JFrog Ltd. Ordinary Shares SwampUP 2026

All right. Welcome everyone. We have got an exciting lineup for you today. Very glad that all of you were able to attend swampUP 2026. I think there is a lot of announcements that we will be discussing, and certainly getting your feedback and questions and answers in this session today in the investor hour that we are hosting for swampUP 2026. First, what I would like to do is I would like to introduce our CRO, Tali Notman, and a key customer of ours from Keysight Technologies. They are here today to talk about the DevGovOps solution and why Keysight found JFrog as the solution provider for their governance solution. With that, I would like to introduce Tali Notman and Christophe from Keysight Technologies.

Thank you. Hello. Hi. Welcome on stage.

Thank you. Well, I am not sure why they did not give us the keynote session.

I think we are going to be really good for this one. Hello, welcome everyone, and welcome you on stage.

Thank you. Well, we have Christophe with us, Keysight CISO today, and we are here to have a very interesting discussion.

Before I will start, maybe you can share with us a little bit more about Keysight in the new era of AI, and how is it touching you and your role specifically?

Sure. Keysight, as of last year, was a $5 billion diversified company in the technology sector. We sell mostly into communication market, aerospace, defense, autonomous vehicles. Our value proposition has always been in the R&D segment for our customers, where we provide test, measurement, and design solutions as our customers develop their products and solutions. As a part of that, we have sold hardware, we're a legacy HP company, for about 80, 90 years, but more and more of our value proposition has declined in software, and we never sell hardware that doesn't include software inside of it. We have quite a few standalone software products. As we look at that technology evolution, the speed at which we've been developing software internally has accelerated tremendously, I think, like every software shop in the world.

Our use of AI technology, the amount of code we generate because of it, has increased significantly. We're also working on embedding AI into the solutions we sell to our customers, in their markets for them to work their products.

And well, we just saw in the last session the role of the CISO and how it evolved, right? Maybe you want to share a little bit about the specific role that you are now playing.

Sure. I work in central technology, so we are very much of an R&D company internally, and I own all of our DevSecOps organization, which now also includes all of our AI initiatives. All the use of AI tooling internal to the development work that we do across around 5,000 developers is governed from within our org.

Yep. We are going to jump right into the discussion about DevGovOps. I think this is why we are all here this afternoon. But the first thing, really, when you are thinking about software governance, what is it? I am really confused at this point. Is it more security? Is it compliance? Is it a more developer or engineering productivity issue? Is it all of the above?

Yes, yes, and yes. I think the role of the software developer has changed. It is continuing to change, and we need to really enable continued productivity or production of our software so that we can continue to accelerate our revenues. As a part of that, as a governance or a compliance function, we need to keep up with our developers to never stop writing code at the speed that they can ship it. I think in the market we serve, we have seen the advent of several regulations, both past and upcoming, so Secure Software Development Framework, and now this year for us, the EU Cyber Resilience Act, which adds a lot of regulatory burden on R&D teams to catalog, capture artifacts, Software Bill of Materials, alongside the products that we ship. For us, it is really a question of we want our developers writing code.

We don't really want them spending time capturing compliance or filling in compliance checklists or managing those artifacts that then go into Software Bill of Materials that get archived alongside the software for future regulatory compliance needs.

Yeah, and I think that this is where we met and discussed AppTrust at that point.