The AI catalog for governance was expected for a long time, but they introduced it after quite some waiting time. The JFrog ML for MLOps workflows were quite helpful in handling the mlops workloads and the AI assistant has matured good lately. Review collected by and hosted on G2.com.

They should have caught up with the AI wave quite early but took some sweet time to get the AI catalog to production grade. AI assistant was also like basic chatbot in the initial versions (though its improved a lot recently), they must plan their releases with solid capabilities. Review collected by and hosted on G2.com.

The login experience is smooth even when you are logging in through the console, and packages, versions, builds, and artifacts are well organized on the platform. Review collected by and hosted on G2.com.

The search capability could be improved. I remember that at some point, looking for a build was harder. Also, it is difficult for a user to distinguish between their own builds and external ones. Review collected by and hosted on G2.com.

Honestly, I haven't explored too much but have some basic idea. We use it mainly for the package / asset distribution. Few GitHub actions are set up to push the builds / artifacts which are later used across applications. Review collected by and hosted on G2.com.

Sorry but don't have in depth knowledge, so cannot talk about that. The UI is okiesh, I think the authentication workflow could be improved. I see within few minutes my session expires and have to relogin. Review collected by and hosted on G2.com.

I appreciate that with JFrog, I can search for the latest approved and secure versions of packages, which makes upgrading packages in my projects worry-free concerning security. It's great that I can manage all the builds of my projects in JFrog, and during deployment, access the latest build details easily. Review collected by and hosted on G2.com.

JFrog maintains different versions of packages, but it doesn't show which version had what vulnerability and what is fixed in the next version. Also, JFrog takes a lot of time while loading; it could be improved. Review collected by and hosted on G2.com.

I find the experience with JFrog fine as of now. I use it for handling images and specifically for taking the immediate made of the newer version and working back, which is helpful for the tasks I do. The initial setup was quite easy and we didn't face any difficulty. Review collected by and hosted on G2.com.

Your work on pricing. You can work on a subscription plan, because it is highly expensive for startups, individual developers, and smaller organizations. I want you to make it a smart input for small startups. Also, you can introduce a modern UI in your JSON so that it will be better. Review collected by and hosted on G2.com.

Its the best artifactory for keeping the deployment containers secured and safe. Their AI ML engine js also very great based on the time I have used it for. Review collected by and hosted on G2.com.

Nothing as such for my case the supply and chain management is really great and much appreciated in the IT industry asi got to know about this service from my provider. Review collected by and hosted on G2.com.

I love JFrog's support for all types of packages, as it acts like a 'joker' and supports more than 30 types of technologies in one place. I am impressed by the proactive security provided by JFrog Xray, which automatically and continuously scans for vulnerabilities, alerting us immediately if a new vulnerability appears. I also appreciate the version and metadata management, where JFrog maintains a complete identity for each file, greatly facilitating error tracking. Additionally, I like the lifecycle automation tool that ensures what has been tested is what will be deployed to the public, along with the very seamless cloud setup that eliminates concerns about infrastructure, and the interface that helps in quickly creating the first repository. Review collected by and hosted on G2.com.

The learning curve due to the vastness of the platform and its numerous features causes new users to struggle initially. The problem: The user interface (UI) is filled with complex options and settings. Review collected by and hosted on G2.com.

I primarily use JFrog Artifactory as a centralized repository manager to handle the lifecycle of my software packages, and it effectively eliminates the friction that slows down a high-stakes development cycle. I love how it serves as the ultimate safety net and speed booster for our entire software supply chain. Thinking of JFrog as a 'safety net' and 'speed booster' isn't just marketing—it literally describes the difference between a smooth release and a weekend spent fixing a broken production environment. It's particularly beneficial when juggling the responsibilities of a Senior Full Stack Developer in a fast-paced environment. JFrog acts as the 'connective tissue' that links my code to my infrastructure, and its key integrations keep my workflow moving smoothly. Review collected by and hosted on G2.com.

While I’m a big advocate for JFrog, being a Senior Java Full Stack Developer means I also have to deal with its 'rougher' edges. No tool is perfect, especially one that tries to do as much as the JFrog platform. Based on my experience as a Senior Java Full Stack Developer, there are several technical and workflow-specific areas where I’d like to see JFrog push further. While it’s the backbone of our supply chain here in Seattle, these improvements would significantly reduce the daily 'to-do' list for a senior dev. Review collected by and hosted on G2.com.

Since my earlier experience, I’ve started using JFrog beyond just artifact management. I’ve explored its capabilities around end-to-end CI/CD pipelines, security integrations, and automation workflows, especially while working on more infrastructure and DevOps-heavy tasks.

I particularly like how JFrog brings together artifact management, security scanning, and release orchestration into a single platform. Features like Software Bill of Materials (SBOM) and Software Composition Analysis (SCA) have been useful for improving visibility into dependencies and maintaining better security hygiene. Review collected by and hosted on G2.com.

While JFrog is powerful, some areas like release bundle distribution and configuration workflows can still feel a bit complex and not very intuitive at first. There’s definitely a learning curve, especially for new users working with advanced DevOps features.

Improving UI clarity, onboarding documentation, and simplifying certain workflows would make adoption smoother. Review collected by and hosted on G2.com.

Building on our existing use of JFrog for artifact management and CI/CD, several newer capabilities stand out:

AI Model Governance is a big one. JFrog AI Catalog lets teams identify and access AI models approved for use within their org, with governance controls over AI added to applications JFrog — essential as AI adoption accelerates across teams.

Shadow AI Detection adds visibility we didn't have before. It gives enterprises control over unmanaged AI models and API usage, guarding against security and compliance risks from uncontrolled AI adoption. JFrog

Auto-remediation is a real time-saver. JFrog can now automatically replace risky packages with approved compliant versions JFrog, reducing manual triage significantly.

Proven ROI makes the investment easy to justify. A Forrester study found the platform delivered 282% ROI and saved 38 hours per developer on onboarding. Review collected by and hosted on G2.com.

Beyond the earlier feedback on complexity and pricing, a few additional areas stand out:

UI Cohesion — As JFrog adds products like AppTrust, AI Catalog, and Advanced Security, the experience between modules still feels disjointed. A more unified interface would help daily usability.

Pricing Transparency — It's not always clear which newer features are included in existing plans versus requiring upgrades, making budgeting harder for smaller teams.

Documentation for Advanced Use Cases — Complex setups like multi-repo configurations or custom SBOM workflows often require piecing together answers from community forums rather than official docs.

Uptrust Timeline — JFrog's supply chain trust product isn't expected until September 2026 Investing.com, leaving a gap for teams who need those capabilities now. Review collected by and hosted on G2.com.