GitLab 19.5: MCP Server GA Lets Outside Agents In, With Limits
GitLab 19.5 makes its MCP server generally available, governs Claude Code and Cursor sessions, and adds rate limits. What platform teams should configure first.
GitLab AI Credit Caps: Three Levers for Controlling Agent Spend
GitLab AI credit caps, open-weight models and Orbit target agent spend. What each lever controls, GitLab's benchmarks, and the order to use them.
JFrog at swampUP 2026: Agents Are Now Supply Chain Actors, Not Just Tools
JFrog unveiled APM repositories, prompt-to-release traceability, and zero-touch remediation at swampUP 2026 — extending supply chain governance to autonomous AI agents.
From Traces to Experiments: The 5-Stage Loop for Improving AI Agents in Production
Datadog's framework for turning AI agent traces into actionable improvements — from pattern identification to production A/B testing — addresses the gap that offline evaluation alone can't close.
HashiCorp Vault Agentic IAM Is Now GA: Managing AI Agents Like Identities
Vault Enterprise 2.1 brings AI agent identity management to general availability — per-request OAuth controls, a centralized agent registry, and Terraform provisioning for agent credentials.
What Datadog Learned About AI Agent Security by Monitoring Its Own Agents
Datadog's internal agent monitoring revealed that 69% of input tokens live in system prompts teams can't inspect, coding agents execute repo-controlled code before the first user message, and prompt injection bypasses model evaluation entirely.
How Datadog Saves $1 Million a Month on AI: The Optimization Playbook
Datadog cut over $1M/month in AI costs by migrating models, adjusting effort levels, and deploying context optimization. The specific numbers and methods behind each lever.
Golden Paths for AI Agents: Redesigning Platform Workflows for Non-Human Users
Agents are now platform users. Datadog maps three required changes: execution patterns, deterministic controls, and dispatch authorization before agent runs.
AI Just Found a 27-Year-Old Vulnerability. Your AppSec Stack Wasn't Built for This Speed.
Claude Mythos Preview independently found and weaponized a 27-year-old OpenBSD flaw, a 16-year-old FFmpeg bug, and a 17-year-old FreeBSD RCE. JFrog's analysis explains why fragmented security tooling can't keep up.
HCP Terraform as the Control Plane for AI-Driven Infrastructure
HashiCorp's case for HCP Terraform as the governance layer for AI agents writing infrastructure code: provenance, policy gates, scoped identities, isolated workspaces, and audit trails agents can't bypass.
Agentic Dev Security Starts Before the Agent Writes Its First Line
JFrog's Ohad Shalev argues most agentic development security tools watch what agents build but miss what they consume before they start — and that gap is where the real attack surface lives.
swampUP 2026: JFrog's Conference Puts AI Supply Chain Trust at the Center
swampUP 2026 in New York (September 1–3) focuses on immunizing, healing, and governing the agentic software supply chain. Anthropic's Deputy CISO, NVIDIA, AWS, and Wiz are on the agenda. Here's what to expect.
JFrog's Agent Guard Targets the MCP Servers Nobody in Security Approved
36% of MCP servers and agent skills tested carry a security flaw. JFrog's Agent Guard adds an approved-only proxy so developers can't connect coding agents to ungoverned tools.
Model Routing Promises 85% Savings. One Switch Can Erase All of It.
JFrog's research shows model routing cuts AI agent costs by 40-85% — but a single mid-session model switch can cost more than the savings it was meant to create.
Autonomous Infrastructure for Agentic Workflows
HashiCorp's seven-layer model for governing infrastructure as AI agents make changes at machine speed, from code to policy-bound self-service.
DevGovOps: The Compliance Framework AI-Speed Development Actually Needs
AI agents commit 10–50x faster than human developers. EU DORA compliance requires continuous proof of controls. DevGovOps is the framework that reconciles the two.
Atlassian's Jira Gets a Coding Agent: What the Teamwork Graph Actually Changes
Jira Coding Agent is now live on all paid plans. Atlassian's Teamwork Graph provides project context to connected AI coding tools — here's what that means for platform teams managing AI-assisted development at scale.
AI Agents Now Have a Package Manager — and JFrog Is the Enterprise Registry
APM (Agent Package Manager) treats agent primitives like versioned software packages. JFrog's Artifactory adds native support, bringing supply-chain governance to AI agent configuration.
Why Uniform AI Agent Governance Fails — and What to Do Instead
Gartner projects 40% of enterprises will demote or decommission AI agents by 2027 due to governance failures. JFrog's analysis of why one-size-fits-all governance breaks down, and the tiered alternative.
Checkmarx's New SAST Engine Isn't About the LLM. It's About What Comes After.
Checkmarx unveiled a hybrid SAST engine with three components — a deterministic scanner, an LLM trained on security data, and a Finding Analysis Engine that filters false positives before results reach developers. The differentiator is the last one.
JFrog Artifactory Adds Xet Protocol Support: How Enterprise Model Distribution Finally Scales
JFrog Artifactory's native Xet protocol support brings chunk-level deduplication to Hugging Face model distribution — delivering up to 3.7x faster subsequent pulls and controlled storage growth for enterprises managing fine-tuned model variants.
JFrog Brings Artifact Governance to Coding Agent Plugins
JFrog Agent Plugins Repositories treats coding agent plugins as governed software artifacts in Artifactory — closing the supply chain gap where Claude Code, Cursor, and Codex plugins arrive from uncontrolled GitHub repos and Slack channels.
JFrog Named a Leader in the First-Ever Gartner MQ for Software Supply Chain
JFrog placed highest for Ability to Execute in the inaugural Gartner Magic Quadrant for Software Supply Chain Platforms — the first analyst framework to evaluate this market as a unified category.
AI Writes Rego Fast. JFrog's AppTrust Playground Validates It Against Real Artifacts.
OPA dominates policy-as-code at 62% of all policy files. AI tools generate it in seconds. JFrog's Policy-as-Code Playground closes the gap between AI-generated Rego and production-safe policy.
How to Secure Kubernetes in the Age of AI Workloads: A Four-Layer Approach
AI agents on shared Kubernetes clusters are dynamic, bursty, and frequently egress-heavy — a threat surface that traditional NetworkPolicy wasn't designed for. Here's the four-layer approach that addresses it.
JFrog Just Put NVIDIA NIM Models Into Your Software Supply Chain
NVIDIA NIM inference microservices used to bypass organizational supply chain controls entirely — pulled directly from NVIDIA's NGC registry with no versioning, scanning, or audit trails. JFrog AI Catalog now treats NIM models as governed artifacts alongside every other dependency.
JFrog's AI Asset Detection: Why Shadow AI Is the New Shadow IT
Coding agents are pulling MCP servers, models, and AI-generated code into your pipelines without approval. JFrog's detection framework classifies four categories of AI assets and explains how to build a continuous inventory before they become supply chain risks.
AI Agent Guardrails: Where You Place Them Matters as Much as What They Do
Reactive guardrails on tool outputs miss the attack. Why pre-execution placement and multi-hook coverage change AI agent security posture.
The AI Governance Illusion: 97% of Teams Think They're Covered — and Aren't
JFrog found 97% of orgs claim AI model governance while 495 malicious models sat on Hugging Face. The confidence-reality gap is the real security risk.
HashiCorp Vault SPIFFE: The Identity Layer Agentic AI Has Been Missing
Vault Enterprise 1.21 now issues SPIFFE identities to AI agents and non-human workloads — giving autonomous systems the cryptographic credentials zero-trust security requires.
JFrog MCP Registry: Governing AI Agents at the Tool Level
JFrog MCP Registry enforces AI agent permissions at tool level, not server level — giving Google Cloud teams governed self-serve MCP access without accepting blind security risk.
JFrog + SageMaker: Building the Governed AI Model Supply Chain That S3 Can't
Integrating JFrog Artifactory with AWS SageMaker closes the governance gap in AI model pipelines — AIBOM generation, Hugging Face curation proxy, and immutable versioning replacing unstructured S3 buckets.
AI Supply Chain Governance: Why Model Safety Isn't Enough
JFrog's 2026 analysis shows why AI model safety and trusted AI governance are two different things — and why most enterprises haven't closed the gap.