JFrog
JFrog runs the storage and tracking system for enterprise software packages and builds.
On the record
Checkpoint: Q2 2026 earnings call tests cloud growth guidance and whether security revenue is softening
The call
JFrog's core artifact business keeps growing fast even as AI native security tools chip away at its scanning add ons.
JFrog runs a system that companies use to store, manage, and check their software code and packages across any cloud, and it makes money doing this. It is hard to replace because companies spend a lot of time plugging JFrog into their whole operation, it works with 32 different types of software packages, and moving to something else would be expensive and risky. The threat is that Microsoft (which owns GitHub) could build a similar tool into its own products, and that Google's AI assistant Claude can now scan code for problems directly, which could make JFrog's security scanning less valuable. The one thing that could change everything is whether companies keep paying for JFrog's security features or start relying on Claude and similar AI tools instead.
Why
01
AI pressure: Anthropic's Claude Code Security. Claude Code Security scans source code for flaws directly, competing with JFrog's Xray and Curation add ons. Could AI do the core job? Only partly.
02
Bigger players: GitHub (Microsoft) Packages. GitHub could grow Packages into a full cross cloud artifact system, but right now it partners with JFrog instead of fighting it. Could a giant copy it? Probably.
03
What protects it. Deep integration across 32+ package types makes ripping out JFrog's registry costly and slow for large engineering teams.
What would change this call
JFrog's Q2 2026 earnings (Aug 6, 2026) cloud revenue growth rate versus $154-156M guidance. Shows whether core artifact business is decelerating despite AI security competition.
GitHub Packages adds enterprise-scale cross-cloud artifact management matching Artifactory. Would show Microsoft moving from partner to direct competitor for JFrog's core system.
JFrog Security/Xray attach rates or revenue mix within Enterprise+ tier disclosed in filings. Would show whether Claude Code Security is eroding JFrog's security-module revenue.
GitHub Packages adds enterprise-scale cross-cloud artifact management matching Artifactory. Would show Microsoft moving from partner to direct competitor for JFrog's core system.
JFrog Security/Xray attach rates or revenue mix within Enterprise+ tier disclosed in filings. Would show whether Claude Code Security is eroding JFrog's security-module revenue.
Key numbers
- Cloud revenue up 50% YoY in Q1 2026
- Stock dropped over 20% in a day after Claude Code Security launch
- Customers over $1M ARR grew 42% to 74
Named risks
- AI-native source-layer security scanning (e.g. Claude Code Security) eroding Xray/Curation module demand.
- Extreme stock volatility tied to AI-disruption narratives, 32+ moves over 5% in trailing year to June 2026.
- Self-managed/on-prem segment growing much slower (8% YoY) than cloud (50% YoY) as of Q1 2026.
- Continued GAAP net losses, $8.27 million in Q1 2026 despite positive operating margin.
- Frequent insider selling by CEO, CTO, CFO and CRO through Q1 2026 under 10b5-1 plans.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Sonatype | contesting | Markets Nexus Repository as more security-accurate than JFrog Artifactory as of Nov 2025 |
| GitHub/Microsoft | contesting | Named JFrog 2025 Tech Partner of the Year but structurally capable of building rival packages tooling |
| Anthropic (Claude Code Security) | gaining on | Launched source-layer vulnerability scanning Feb 20, 2026, triggering 20%+ JFrog stock drop |
| Cycode | contesting | AI-native AppSec/ASPM platform competing in adjacent security scanning market, 2026 |
| AWS CodeArtifact, Google Artifact Registry, GitHub Packages | contesting | Cloud-native alternatives listed among JFrog Artifactory competitors, Nov 2025 |
Questions people ask
- Is JFrog profitable in 2026?
- Not yet on a GAAP basis: JFrog posted a Q1 2026 net loss of $8.27 million (May 2026), though operating margin was 21.4% and gross margin 83.8%, with free cash flow margin of 24.2%, suggesting underlying profitability is close.
- Could AI replace JFrog's products?
- AI-native tools like Anthropic's Claude Code Security (Feb 2026) threaten JFrog's Xray and Curation scanning modules, but analysts argue JFrog's core artifact/binary system-of-record sits outside that threat; cloud revenue still grew 50% YoY in Q1 2026 despite the panic.
- Who is JFrog's biggest competitor?
- Sonatype (Nexus Repository) is JFrog's closest direct rival in artifact/binary repository management, alongside Cycode in AI-native AppSec; GitHub/Microsoft is a structurally capable but not-yet-shipping threat, and named JFrog its 2025 Tech Partner of the Year.
- Is JFrog a safe company to join in 2026?
- Headcount grew from 1,600 to 1,800 employees between 2024 and Dec 31, 2025 (+12.5%), with 52 open roles reported mid-2026 and cloud revenue accelerating to +50% YoY in Q1 2026, indicating active hiring rather than contraction.
- Who owns JFrog?
- JFrog is a publicly traded, independent company on Nasdaq under ticker FROG, with no parent company. Market capitalization was approximately $10.7 billion as of July 20, 2026, following a 2020 IPO.
- Why is JFrog stock so volatile in 2026?
- JFrog shares dropped over 20% in a single day on Feb 20, 2026 after Anthropic launched Claude Code Security, and the stock logged 32+ moves greater than 5% over the trailing year through June 2026, largely tied to AI-disruption fears.
Timeline
- 2026-08-06Q2 2026 earnings call scheduled after market close
- 2026-07-20Market cap approx $10.7 billion, 52-week range $34.05 to $99.22
- 2026-06-26Stock rebounds on KeyBanc and Cantor Fitzgerald upgrades
- 2026-06-09Claude Cowork-linked selloff drags JFrog shares down with Zoom, Rapid7
- 2026-05-06Q1 2026 results: revenue $153.98M, cloud +50% YoY, RPO $574.9M
- 2026-03-16JFrog Agent Skills Registry announced with NVIDIA at GTC
- 2026-02-20Anthropic Claude Code Security launch triggers over 20% single-day stock drop
- 2026-02-12FY2025 results: revenue $531.8M (+24%), cloud revenue $243.3M (+45%)
- 2026-01-05Genefa Murphy appointed CMO
- 2025-09-09Agentic Software Supply Chain Security launched
Revision history
21 July 2026
First assessed. Defensible for now. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- JFrog Ltd. Company Profile & Executives - WSJ (2026-03-11)
- JFrog Announces Fourth Quarter and Fiscal 2025 Results (2026-02-12)
- The Fly (2026-05-06)
- JFrog to Acquire Qwak to Streamline AI Models from Development to Production (2024-06-25)
- Why JFrog (FROG) Is Down 6.2%... (2026-05-17)
- JFrog Number of Employees (2026-07-16)
- gurufocus.com (2026-07-20)
- JFrog Net Acquisitions/Divestitures 2019-2026 (2026-03-30)
- Why the JFrog sell-off is "excessive" (2026-02-20)
- Zoom, Rapid7, and JFrog Shares Are Falling (2026-06-09)
- Alternatives to JFrog Artifactory (2025-11-05)
- Agentic Software Supply Chain Security (2025-09-09)