JFrog Unveils DevSecOps for IoT
June 02, 2022

JFrog introduced JFrog Connect, a new solution designed to help developers update, manage, monitor, and secure remote Linux & IoT devices at scale.

Available immediately, JFrog Connect ushers in a new era of software automation, traceability, and security to the world of connected devices via a modern DevOps platform. A fully integrated part of the JFrog Platform, JFrog Connect empowers companies to manage one to hundreds of thousands of devices using a consistent operational model and intuitive user interface across cloud, on-premises, and multi-cloud deployments.

"The massively distributed nature of edge/IoT expands the enterprise attack surface, and also exacerbates operational, cross-functional software update workflow challenges,” said Yoav Landman, Co-founder and CTO, JFrog. “One of the main reasons for that, is that updating edge devices is often siloed from a modern software supply chain. JFrog Connect, integrated with the JFrog Platform, effectively helps companies manage automatic, continuous delivery of secure software updates from developers’ keystrokes to any distributed edge or fleet of connected things, while fortifying their software supply chain against emerging attack vectors.”

Fully integrated with the JFrog Platform, JFrog Connect, enables developers to automate DevSecOps activities with deeply integrated best practices and continuous governance across the entire software development lifecycle using a unified solution – across cloud, on-premises, or hybrid instances – which reduces deployment time and operational pain.

Key features of JFrog Connect include:

- Secure, over-the-air (OTA) updates in seconds: Low-code, drag-and-drop interface that enables developers to build their own update flow logic, including artifacts, containers, running scripts, commands, release bundles, pulling from Git repositories, and more.

- Automatic rollback: In the event an update process fails, JFrog Connect will instantly trigger rollback to ensure the device returns to the previous known software state.

- Robust container support: Confidently and securely update and manage a single Docker container, or Docker Compose microservices to manipulate complex applications in edge and IoT devices.

- Artifact security & distribution: Gain peace of mind with atomic distribution and signed releases of continuous, secure software updates from JFrog Artifactory.

- Real-time monitoring: Complete visibility of an IoT devices' current state, resources, data and applications keeps devices secure and stable.

- Seamless edge device integration with unparalleled control. A suite of access tools empowers developers to connect, gain instant insight, and manage a wide-range of Linux-based IoT devices from anywhere in the world.

- Comprehensive management. Full end-to-end management of connected devices that can be grouped by name, description, or tags, for managing complex deployments. topologies of edge and IoT devices.

As part of the JFrog Platform, JFrog Connect enables developers to automate DevSecOps activities with deeply integrated best practices and continuous governance across the entire software development lifecycle, all the way to the edge - regardless of industry.

Select vertical customer use cases relying on JFrog Connect:

- Retail & Hospitality: JFrog Connect enables the secure use of drones and/or robots for last-mile delivery services in rural areas, devices in restaurants and hotels for food ordering or guest services, self-service kiosks, self-checkout systems, and more. All these connected devices require constant monitoring and updating to ensure effective operation, proper utilization, security, and compliance.

- Energy & Utilities: JFrog Connect enables oil and gas workers to monitor remote wellheads for an entire field from a central location and enable better field communication, while reducing maintenance costs and power consumption.

- Manufacturing: Modern manufacturing floors are not only manned by humans, but by thousands and tens of thousands of devices like industrial robots, quality equipment, testing and data gathering tools, safety equipment and monitoring, etc. All these devices need constant security monitoring, troubleshooting, and updating to ensure safe, predictable operations in high-risk environments.

Share this

Industry News

May 02, 2024

Parasoft announces the opening of its new office in Northeast Ohio.

May 02, 2024

Postman released v11, a significant update that speeds up development by reducing collaboration friction on APIs.

May 02, 2024

Sysdig announced the launch of the company’s Runtime Insights Partner Ecosystem, recognizing the leading security solutions that combine with Sysdig to help customers prioritize and respond to critical security risks.

May 02, 2024

Nokod Security announced the general availability of the Nokod Security Platform.

May 02, 2024

Drata has acquired oak9, a cloud native security platform, and released a new capability in beta to seamlessly bring continuous compliance into the software development lifecycle.

May 01, 2024

Amazon Web Services (AWS) announced the general availability of Amazon Q, a generative artificial intelligence (AI)-powered assistant for accelerating software development and leveraging companies’ internal data.

May 01, 2024

Red Hat announced the general availability of Red Hat Enterprise Linux 9.4, the latest version of the enterprise Linux platform.

May 01, 2024

ActiveState unveiled Get Current, Stay Current (GCSC) – a continuous code refactoring service that deals with breaking changes so enterprises can stay current with the pace of open source.

May 01, 2024

Lineaje released Open-Source Manager (OSM), a solution to bring transparency to open-source software components in applications and proactively manage and mitigate associated risks.

May 01, 2024

Synopsys announced the availability of Polaris Assist, an AI-powered application security assistant on the Synopsys Polaris Software Integrity Platform®.

April 30, 2024

Backslash Security announced the findings of its GPT-4 developer simulation exercise, designed and conducted by the Backslash Research Team, to identify security issues associated with LLM-generated code. The Backslash platform offers several core capabilities that address growing security concerns around AI-generated code, including open source code reachability analysis and phantom package visibility capabilities.

April 30, 2024

Azul announced that Azul Intelligence Cloud, Azul’s cloud analytics solution -- which provides actionable intelligence from production Java runtime data to dramatically boost developer productivity -- now supports Oracle JDK and any OpenJDK-based JVM (Java Virtual Machine) from any vendor or distribution.

April 30, 2024

F5 announced new security offerings: F5 Distributed Cloud Services Web Application Scanning, BIG-IP Next Web Application Firewall (WAF), and NGINX App Protect for open source deployments.

April 29, 2024

Code Intelligence announced a new feature to CI Sense, a scalable fuzzing platform for continuous testing.

April 29, 2024

WSO2 is adding new capabilities for WSO2 API Manager, WSO2 API Platform for Kubernetes (WSO2 APK), and WSO2 Micro Integrator.