JFrog delivers trust layer for AI-driven software with NVIDIA

JFrog, the creators of the JFrog Software Supply Chain Platform, has announced JFrog Agent Skills Registry. Validated through early integration with NVIDIA, the platform provides governance and a verifiable trust layer required for agentic workforces to operate securely at enterprise speed and scale. 

The rapid evolution of AI has made autonomous agents, which rely on skills, a standard part of the software supply chain. However, an infrastructure layer beneath them is needed to enforce policies, security, and privacy controls required to make them safe for use, JFrog said. Without a standardised infrastructure, organisations face unprecedented security and compliance risks, as demonstrated by recent OpenClaw manipulations and breaches.

The new JFrog Agent Skills Registry is built to provide the governance and verifiable trust layer required for agentic workforces to operate securely at enterprise speed and scale. It will support NVIDIA Agent Toolkit, including NVIDIA OpenShell, an open-source runtime for building and deploying safe, autonomous, long-running AI agents. Additionally, JFrog Artifactory will serve as a registry for AI models and agent skills with NVIDIA AI-Q Blueprint, as part of NVIDIA Agent Toolkit.  

 “AI agents are fundamentally reshaping how software is created and operated, but without a dedicated trust layer to enforce governance and secure workflows, they introduce significant enterprise risk,” said Gal Marder, JFrog’s Chief Strategy Officer. 

“Just as a malicious software package can compromise an application, an unvetted skill can guide an agent to perform harmful actions. To safely deploy autonomous agents at scale, organisations must move beyond blind trust. Working closely with the NVIDIA Enterprise AI Factory team, we are establishing a reliable system of record to store, scan, and govern all agentic binary assets across the software supply chain.”  

JFrog’s universal solution supports all agents, including NVIDIA OpenShell, which delivers a trust layer to:  

- Enhance security and governance of all MCPs, agent skills, models, and software packages using a single source of truth to scan and block those with malicious intent or vulnerabilities.

- Enable secure adoption and scale of autonomous, long-running agents without increasing risk or compromising compliance.

- Power agentic workflows and developer innovation across the enterprise, safely and continuously, without disruption.  

“Security and governance are key to deploying AI agents in the enterprise," said Pat Lee, VP, Enterprise Partnerships, NVIDIA. 

“JFrog’s Agent Skills Registry for NVIDIA OpenShell supports security and control for deploying long-running agents to help scale enterprise productivity with powerful new AI tools.” 

By establishing the JFrog Platform as an integrated, secure registry for NVIDIA AI-Q Blueprint and NVIDIA OpenShell runtime, enterprises will be able to safely operate agents using verified skills, MCP servers, models, and software packages. 

The NVIDIA and JFrog teams worked closely to validate a workflow for the ingestion and management of Artifactory as a skills registry, including support for NVIDIA-developed skills, using NVIDIA cuOpt as the first example of a packaged skill. This integration gives NVIDIA a single, governed endpoint for distributing verified AI skills across all agent platforms, with a promotion model that enforces increasing security gates from team to enterprise-wide use.

Feature highlights:

- The JFrog Platform is validated for the NVIDIA AI-Q Blueprint for lifecycle management and governance of agent skills.

- JFrog Artifactory natively integrates with NVIDIA OpenShell runtime, designed to provide secure, private, and scanned resources.

- The JFrog AI Catalog and Agent Skills Registry act as the central control plane for NVIDIA OpenShell, providing a single source of truth to track, audit, and manage the provenance of agents, NVIDIA NIM, and MCP servers.

- JFrog AI Catalog automatically scans, verifies, and signs all AI skills upon upload to detect vulnerabilities, malicious payloads, and compliance risks before NVIDIA OpenShell – or other agents – ever adopt them.

- The JFrog Platform allows organisations to set strict approval workflows, ensuring developers and AI agents can only access permitted, verified skills for specific projects and business units. The NVIDIA OpenShell runtime then sandboxes each agent in an isolated, virtual environment, enabling safe execution of code without risk of broader network infection. 

Hashtags: #AI, #DevGovOps, #DevSecOps, #GTC, #GTC2026, #security, #softwaresupplychain 

*MCP stands for Model Context Protocol.

Comments

Post a Comment

Popular posts from this blog

Fortinet enhances FortiRecon to align with CTEM framework

Fortinet, the global cybersecurity provider driving the convergence of networking and security, has turned the FortiRecon platform into a comprehensive solution aligned with the continuous threat exposure management (CTEM) framework. The latest release introduces expanded internal attack surface monitoring, adversary-centric dark web intelligence, and security orchestration, all in a unified platform. These enhancements help organisations proactively identify and prioritise real-world exposures, validate risks like an attacker would, and accelerate response. “CISOs and security teams are overwhelmed by growing attack surfaces and an endless stream of unprioritised alerts,” said Nirav Shah, Senior VP of Products and Solutions at Fortinet. “With the latest enhancements to FortiRecon , we’re giving organisations an attacker’s eye view of their internal and external exposures, backed by AI-powered threat intelligence from FortiGuard Labs, real-world validation, and automated response...
Read more

SentinelOne recognised as a 2025 Gartner Peer Insights Customers’ Choice for XDR

SentinelOne, a global provider of AI-powered security, has been named a Customers’ Choice in the 2025 Gartner Peer Insights ‘Voice of the Customer’ for Extended Detection and Response (XDR) report* – one of only two companies with this distinction. A hundred and forty-four users reviewed SentinelOne's Singularity Platform, and 97% said they would recommend the solution to respond to threats across endpoints with AI-powered security, while 97% rated the solution four stars or better.** “With the growing complexity of cyberthreats, organisations need more than siloed security—they need AI-powered, autonomous protection that delivers real-time detection and response across their entire attack surface. Customers have made it clear that SentinelOne’s XDR provides the intelligence, automation, and efficiency they need to stay ahead of threats and secure their environments with confidence,” said Ely Kahn, VP, Product Management, SentinelOne. Gartner defines extended detection and ...
Read more

AWS: AI adoption grows 20% in Singapore

Image
Amazon Web Services (AWS), an Amazon.com company, has found* that AI adoption continues to accelerate in Singapore. In the past year alone, 27,000 1 Singapore businesses adopted AI for the first time—equivalent to over three new adopters every hour. In sum, nearly 170,000 (48%) of businesses in Singapore have adopted AI 2 , up from approximately 143,000 (40%) a year ago. This represents a 20% year-over-year growth rate, AWS said. AI adoption is the strongest in the financial services industry (71%), followed by the technology sector ( software developers, data analytics firms, cloud service providers, and digital startups) at 70%, and healthcare at 63%. Among Singapore’s businesses that have adopted AI, 82% reported an increase in revenue, at an average increase of 19%, while 90% report significant productivity improvements. A large majority (85%) of those who have adopted AI say the technology is likely to increase their growth in the next year, and 89% expect an average of 17%...
Read more