Trust at Machine Speed: Securing the Agentic Supply Chain

October 26th, 2026 | 10:00 AM CET

Software supply chain attacks are no longer rare events. In 2026 alone, attacks have struck npm, PyPI, and IDE extensions at an accelerating pace, from the LiteLLM compromise, with its 100M monthly downloads, to repeated Shai-Hulud waves. At the same time, AI agents pull in packages, MCP servers, and skills from anywhere, often completely bypassing your standard review process.

In this session, Nir Peleg, JFrog’s Global Field CISO, shows how the threat landscape has changed and what it takes to keep trust intact when software is assembled at machine speed.

You'll discover how to:

• Recognize the new risks of the agentic SDLC
• Curate and control the packages, MCPs, skills, and AI assets that agents consume
• Apply the same policies and evidence across every coding agent and IDE your developers use
• Manage your entire software supply chain through one platform and one system of record

Whether your teams are already running coding agents at scale or just starting to explore them, this session shows how to adopt agentic development without giving up security, control, or auditability.