The EU Cyber Resilience Act (CRA) introduces sweeping requirements that significantly impact how software is built, secured, and maintained. Yet many organizations underestimate the CRA’s complexity, often assuming that a single tool or vendor can “solve” compliance end to end. This webinar unpacks the realities behind CRA readiness, debunking the ... Read More

AI coding tools are now embedded across engineering teams, but most organizations are still measuring adoption instead of impact. Token spend is rising, usage is growing, and leaders are being asked a harder question: what did that AI investment actually produce? Join Harness for a conversation on how engineering leaders ... Read More

Open-source supply chain attacks are back in the news, and the pattern is familiar: a trusted package, a compromised account, hundreds of malicious updates pushed downstream before anyone noticed. What's changing is the exposure on multiple fronts. Open-source components are in nearly every application. AI components are being wired in ... Read More

Infrastructure as Code adoption is no longer a one-size-fits-all journey. Some organizations are building greenfield cloud-native environments from scratch, while others are modernizing decades of legacy infrastructure and operational processes. As infrastructure complexity grows, teams are realizing that automation alone is not enough. In this webinar, we’ll explore how organizations ... Read More

In this webinar, we'll walk through how modern engineering teams trace issues end-to-end across the full AI application stack. We'll start with Application Performance Monitoring, where distributed traces surface where time is actually being spent. From there, we'll follow a real-world debugging workflow down through code-level profiling to identify inefficient ... Read More

In this technical session, Adyen DevSecOps expert Supun Vidana Pathiranage and JFrog’s Yonatan Arbel break down the architecture Adyen built to decouple dependency resolution from their core build system. This approach enables accurate, scalable visibility and reliable security scanning without disrupting developer workflows or requiring a total system rewrite ... Read More

AI coding tools are helping teams generate more code than ever, but the real bottleneck has moved downstream: review fatigue, brittle release processes, and uncertainty about whether AI-generated changes actually improve the product. Manual review still matters, but it cannot be the only line of defense when code volume keeps ... Read More

In this workshop, award-winning offensive security researcher Tyler Nighswander will contrast AI-native codebase scanning to traditional methods like rules-based SAST and human pentesting in order to not only find bugs, but also assess the exploitability and severity of bugs in the real world. He will then walk through actual results ... Read More

Join us on to discover how the integration between JFrog and GitHub - GitHub’s Technology Partner of the Year 2025 - is changing the game. We will explore a fully automated, agentic approach to software delivery that bridges the gap between your source code and your production binaries ... Read More

Continuous Integration and Continuous Delivery have become the backbone of modern software delivery — but in 2026, the demands placed on CI/CD pipelines have never been higher. Organizations are shipping faster, architectures are more distributed, and the expectations for security, reliability, and governance have intensified. The result: CI/CD is undergoing ... Read More