Products/Concepts

Explore JFrog Security products and the concepts they share.

JFrog Security products work together to secure the software supply chain across development, CI/CD, artifact management, and runtime environments. This section provides high-level overviews of each security product and the core concepts that apply consistently across the JFrog Platform.

Use this page to orient yourself and navigate to the areas most relevant to your role or use case.

AreaDescriptionLearn More
Source CodeSource Code scanning identifies vulnerabilities and security issues in first-party code during development and CI/CD.Source Code
JFrog CatalogJFrog Catalog provides visibility into packages and components used across the organization, supporting governance and policy enforcement.Catalog
JFrog CurationJFrog Curation controls which open-source packages can be used by enforcing security and license policies before developers download them.Curation
JFrog XrayJFrog Xray detects vulnerabilities, license compliance issues, and malicious content in artifacts, builds, and dependencies.Xray
Zero-Touch RemediationZero-Touch Remediation replaces vulnerable Maven and npm packages with verified patches at resolution time so builds can stay green.Zero-Touch Remediation
JFrog Advanced SecurityJFrog Advanced Security extends coverage beyond common vulnerabilities and exposures scanning, including secrets detection, infrastructure-as-code scanning, and contextual prioritization.Advanced Security
JFrog RuntimeJFrog Runtime monitors running applications for suspicious behavior and possible exploitation in production.Runtime

Where to Go Next

  • Start with a product onboarding guide. For more information, see Xray Workshop or Curation Workshop.
  • Security decisions rely on policies, software bills of materials (SBOMs), and enforcement. For more information, see Policy and Governance and SBOM.
  • If you're new to JFrog Security, see the Glossary for definitions of key terms.

Related Topics


Did this page help you?