access to the JFrog Platform via JFrog managed MCP tools.
Basic Tools
Security Tools $
Security Tools $
Multisite Access Synchronization
Control access to all, or any subset of your services from one location by synchronizing all security entities (users, groups, permissions, and access tokens) between the federated services.
‐
‐
✓
Platform Federation
Simplify management and unite multiple JFrog sites as one federated system. Projects, access, and policies are defined once and synced to every relevant site. Repositories are provisioned and populated automatically via Stage-to-Site mapping.
‐
‐
✓
CDN
CDN is supported on AWS only, including AWS marketplace customers. All AWS regions are supported except for Northern California and China.
‐
Public
Private
DevOps & Binary Management
Universal Binary Management
JFrog natively supports 60+ package and technologies.
✓
✓
✓
ML Model Registry
Manage private models and model artifacts with context aware support for multiple frameworks. Leverage Hugging Face repos for caching of open source models.
✓
✓
✓
Container Registry
Manage containers alongside Helm charts to easily deploy applications to production with full traceability. Advanced container management based on image layers optimizes consumption for faster transfers and scans while providing detailed visibility into the application layer.
✓
✓
✓
Upstream Proxying & Caching
Cache and proxy packages from a remote public or private registry. Enabling fast, convenient, and secure access to remote resources.
✓
✓
✓
Immutable Releases
Create immutable release bundles which represent a specific release candidate in your release lifecycle.
✓
✓
✓
SDLC Stage Mapping
Define the stages of your SDLC with the appropriate repositories to track status of release versions and control appropriate access at every stage.
‐
‐
$
Evidence Graph
Easily visualize the JFrog and 3rd party evidence collected throughout the lifecycle of your release. Explore evidence collected by source (vendor), stage (when they are collected) and associated entities within JFrog.
‐
✓
✓
Third Party Evidence Collection
Collect all evidence of processes completed across your SDLC and associate it with your artifacts, builds, and application versions. Includes dozens of OOTB integrations with development tools across every stage including GitHub attestations, ServiceNow, Sonar and Atlassian.
‐
‐
✓
Release Distribution
Move release ready components to the ideal location for consumption to accelerate secure software delivery.
‐
‐
✓
GitHub Actions Integration
✓
✓
✓
GitHub Source to Binary Linking
One click link back to the GitHub Action job that generated a specific build output housed in the JFrog Platform. In your GitHub Actions job summary see where and click through to the artifacts housed in the JFrog Platform.
‐
✓
✓
Multisite Replication
Replicate artifacts from one location to multiple destinations.
‐
✓
✓
Private Link
Establish secure network connection - originating from your own cloud environment to your JFrog SaaS instance.
‐
✓
✓
Log Streaming Service
Automatically stream select logs directly from the JFrog Platform to your APM tool
‐
‐
✓
Application Entities
Define an application and it's business context within the JFrog Platform
‐
‐
$
Application Resource Association
Automatically assign artifacts, packages, builds, release bundles and more to a given Application.
‐
‐
$
Application DORA Insights
Gain the visibility needed to track the performance of your applications and teams as they advance across the SDLC including with DORA based metrics.
‐
‐
$
Cleanup Policies
Define automated cleanup policies to keep your repositories clean. All cleanup runs are logged and auditable
‐
✓
✓
Smart Archiving
JFrog Smart Archiving ensures compliance, governance, and regulatory adherence with automated policies for audit-ready reporting, full-context restoration, secure federation, project-based access, and dry-run validation.
‐
‐
$
Application & Platform Security
Authentications
LDAP
LDAP / SAML / OIDC / OAuth / Crowd
LDAP / SAML / OIDC / OAuth / Crowd
Vault & 3rd Party Secret Manager Integration
‐
✓
✓
Traffic Filtering
‐
IP Filtering
Geo Filtering
SCIM ID Management
‐
✓
✓
OIDC Integration
OpenID Connect allows users to use single sign-on (SSO) to access sites using OpenID Providers (OPs) to authenticate their identities.
‐
✓
✓
OSS License Compliance
‐
✓
✓
Container Scanning
‐
✓
✓
ML Model Scanning
Detect malicious models and enforce license compliance.
‐
✓
✓
SBOM Build & Exports
‐
✓
✓
Premium Vulnerability Database
High-quality comprehensive vulnerability database which integrates data from NVD, GitHub, Ubuntu, Debian, Red Hat, PHP, and the JFrog Security Research Team.
‐
✓
✓
Code & Binary SCA
Identify and resolve security vulnerabilities (CVEs) and license compliance issues in your open-source dependencies for both source and binary code
‐
✓
✓
Malicious Package Detection
‐
✓
✓
IDE Plugins, CLI Integration, Git Bot
JFrog delivers platform and security functionality via an IDE plugin for most major IDEs, the JFrog CLI, and FrogBot, our Git Bot
‐
✓
✓
JFrog Curation
Now with Package Traffic Controller - Intercept and redirect package traffic to ensure it routes through JFrog.
The proactive gatekeeper that blocks risky and non-compliant open-source packages, AI assets, and IDE extensions from entering the organization, protecting your software supply chain. Automatically enforces company policy and serves up compliant alternatives, ensuring a frictionless developer workflow and a complete audit trail.
‐
$
$
Security Integration w/ GitHub (Adv Security)
Available with JFrog Advanced Security. Bring JFrog Security results into GitHub Advanced Security.
‐
$
$
Contextual CVE Prioritization (Adv Security)
Available with JFrog Advanced Security. CVEs are presented by order of severity and applicability to how your code interacts with the relevant open source / third party for easy prioritization and remediation.
‐
$
$
Secrets Scanning (Adv Security)
Available with JFrog Advanced Security. Detect secrets in your code and binaries including custom secrets. Intelligent secrets detection leverages AI powered scanners to eliminate noise and false positives, focussing your team on true secrets.
‐
$
$
SAST Code Scanning (Adv Security)
Available with JFrog Advanced Security. Detect issues with 1st party code.
‐
$
$
IaC Scanning (Adv Security)
Available with JFrog Advanced Security. Detect issues in your infrastructure as code that would expose your organization.
‐
$
$
App and Service Misconfigurations (Adv Security)
Available with JFrog Advanced Security. Scan for misconfigurations across your infrastructure, services, and applications to strengthen security posture
‐
$
$
Agentic Remediation
Now with AutoPR via Smart Remediation. Accelerate code delivery, reduce risk, and build software with confidence through real-time AI-automated source code vulnerability remediation. Automatically push verified, targeted, and context-aware fixes to pull requests.
‐
$
$
IDE Extensions Control
Safeguards developer environments by validating and governing third-party extensions, eliminating hidden risks in the toolchain.
‐
$
$
Runtime Integrity
Monitor Kubernetes clusters for supply chain related security incidents in real time. Verify image integrity and meet compliance requirements.
‐
$
$
Snippet Detection
Your code's "insurance policy": Trust that every snippet, whether AI-generated or not, is visible, secure, compliant and in an auditable SBOM.
‐
$
$
Zero Touch Remediation
Automatically replaces vulnerable or risky packages already running in your pipelines by matching the best available patched version from multiple sources, without breaking builds or interrupting developers.
‐
$
$
Universal Fix Coverage
Zero-Touch Remediation's fix coverage includes third-party maintained images and packages from ecosystem partners. JFrog automatically selects and applies the best available fix, governed by your policies. Supports Chainguard, Echo, Moderne, Seal Security, Broadcom (Tanzu), Tuxcare, and Red Hat.
‐
$
$
Runtime Impact
Extend Runtime Integrity to provide additional layers of analysis to provide workload and process level insights including tracing issues back to the developer owner.
‐
‐
$
Transitive Dependency Reachability
Detect, manage, secure, and govern not just the libraries you directly import, but also all the hidden, nested dependencies beneath them.
‐
‐
$
Application Governance Policies
Leverage evidence-based policies to set the criteria required to move applicaiton versions across stages of your SDLC for proactive governance.
‐
‐
$
Application Security Insights
Gain critical and holistic visibility and insights into the security and compliance status of your applications, across versions and throughout their lifecycle
‐
‐
$
OOTB Compliance Frameworks
Apply pre-built CRA and NIST policy templates to release gates with one click. Ensure proper scoping and coverage with real-time compliance scoring. Available with AppTrust.
‐
‐
$
Continuous Application Governance
‐
‐
$
Prompt-to-Release Traceability
Automatically capture agent interactions and generating a signed evidence chain from commits, PRs, and Jira tickets, attached to every application version. Generate a complete audit picture to support compliance and regulation. Available with AppTrust.
‐
‐
$
Policy-as-Code Playground
Give every team member the power to generate policy-as-code. Translate plain english into Rego-based policies via an AI assisted workspace. Once your policy is defined, validate it against real application versions to ensure it works as intended before deployment.
‐
‐
$
Repo-Level Policies
Enforce evidence-based governance directly at the repository level to stand up active policy enforcement in minutes.
‐
‐
$
AI Gov & Automation
Model Registry
✓
✓
✓
Model Security Scanning
‐
✓
✓
Experiment Tracking
‐
$
$
Model Data Analytics
‐
$
$
Model Distribution & Monitoring
‐
$
$
Batch, Online, and Streaming Inference
‐
$
$
Advanced Deployment Strategies
Test models on live data with A/B testing and shadow deployments, minimizing production risk before a full rollout.
‐
‐
$
Multi-Environment Setup
‐
‐
$
Automations
Trigger automated pipelines for model builds, deployments, and data processing.
‐
‐
$
Batch Feature Store
Dynamic system allowing you to ingest, store, and serve features in real-time.
‐
‐
$
Streaming Feature Store
‐
‐
$
Multi-Cloud Deployment
‐
‐
$
AI Security
Ensure agents and developers are only using secure, vetted, and approved AI assets. Accelerate agentic development adoption without risking governance, security, and compliance. Supports MCP servers, agent skills, plugins, and APM with coding agent-native enforcement and Shadow AI detection.
‐
$
$
AI Asset Registries
‐
$
$
Agent Guard AI Asset Enforcement
‐
$
$
AI Asset Security Scanning
Keep your organization safe with AI powered scanners that detect and block malicious elements in skills, MCP servers, and plugins. Leverage JFrog provided models, or provide your own model key. Available with Unified Security
‐
$
$
Shadow AI Detection
Actively detect unmanaged and uncontrolled AI assets in your software supply chain and developer workstations. Available with Unified Security.
‐
$
$
IoT & Edge Device Management (Connect Add On)
Devices Included
‐
1000
1000
Integration with JFrog Enterprise X or + Subscription
‐
✓
✓
Integration with JFrog Security
‐
✓
✓
Groups and Tags
‐
Unlimited
Unlimited
Device OTA Updates
‐
✓
✓
Remote Terminal
‐
✓
✓
Remote Port Tunneling
‐
✓
✓
Resource Monitor (CPU, RAM, Disk)
‐
✓
✓
Audit Log
‐
✓
✓
Artifactory Access Scoping
Ensure that only the intended artifacts are distributed to the intended devices.
‐
✓
✓
Device Artifact Inventory & Runtime
View installed artifacts on each device, see which are running, and evaluate their security vulnerabilities.
‐
✓
✓
Device Security Risk
Assess device security risk based on installed and running artifacts
‐
✓
✓
Alerts
‐
Email / Webhook
Email / Webhook
Fetch Files
‐
✓
✓
REST API
‐
✓
✓
Additional Device Bundles Available
‐
$
$
Pro X
Starting at
$27,000 / Year
Request a Quote
Enterprise X
Starting at:
$51,000 / Year
Request a Quote
Enterprise +
Custom Pricing:
Let's Talk
Contact Us
Platform Management & Consumption
Base Servers Included
Additional servers available for purchase.
1 Server
3 Server
6 Servers
Projects
Facilitate assignment, control, and access of project resources.
✓
✓
✓
Support
JFrog has support engineers and technical success managers around the world to meet the mission critical needs of our customers.
24/7 SLA
24/7 SLA
High Touch Support
Gold Support
Upgrade to Gold Level support, offering 90 min critical response SLAs, 4 extra support contacts, 40 annual hrs professional services, and more.
‐
$
$
Platinum Support
‐
‐
$
REST API and Ecosystem Integrations
✓
✓
✓
Artifactory Query Language
✓
✓
✓
JFrog Agent Plugin
✓
✓
✓
JFrog CLI
JFrog CLI is a compact and smart client provides a simple interface to access to JFrog products in order to drive automation of development and CI processes.
✓
✓
✓
JFrog Workers (Advanced Plugins )
Workers is a service that allows you to extend your JFrog Platform and control your execution flows via a server-less execution environment.
✓
✓
Hybrid and Multi-Cloud
Connect the JFrog Platform across SaaS and self-managed installations including across multiple cloud providers and on-prem installations.
✓
✓
Multisite Artifact Synchronization
Connect repositories across multiple locations for automated sync. This enables use cases such as distributed development and disaster recovery.
✓
✓
Multisite Access Synchronization
✓
Platform Federation
‐
‐
✓
DevOps & Binary Management
Universal Binary Management
JFrog natively supports 60+ package and technologies.
✓
✓
✓
ML Model Registry
Manage private models and model artifacts with context aware support for multiple frameworks. Leverage Hugging Face repos for caching of open source models.
✓
✓
✓
Container Registry
✓
✓
✓
Upstream Proxying & Caching
Cache and proxy packages from a remote public or private registry. Enabling fast, convenient, and secure access to remote resources.
✓
✓
✓
Immutable Releases
Create immutable release bundles which represent a specific release candidate in your release lifecycle.
✓
✓
✓
SDLC Stage Mapping
Define the stages of your SDLC with the appropriate repositories to track status of release versions and control appropriate access at every stage.
‐
‐
$
Evidence Graph
‐
‐
✓
Third Party Evidence Collection
‐
‐
✓
Release Distribution
Move release ready components to the ideal location for consumption to accelerate secure software delivery.
‐
‐
✓
Checksum Based Storage
Ensure files and image layers are only stored once, even if they exist in multiple places within an organizations repositories.
✓
✓
✓
GitHub Actions Integration
✓
✓
✓
GitHub Source to Binary Linking
✓
✓
Multisite Replication
Replicate artifacts from one location to multiple destinations.
✓
✓
Application Entities
Define an application and it's business context within the JFrog Platform
‐
‐
$
Application Resource Association
Automatically assign artifacts, packages, builds, release bundles and more to a given Application.
‐
‐
$
Application DORA Insights
Gain the visibility needed to track the performance of your applications and teams as they advance across the SDLC including with DORA based metrics.
‐
‐
$
Cleanup Policies
Custom, automated cleanup policies keep your repositories clean and ensure operational efficiency. All cleanup runs are logged and auditable.
‐
✓
✓
Smart Archiving
‐
‐
$
Application & Platform Security
Authentications
LDAP / SAML
LDAP / SAML / OIDC / OAuth / Crowd
LDAP / SAML / OIDC / OAuth / Crowd
Vault & 3rd Party Secret Manager Integration
‐
✓
✓
SCIM ID Management
‐
✓
✓
OIDC Integration
OpenID Connect allows users to use single sign-on (SSO) to access sites using OpenID Providers (OPs) to authenticate their identities.
‐
✓
✓
OSS License Compliance
✓
✓
✓
Container Scanning
✓
✓
✓
ML Model Scanning
Detect malicious models and enforce license compliance.
✓
✓
✓
SBOM Build & Exports
✓
✓
✓
Premium Vulnerability Database
High-quality comprehensive vulnerability database which integrates data from NVD, GitHub, Ubuntu, Debian, Red Hat, PHP, and the JFrog Security Research Team.
✓
✓
✓
Code & Binary SCA
Identify and resolve security vulnerabilities (CVEs) and license compliance issues in your open-source dependencies for both source and binary code
✓
✓
✓
Malicious Package Detection
✓
✓
✓
IDE Plugins, CLI Integration, Git Bot
JFrog delivers platform and security functionality via an IDE plugin for most major IDEs, the JFrog CLI, and FrogBot, our Git Bot
✓
✓
✓
JFrog Curation
‐
$
$
Security Integration w/ GitHub (Adv Security)
Available with JFrog Advanced Security. Bring JFrog Security results into GitHub Advanced Security.
‐
$
$
Contextual CVE Prioritization (Adv Security)
‐
$
$
Secrets Scanning (Adv Security)
‐
$
$
SAST Code Scanning (Adv Security)
Available with JFrog Advanced Security. Detect issues with 1st party code.
‐
$
$
IaC Scanning (Adv Security)
Available with JFrog Advanced Security. Detect issues in your infrastructure as code that would expose your organization.
‐
$
$
App and Service Misconfigurations (Adv Security)
Available with JFrog Advanced Security. Scan for misconfigurations across your infrastructure, services, and applications to strengthen security posture
‐
$
$
Agentic Remediation
‐
$
$
IDE Extensions Control
Safeguards developer environments by validating and governing third-party extensions, eliminating hidden risks in the toolchain.
‐
$
$
Runtime Integrity
Monitor Kubernetes clusters for supply chain related security incidents in real time. Verify image integrity and meet compliance requirements.
‐
$
$
Snippet Detection
Your code's "insurance policy": Trust that every snippet, whether AI-generated or not, is visible, secure, compliant and in your SBOM.
‐
‐
$
Zero Touch Remediation
‐
$
$
Universal Fix Coverage
‐
$
$
Runtime Impact
‐
‐
$
Transitive Dependency Reachability
Detect, manage, secure, and govern not just the libraries you directly import, but also all the hidden, nested dependencies beneath them.
‐
‐
$
Application Governance Policies
Leverage evidence-based policies to set the criteria required to move applicaiton versions across stages of your SDLC for proactive governance.
‐
‐
$
Application Security Insights
Gain critical and holistic visibility and insights into the security and compliance status of your applications, across versions and throughout their lifecycle
‐
‐
$
OOTB Compliance Frameworks
‐
‐
$
Continuous Application Governance
‐
‐
$
Prompt-to-Release Traceability
‐
‐
$
Policy-as-Code Playground
‐
‐
$
Repo-Level Policies
Enforce evidence-based governance directly at the repository level to stand up active policy enforcement in minutes.
‐
‐
$
AI Gov & Automation
Model Registry
✓
✓
✓
Model Security Scanning
‐
✓
✓
Experiment Tracking
‐
$
$
Model Data Analytics
‐
$
$
Model Distribution & Monitoring
‐
$
$
Batch, Online, and Streaming Inference
‐
$
$
Advanced Deployment Strategies
Test models on live data with A/B testing and shadow deployments, minimizing production risk before a full rollout.
‐
‐
$
Multi-Environment Setup
‐
‐
$
Automations
Trigger automated pipelines for model builds, deployments, and data processing.
‐
‐
$
Batch Feature Store
‐
‐
$
Streaming Feature Store
Dynamic system allowing you to ingest, store, and serve features in real-time.
‐
‐
$
Multi-Cloud Deployment
‐
‐
$
AI Security
‐
$
$
AI Asset Registries
‐
$
$
Agent Guard AI Asset Enforcement
‐
$
$
AI Asset Security Scanning
‐
$
$
Shadow AI Detection
Actively detect unmanaged and uncontrolled AI assets in your software supply chain and developer workstations. Available with Unified Security.
‐
$
$
IoT & Edge Device Management (Connect Add On)
Devices Included
‐
1000
1000
Full-Featured IoT Device Management
‐
✓
✓
Integration with JFrog Enterprise X or + Subscription
‐
✓
✓
Integration with JFrog Security
‐
✓
✓
Air-Gapped Environment
‐
✓
✓
Groups and Tags
‐
Unlimited
Unlimited
Device OTA Updates
‐
✓
✓
Remote Terminal
‐
✓
✓
Remote Port Tunneling
‐
✓
✓
Resource Monitor (CPU, RAM, Disk)
‐
✓
✓
Audit Log
‐
✓
✓
Artifactory Access Scoping
Ensure that only the intended artifacts are distributed to the intended devices.
‐
✓
✓
Device Artifact Inventory & Runtime
View installed artifacts on each device, see which are running, and evaluate their security vulnerabilities.
‐
✓
✓
Device Security Risk
Assess device security risk based on installed and running artifacts
‐
✓
✓
Alerts
‐
Email / Webhook
Email / Webhook
Fetch Files
‐
✓
✓
REST API
‐
✓
✓
Additional Device Bundles Available
Dynamic system allowing you to ingest, store, and serve features in real-time.
‐
$
$
JFrog Product Selector
Quickly identify the right JFrog package for your needs
1.01
How many developers does your organizations have? (1/5)
0
05,00010,000
Get the Full Value of Your Investment, Faster.
Consulting Services\ \ Solve complex multivendor software issues faster with JFrog expertise.\ \ View Packages Solution Support\ \ From help docs to our global team of Support Engineers, the support you need is a click away.\ \ Learn More JFrog Training\ \ Empower your teams with JFrog training tailored to their goals.\ \ JFrog Academy
Frequently Asked Questions
How do I select the right package?
To select the right package, most organizations look at three variables: features, users, and consumption. Our product selector can help align you to the right solution.
Pro delivers world class artifact management designed for small teams, typically up to 50 users and 2 TB consumption.
Enterprise X is for organizations who need multi-site capabilities, uptime and support guarantees, and enterprise access controls (ie. OAuth, SAML, CName). It also adds essential software supply chain security elements such as vulnerability scanning and SBOM generation in addition to the functionality needed to prepare and deliver ML models. Enterprise X works well for orgs up to 300 users and 20 TB consumption.
Enterprise + delivers our most robust set of platform capabilities with distribution, advanced management for multisite organizations, higher uptime guarantees, assigned support, disaster recovery and more. Organizations of all sizes and consumption will be able to scale on Enterprise +.
What if I need more than the base consumption?
Each SaaS subscription comes with a base amount of monthly consumption (storage + transfer) included in the monthly price. Enterprise X and Enterprise + subscriptions also include a base amount of ML credits. Your account will not be blocked if you go over that base consumption and ML credit amount, but additional fees will be incurred and reflected automatically in your monthly charges. To discuss consumption needs above the base packaging, including discounts for annual contracts, please contact our sales team.
For consumption between 2 TB and 20 TB we recommend the Enterprise X package. If you anticipate using greater than 20 TB consumption then a custom Enterprise + package is likely right for you.
What are Advanced Security Contributing Developers and can I add more?
A Contributing Developer is defined as any developer who contributes to the creation or update of a software artifact or project (such as a docker image) that is scanned by JFrog’s Advanced Security capabilities in the last 90 days. To “contribute” includes submitting code, script, updating configurations, downloading a public package or artifact, etc. A single developer contributing to multiple projects will not count as multiple Contributing Developers.
For the capabilities listed under Advanced Security, JFrog charges based on the number of Contributing Developers.
Enterprise X customers who add Advanced Security features are entitled to 50 base contributing developers per month, and Enterprise+ customers who add Advanced Security features are entitled to 200 base contributing developers per month.
Additional contributing developers are available for purchase.
Can I purchase a subscription on an annual contract?
Pro subscriptions are only available for monthly purchase.
Enterprise X and Enterprise+ are both available for annual purchase and with multiple regions on the same contract. There are also volume discounts available for these packages.
Self-Hosted licenses are purchased on a minimum of one year contract with multi-year contracts available for Enterprise X and Enterprise +.
What options are there for customer support?
- Community Support - Available for Free solutions and Pro subscriptions - JFrog maintains public documentation, knowledge base, and engages in conversations on Stack Overflow.
- 24/7 SLA Support - Available for Enterprise X customers - Access to our global support engineers with contractual response times.
- 24/7 High Touch Support - Available for Enterprise + customers - Accounts are assigned a technical account lead who proactively assists with adoption, best practices, and usage. There are also faster response times.
- Gold Support - Optional for Enterprise X and Enterprise + customers
- Platinum Support - Optional for Enterprise + customers - Our highest level of support with the best support times, dedicated support and account team, roadmap reviews and other benefits.
I’m an existing customer looking to upgrade.
Self-service upgrades are available for SaaS monthly customers looking to upgrade from Pro to Enterprise X through the MyJFrog Portal. If you’re looking for an annual contract or custom package, our account team is here to support you. Please contact us.
If you’re an existing customer self-hosting the JFrog Platform looking to upgrade your package or migrate to SaaS, our account team is here to support you. Please contact us.