Trust Built In: A Hands-On Look at swampUP 2026's New Launches

Software now writes and runs software. Agents ship code at machine speed, frontier AI collapses vulnerability-to-exploit into hours, and regulations like CRA and NIST SSDF demand continuous, provable compliance, none of which the controls built for human developers were designed for.

At swampUP 2026, JFrog introduced the Single Source of Truth for the Agentic Software Supply Chain: one system of record where agents are protected, packages are remediated, and releases are compliant by default. Join our product leaders across three sessions for a hands-on look at what shipped and why it matters.

Session 1 — 9/29 | Trust Your Agentic Workforce (Immunize)
Every developer now manages a team of agents, and controlling what they consume and how they deliver is paramount for establishing trust. See how to give that workforce a governed source of truth with Agent Guard, new AI Asset Registries with security scanning, Native Agent Package Resolution, and a network-level Package Traffic Controller.

Presenter: Guy Eshet

Session 2 — 9/30 | Secure at Frontier Speed (Heal)
Frontier AI threats demand faster fixes that don’t wait on humans. See the self-healing supply chain in action with Zero-Touch Remediation, automatically swapping vulnerable artifacts for the best available fix from maintainers or partners like Chainguard, Echo, TuxCare, and Seal Security, without breaking builds.

Presenter: Ariel Antoni

Session 3 — 10/1 | Regain Control Over Compliance (Govern)
With CRA and the AI Act now being enforced, point-in-time compliance leaves you exposed. We’ll introduce the newest AppTrust capabilities: Out-of-the-Box Compliance Frameworks, an AI-Powered Policy-as-Code Playground, and Prompt-to-Release Traceability that captures a signed evidence chain from every agent interaction to production.

Presenter: Sophie Starchenko