jfrog.com

85 of 100

Enterprise AI readiness, from public pages only

Scanned 2026-11-01 from 100 public pages. Methodology 1.0. Category: Developer tools.

Identity		20 of 20
Assurance		25 of 25
Data and AI terms		8 of 21
Deployment		6 of 6
Agent readiness		17 of 17

Claim this page Compare

Identity

SAML or OIDC single sign-on (10 points) Found

Manage users and groups at scale with OOTB identity management integrations using SAML and SCIM. source

Report a problem with this result

SCIM provisioning (6 points) Found

Manage users and groups at scale with OOTB identity management integrations using SAML and SCIM. source

Report a problem with this result

Roles and permissions (4 points) Found

Manage granular RBAC permissions for full control over access and interactions platform-wide. source

Report a problem with this result

Assurance

SOC 2 Type 2 (10 points) Found

SOC 2 Type II Report source

Report a problem with this result

ISO 27001 (4 points) Found

ISO 27001 source

Report a problem with this result

Trust center (5 points) Found

Contact: mailto:security@jfrog.com source

Report a problem with this result

security.txt (2 points) Found

Contact: mailto:security@jfrog.com source

Report a problem with this result

Public status page (2 points) Found

All Systems Operational source

Report a problem with this result

Bug bounty or disclosure program (2 points) Found

Security researchers may be able to participate in a bug bounty program and earn rewards for their findings. source
Please submit your security report through the form below - it will lead to the private bug bounty program managed by HackerOne. source
Please note that you must be logged in to the HackerOne platform when submitting the report. source

Report a problem with this result

Data and AI terms

No training on customer data (8 points) Not found in public pages

Pages searched (13)

https://jfrog.com/ai/
https://jfrog.com/terms-of-use/
https://jfrog.com/privacy-notice/
https://jfrog.com/privacy-notice/
https://jfrog.com/privacy-and-security/
https://jfrog.com/terms-and-conditions/
https://jfrog.com/acceptable-use-policy/
https://jfrog.com/fr/terms-of-use/
https://jfrog.com/de/terms-of-use/
https://jfrog.com/fr/ai/
https://jfrog.com/ja/terms-of-use/
https://jfrog.com/de/ai/
https://jfrog.com/ja/ai/

Report a problem with this result

Retention periods (5 points) Not found in public pages

Pages searched (2)

https://jfrog.com/ai/
https://jfrog.com/terms-of-use/

Report a problem with this result

Subprocessor list (5 points) Under review

Report a problem with this result

Data processing agreement (4 points) Found

JFrog engages third-party service providers to process personal data on behalf of our customers ("Sub-Processors") during the course of the Cloud Services, in accordance with the JFrog Cloud Customer DPA . source
Data Processing Addendum source
Does JFrog have a Data Processing Addendum? source

Report a problem with this result

Data residency (4 points) Found

Customers choose their hosting location. source

Report a problem with this result

Deployment

Private deployment (6 points) Found

Self-Managed source
1 Server | 24/7 SLA Support source

Report a problem with this result

Customer-managed keys (4 points) Could not check

The scan reached its page or time limit before reading the pages this check needs.

Report a problem with this result

Agent readiness

Public API reference (5 points) Found

JFrog Artifactory prior to version 7.29.8 and 6.23.38is vulnerable to Reflected Cross-Site Scripting (XSS) through one of the XHR parameters in the Users REST API endpoint. source

Report a problem with this result

Official MCP server (6 points) Found

JFrog MCP Server for SaaS source
Enable the JFrog MCP Server source
Add the JFrog MCP Server to an MCP Client source

Report a problem with this result

Controls on AI agent actions (4 points) Found

you define exactly which assets and actions each agent is allowed, and the Agent Guard enforces it. source
Agent Guard routes every coding agent (Cursor, Claude Code, Codex, etc.) through an authenticated bridge that validates each request against your rules. source

Report a problem with this result

Audit log export (2 points) Could not check

The scan reached its page or time limit before reading the pages this check needs.

Report a problem with this result

AI use policy (2 points) Found

AI features are customer-controlled and AI development is governed by JFrog's Data Strategy and AI Legal Group. source

Report a problem with this result

Rate limits documented (not scored) Could not check

The scan reached its page or time limit before reading the pages this check needs.

Report a problem with this result

Changelog

2026-11-01: 100 to 85 (rescan) AI use policy: Could not check to Found; Official MCP server: Could not check to Found; No training on customer data: Could not check to Not found in public pages; Data residency: Could not check to Found; Retention periods: Could not check to Not found in public pages
2026-11-01: First score, 100

Scores older than an hour can be refreshed.