Posted by Sunnyvale, USA – Barcelona, Spain: JFrog, the Liquid Software company has announced advancements in JFrog AI Security. These advancements brings AI asset detection, scanning and policy enforcement together in one solution for the AI-driven software supply chain.
According JFrog, its new AI security capabilities can help enterprises identify and govern AI assets that may be operating outside existing security controls popularly known as shadow AI. The announcement expands JFrog’s shadow AI detection capabilities to the developer endpoint and introduces AI asset scanning with Bring Your Own LLM Key (BYOK).
Together, these capabilities help security teams with:
- Local Shadow AI Detection, which identifies AI skills, coding agent plugins and MCP servers as they are installed on developer machines.
- AI Asset Scanning with Bring Your Own LLM Key, which allows customers to scan these assets using their own LLM infrastructure.
- Centralised policy enforcement, helping security teams establish a baseline of approved AI assets and govern models, skills, plugins and agents through a single system of record.
“Developers are already running AI agents organisations can’t see. JFrog AI Security brings them under control,” said Shlomi Ben Haim, Co-Founder and CEO, JFrog.
“Until now, the conversation around AI agents has focused on what they can build vs. what they can break or who answers for it when that happens. The question is no longer whether agents will touch your supply chain – it’s whether you can prove what they touched,” added Haim.
“Our customers live in a zero-trust world and can’t trust AI agents or developers using AI blindly. JFrog brings detection, scanning, and policy enforcement for the AI-powered software supply chain into one solution,” stated Haim.
Attackers Moved from Code to Instructions
The JFrog 2026 Software Supply Chain Security State of the Union report tracked malicious AI agent skills, identifying 969 carrying high-impact payloads, alongside 495 malicious AI models on Hugging Face. Existing AppSec tools were built to catch vulnerable code. Agent skills, plugins, and APM packages ship something different: plain-English instructions that an agent reads and acts on.
JFrog’s AI Security bridges that gap with three capabilities. First, the Local Shadow AI Detection, which inventories the AI assets in use. Second, AI Asset Scanning, which reads the intent of models, skills, plugins, and APM packages. And lastly, JFrog Agent Guard, which enforces policy at the point an agent reaches for any of them. Together, they give security and developer teams a single source of truth for AI assets.
With JFrog AI Security, platform engineering and security teams finally have full visibility and policy enforcement through a single system of record.
“Security teams need visibility that starts at the developer’s machine – before an asset ever reaches a coding agent or shared through Artifactory. Regulated customers need scanning that points at their own models,” said Yuval Fernbach, VP and CTO – JFrog AI Security.
“Local Shadow AI Detection and AI Asset Scanner address both needs in a single solution: JFrog AI Security,” added Fernbach.
JFrog AI Security, including Local Shadow AI Detection and AI Asset Scanning, is available now to JFrog Unified Security and Ultimate Security customers. Initial releases of JFrog AI Asset Scanning BYOK supports: Anthropic’s Opus 4.8, OpenAI’s GPT 5.6 Sol, and Google’s Gemini 3.1 Pro.