JFrog Expands Software Supply Chain Security with Network-Level Traffic Controller — JFrog Ltd.

Event summary

JFrog introduced the Software Supply Chain Traffic Controller, integrating with Zscaler, Cloudflare, and Netskope to stop malicious packages at the network level.
The solution reroutes package download requests through JFrog Artifactory, ensuring all software developers and AI agents use a single trusted path.
JFrog's 2026 report showed a 451% surge in malicious packages year over year, with only 40% of organizations having detection capabilities.
The Traffic Controller is available immediately through JFrog Curation, supporting major SASE providers.

The big picture

JFrog's new Traffic Controller addresses the growing threat of malicious packages in software supply chains, particularly as AI agents autonomously pull dependencies. The solution extends network-layer enforcement to ensure all packages flow through a trusted system of record, aligning with the industry's shift towards zero-trust security models. This move underscores the critical need for comprehensive visibility and control over software components entering organizations, especially as the window between vulnerability disclosure and exploitation shrinks.

What we're watching

AI Governance Gaps: How the proliferation of AI coding agents will challenge traditional software supply chain security measures.
Network-Level Enforcement: The pace at which network-level enforcement solutions will be adopted to close governance gaps in software supply chains.
SASE Integration: Whether JFrog's integration with leading SASE providers will drive broader adoption of its Traffic Controller solution.