JFrog Ends the Audit Scramble: Delivers New DevGovOps Capabilities with Signed Compliance Evidence for Every Release, Without Slowing Development
Business Wire•21/10/2026•03:00 ET
0
Key Highlights
- ➤JFrog launches DORA Compliance Framework with five pre-mapped Policy as Code obligation areas
- ➤JFrog introduces Repo-Level Policies for automated, repository-specific governance and audit trails
- ➤AI Verification Policies evaluate every release against plain-language intent, generating signed compliance proof
- ➤CRA readiness continuously monitors vulnerabilities, generates SBOMs, and preserves remediation evidence
- ➤DORA Compliance Framework and AI Verification Policies are available immediately
Expert Statements
Yoav Landman, Co-Founder and CTO, JFrog
“We are excited to give Security and R&D leaders one version of the truth for EU Software Compliance”
Yoav Landman, Co-Founder and CTO, JFrog
“Regulations now demand more controls and visibility, backed up by evidence for every release, and AI is dramatically accelerating the pace and the number of releases.”
Yoav Landman, Co-Founder and CTO, JFrog
“It all comes down to a simple question: can you prove the trust in what you shipped and can you do it continuously to match the release cadence driven by AI agents?”
Yoav Landman, Co-Founder and CTO, JFrog
“Our customers can now rely on one system of record for their releases and compliance evidence, and with policies that check a release against its intent in plain language and produce signed proof.”
Haggai Schechtman, VP of Product and Engineering for DevGovOps, JFrog
“With AI agents shipping code faster than ever and regulators demanding strict accountability, teams automate governance into their software supply chain without sacrificing velocity”
Haggai Schechtman, VP of Product and Engineering for DevGovOps, JFrog
“JFrog AppTrust helps accelerate the audit process with controls that allow organizations to be audit-ready anytime.”
Haggai Schechtman, VP of Product and Engineering for DevGovOps, JFrog
“Pre-mapped frameworks automate EU DORA and CRA compliance out-of-the-box, while plain-language, AI-evaluated policies verify releases match architectural and business intent, attaching cryptographically signed proof directly to every artifact.”
JFrog Ends the Audit Scramble: Delivers New DevGovOps Capabilities with Signed Compliance Evidence for Every Release, Without Slowing Development
New DORA Compliance Framework, Repo-level Policies, and AI Verification Policies give CISOs and R&D leaders one shared view of EU regulatory requirements, including AI assets
Get started
Create a free account to read the full story.