JFrog Ltd. shares advanced 11.7% on Thursday after the company unveiled JFrog Traffic Controller, a network-level package security solution designed to intercept and block malicious software packages before they reach end-user systems.
The new tool reroutes software package download requests through JFrog Artifactory, ensuring all packages traverse a governed software supply chain. Unlike systems that outright block out-of-policy requests, Traffic Controller transparently reroutes downloads to deliver compliant packages without disruption while preventing malicious ones from reaching machines. The solution is available immediately via JFrog Curation.
JFrog Traffic Controller integrates with major Secure Access Service Edge (SASE) providers, including Zscaler, Cloudflare and Netskope, aligning with their respective platforms—Zscaler Internet Access, Cloudflare Gateway and Netskope One SSE. The integration targets open-source consumption control at the network edge, a critical need amid rising AI-driven automated dependency downloads from public registries.
The announcement coincided with a 451% year-over-year surge in malicious software packages, reaching over 171,000 unique instances in 2026, according to the 2026 Software Supply Chain Security State of the Union report. Only 40% of organizations currently deploy malicious package detection capabilities, while secrets detection remains active in just 28% of enterprises.
JFrog shares were last quoted at $103.55, up $10.75, or 11.58%, in after-hours trading.
