JFrog Curation Partner Solutions

JFrog Curation blocks risky open-source packages, AI models and IDE extensions before they enter your organization. It checks each third-party package when a developer or build requests it from a public repository through Artifactory, and applies your security, license and operational policies before the package is downloaded.

ReleaseTEAM is a JFrog partner. We sell, implement and support Curation alongside Xray and Artifactory.

JFrog Curation vs. Xray

Xray scans what is already inside Artifactory and your builds, and keeps re-checking it as new vulnerabilities are disclosed. Curation works upstream: it decides whether a package is allowed into your remote repositories at all. Most organizations use both. Curation keeps known-bad packages out, and Xray watches everything you already have.

What JFrog Curation Checks

• Security: packages the JFrog Security Research team has identified as malicious, and known vulnerabilities (CVEs) by severity.
• Legal: licenses you allow or block, and packages with no identifiable license.
• Operational: outdated, immature or end-of-life package versions.

New policies can run as a dry run first, so you can see what they would block before enforcing them. With Compliant Version Selection, Curation can pick a version that meets your policies instead of simply failing the request.

Supported Technologies

Curation covers the major package ecosystems, including npm, PyPI, Maven, Go, Cargo and Docker images, as well as Hugging Face AI models. JFrog keeps the current list in its supported technologies documentation. Curation is available on both JFrog SaaS and self-managed deployments.

How to Get JFrog Curation

Curation is a paid JFrog capability. It is available for JFrog Enterprise+ subscriptions and is included in JFrog’s Unified and Ultimate security bundles. ReleaseTEAM can quote Curation, help you plan the rollout and policies, and support it afterwards. See our JFrog licensing comparison, or JFrog sales, support and consulting.

Watch Curation in action and get first-hand visibility of the roadmap highlights.

JFrog as an Enterprise Solution with ReleaseTEAM

JFrog products work together to form a complete enterprise solution for DevOps lifecycle management, enabling teams to deploy and update faster and faster. With ReleaseTEAM to assist in every aspect of a JFrog deployment, you’ll have access to DevOps experts that have seen it all in the software development trenches. ReleaseTEAM’s services include staff mentoring and augmentation, software sales and licensing, and expert support for the entire DevOps Application Lifecycle (ALC) process.

ReleaseTEAM as Your DevOps Partner

ReleaseTEAM has been at the forefront of the adoption of DevOps processes and specializes in all the technologies and processes involved. We have extensive experience working with public sector organizations to meet their requirements and achieve their goals.

Choose ReleaseTEAM for all your enterprise collaboration needs. Our services, including sales and licensing solutions; consulting services – migrations, implementations, integrations, and upgrades; staff augmentation; team mentoring; and dedicated technical support, are tailored to elevate your team's productivity.

Contact us today to discover how we can transform your team’s security, efficiency, and productivity.