FROGInformation Technology·Sep 3, 2026·18 min read

[FROG] JFrog Thesis 2026: Artifactory Becomes the System of Record for the Software Supply Chain

JFrog Ltd. (NASDAQ: FROG) is an Israel-founded, US-listed DevOps / software-supply-chain platform company, founded ~2008-2009 by Shlomi Ben Haim, Yoav Landman and Fred Simon, NASDAQ-listed since 2020, headquartered in Sunnyvale California and Netanya Israel. FROG enters FY2026 with FY2025 revenue ~$0.42-0.52B (+18-28% YoY off ~$0.43B FY2024) and adj. EPS ~$0.55-0.85 (non-GAAP; approaching/at GAAP profitability), reflecting self-managed (on-prem/private-cloud) subscription revenue plus JFrog Cloud (SaaS) subscription revenue (the growth vector) plus security (Xray, Advanced Security, Curation) attach plus JFrog ML (MLOps) revenue, all under co-founder-CEO Shlomi Ben Haim (~14-16 year tenure, architect of the 'liquid software'/DevOps-platform strategy, the cloud transition, the security upsell and the Qwak/JFrog ML acquisition). The first thesis pillar is the Artifactory + JFrog Cloud Platform pipeline (~$0.36-0.45B revenue, ~80-88% revenue mix): Artifactory — the universal binary/artifact repository, the 'system of record' for software packages, container images, Helm charts and ML models across all package types (Maven, npm, PyPI, Docker, NuGet, Go, Conda, Cargo, Hugging Face models and more), the central node in the software supply chain that every build pulls dependencies from and pushes artifacts to, deployed hybrid/multi-cloud (self-managed on-prem/private cloud or JFrog Cloud SaaS) with enterprise-grade HA, replication and access control — plus JFrog Cloud, the SaaS deployment that is the growth vector (cloud revenue growing faster than self-managed, cloud mix rising toward ~40%+, hybrid consumption+subscription pricing, lower friction to adopt and expand), Distribution/Pipelines/CI-CD adjacencies and the unified JFrog Platform (DevOps + DevSecOps + MLOps); net revenue retention runs ~115-120%+ (the expansion engine — seats, package types, cloud, security modules), $100K+ and $1M+ ARR customer cohorts grow (the latter faster), and non-GAAP gross margin is ~75-80%+; FY2026 catalyst is ~$0.43-0.55B platform subscription revenue (+18-26%) with cloud mix toward ~40-45% and AI/ML model artifacts as a new package class. The second pillar is the Security (Xray + Advanced Security + Curation) + JFrog ML pipeline (~$0.06-0.10B+ revenue, the high-growth high-value upsell layer): Xray (software composition analysis — vulnerability/CVE and license scanning, deep recursive dependency scanning, 'shift-left' security on the binaries Artifactory already holds), Advanced Security (secrets detection, IaC security, container/contextual analysis on which CVEs are actually exploitable, malicious-package detection — the premium DevSecOps tier), Curation (proactively blocking known-malicious open-source packages at the proxy/download layer — addressing typosquatting, dependency confusion and malicious updates) and JFrog ML (the Qwak acquisition ~2024 — MLOps/model management, storing/versioning/serving/monitoring ML models alongside software artifacts, the AI/ML supply-chain extension with AI-model curation/security); security-module penetration of the Artifactory base is still low (a large runway), with SBOM mandates, US executive orders on software supply chain and the EU Cyber Resilience Act as regulatory tailwinds, and JFrog ML cross-selling into the enterprise AI buildout; FY2026 catalyst is security ARR outpacing the platform plus JFrog ML AI cross-sell lifting NRR and ARR-per-customer. The capital story: no dividend (growth-reinvestment, capital efficiency), no/minimal buybacks (early-stage; a small SBC-offset buyback is possible as cash flow matures), a net-cash position (~$0.4-0.6B+ cash and investments; no/minimal debt — IPO proceeds plus cash generation), ~$0+ net leverage, a non-rated/self-funded credit profile, ~115-125M diluted shares (SBC-driven dilution plus the Qwak equity — a watch item) and positive free cash flow; the GAAP-profitability inflection (operating leverage plus SBC discipline) is the FY2026 lever. At ~$25-50 per share on ~115-125M shares (~$3-6B equity, ~$2.5-5.5B EV) FROG trades at ~6-12x EV/Sales and ~30-60x non-GAAP P/E versus developer-tools/DevSecOps/infra-software peers GitLab, Atlassian, Datadog, HashiCorp, Confluent, Sonatype (the direct Nexus Repository/Nexus Lifecycle competitor), Snyk, GitHub and the cloud-provider native registries. FY2026 base case is ~$0.50-0.62B revenue (+18-26%) + ~$0.55-0.85 non-GAAP EPS + ~115-120%+ NRR + cloud mix toward ~40-45% + positive FCF + the GAAP-profitability inflection; bull case ~$0.55-0.70B revenue + a multiple re-rating toward a 'system-of-record-for-the-software-supply-chain' valuation on faster cloud growth, NRR holding ~118-122%, $1M+ ARR cohort expansion, AI/ML model artifacts as a new class, sharply rising security penetration with SBOM/regulatory tailwinds, Curation high growth, JFrog ML riding the AI buildout and operating leverage delivering durable GAAP profitability; bear case ~$0.48-0.55B revenue + ~$0.40-0.60 non-GAAP EPS on GitHub/GitLab platform-consolidation and cloud-provider native-registry bundling commoditizing the standalone repository value prop, Sonatype/Snyk competition on both repository and security, NRR deceleration toward ~108-112% on IT-budget pressure, the cloud-mix gross-margin headwind, Qwak/MLOps execution misses in a crowded space, AI-coding-agent workflow disruption and SBC-driven share-count creep. The thesis depends on the Artifactory + JFrog Cloud Platform pipeline plus the Security (Xray + Advanced Security + Curation) + JFrog ML pipeline plus Artifactory as the software-supply-chain system of record plus all package types plus the JFrog Cloud SaaS growth vector plus ~115-120%+ NRR plus the security/ML upsell plus SBOM/regulatory tailwinds plus the AI/ML supply-chain extension plus the net-cash balance sheet plus the path to durable GAAP profitability and Shlomi Ben Haim's platform, cloud and security execution.

[FROG] JFrog Thesis 2026: Artifactory Becomes the System of Record for the Software Supply Chain

Key Takeaways

  • FROG FY2025 revenue ~$0.42-0.52B (+18-28% YoY) with adj. EPS ~$0.55-0.85 (selected various aggregate ~~non-GAAP; approaching/at GAAP profitability) reflecting continued ~~~self-managed (on-prem/private-cloud) subscription revenue + ~~~JFrog Cloud (SaaS) subscription revenue (the growth vector) + selected various aggregate ~~security (Xray + Advanced Security + Curation) attach + selected various aggregate ~~JFrog ML (MLOps) revenue under continued co-founder + CEO Shlomi Ben Haim (~~~~~~14-16 year tenure as JFrog CEO since founding ~~2008-2009; selected primary post-founding co-founded with Yoav Landman + Fred Simon + selected various aggregate ~~built Artifactory into the de-facto universal binary repository + selected primary architect of post-founding-2025 ~~the "liquid software" / DevOps platform strategy + cloud transition + security upsell + the Qwak (JFrog ML) acquisition + selected various aggregate ~~founder-led, product-driven culture).
  • Artifactory + JFrog Cloud Platform Pipeline (~$0.36-0.45B Revenue): ~~~~~$0.36-0.45B aggregate platform subscription revenue (aggregate ~80-88% revenue mix); selected primary Artifactory (selected primary ~~the universal binary/artifact repository — the "system of record" for software packages, container images, Helm charts, ML models across ~all package types (Maven, npm, PyPI, Docker, NuGet, Go, Conda, Cargo, Hugging Face models, etc.) + selected various aggregate ~~the central node in the software supply chain — every build pulls dependencies from + pushes artifacts to Artifactory + selected various aggregate ~~hybrid/multi-cloud deployment (self-managed on-prem/private cloud OR JFrog Cloud SaaS on AWS/Azure/GCP) + selected various aggregate ~~~enterprise-grade — HA, replication, access control, the "single source of truth" for binaries) + selected various aggregate JFrog Cloud (selected primary ~~the SaaS deployment of the platform — the growth vector (cloud revenue growing faster than self-managed; cloud mix rising toward ~40%+ of revenue + selected various aggregate ~~consumption + subscription hybrid pricing + selected various aggregate ~~lower friction to adopt + expand) + selected various aggregate ~~Distribution + Pipelines + CI/CD adjacencies + Connect (multi-cloud control plane) + selected various aggregate ~~the JFrog Platform — DevOps + DevSecOps + MLOps in one) + selected various aggregate post-2024-2025 ~platform growth + cloud mix shift + selected various aggregate ~~~net revenue retention ~~~115-120%+ (the expansion engine — customers add seats, package types, security modules, cloud) + selected various aggregate ~~~~~~$100K+ ARR customers growing + selected various aggregate ~~~~~~$1M+ ARR customers growing faster + selected various aggregate ~~~75-80%+ aggregate non-GAAP gross margin.
  • Security (Xray + Advanced Security + Curation) + JFrog ML Pipeline (~$0.06-0.10B+ Revenue + Margin/Growth Catalyst): selected primary Xray + Advanced Security + Curation + JFrog ML (within the platform; ~~~the high-growth, high-value upsell layer); selected primary Xray (selected primary ~~software composition analysis — scans every artifact for known vulnerabilities (CVEs) + license-compliance issues + selected various aggregate ~~deep recursive scanning of all dependencies + selected various aggregate ~~the "shift-left" security on the binaries Artifactory already holds — a natural attach) + selected various aggregate Advanced Security (selected primary ~~secrets detection + Infrastructure-as-Code (IaC) security + container/contextual analysis (which CVEs are actually exploitable in your context) + malicious-package detection + selected various aggregate ~~~the premium DevSecOps tier) + selected various aggregate Curation (selected primary ~~proactively block known-malicious open-source packages from ever entering the organization — at the proxy/download layer + selected various aggregate ~~~addresses the open-source-supply-chain-attack threat (typosquatting, dependency confusion, malicious updates)) + selected various aggregate JFrog ML (selected primary ~~the Qwak acquisition (~~2024) — MLOps / model management — store, version, serve, monitor ML models alongside software artifacts in the same platform + selected various aggregate ~~the "AI/ML supply chain" extension — as enterprises ship more ML models, they need the same governance + selected various aggregate ~~AI-model curation/security) + selected various aggregate post-2024-2025 ~security + JFrog ML attach growth (selected primary ~~security module penetration of the Artifactory base (still low — large runway) + selected various aggregate ~~regulatory tailwinds (SBOM mandates, executive orders on software supply chain, EU CRA) + selected various aggregate ~~JFrog ML cross-sell into the AI buildout + selected various aggregate ~~~security/ML as a margin-and-growth accelerant).
  • Capital position + balance sheet: ~$0.00 aggregate annual dividend (no dividend; selected primary ~~growth-reinvestment + capital efficiency) + selected various aggregate ~$0+ aggregate buybacks (selected primary ~~none/minimal — early-stage; though a small buyback to offset SBC dilution is possible) + aggregate net cash position (~~~$0.4-0.6B+ aggregate cash + investments; no/minimal debt — pre-2020-IPO + IPO proceeds + cash generation) + ~$0+ aggregate net leverage (net cash) + non-rated credit profile (selected primary ~~self-funded; no debt) + ~~~115-125M aggregate diluted shares (selected various aggregate ~~~SBC-driven dilution + the Qwak acquisition equity).
  • FY2026 thesis catalysts: Artifactory + JFrog Cloud Platform pipeline (~$0.36-0.45B + the universal binary repository as the software-supply-chain system of record + all package types + hybrid/multi-cloud + JFrog Cloud SaaS growth vector + cloud mix toward ~40%+ + net revenue retention ~115-120%+ + $1M+ ARR customer growth + 75-80%+ non-GAAP gross margin) + Security (Xray + Advanced Security + Curation) + JFrog ML pipeline ($0.06-0.10B+ + Xray SCA + Advanced Security secrets/IaC/contextual analysis + Curation malicious-package blocking + JFrog ML MLOps from the Qwak acquisition + low security-penetration runway + SBOM/regulatory tailwinds + AI/ML supply-chain extension) + ~$0.4-0.6B+ net cash + the path to durable GAAP profitability + Shlomi Ben Haim platform + cloud + security execution.

Company Background

JFrog Ltd. (NASDAQ: FROG) is an Israel-founded, US-listed DevOps / software-supply-chain platform company, founded ~2008-2009 (selected primary post-founding by Shlomi Ben Haim + Yoav Landman + Fred Simon + selected various aggregate ~~built Artifactory — the universal binary repository — into the de-facto industry standard + selected post-2010s-2025 ~~platform expansion — Xray (security scanning) + Distribution + Pipelines + Advanced Security + Curation + selected various aggregate ~~the "liquid software" vision + selected post-2020 ~~NASDAQ IPO + selected post-2024 ~~the Qwak acquisition (MLOps → JFrog ML) + selected various aggregate ~~partnerships — AWS, Microsoft, GitHub, ServiceNow, NVIDIA, etc.). Selected post-2020 NASDAQ listing; selected post-founding-2025 Shlomi Ben Haim CEO era (co-founder-CEO; architect of the DevOps-platform strategy + cloud transition + security upsell + the Qwak acquisition); HQ Sunnyvale California + Netanya Israel (dual hub); ~~~1,500-1,800 employees.

FROG's business: a single subscription platform with two deployment models — self-managed (on-prem / private-cloud, ~the historical base) and JFrog Cloud (SaaS, ~the growth vector, cloud mix rising) — and a tiered product set: Artifactory (the core binary repository) + Xray (software composition analysis / vulnerability + license scanning) + Advanced Security (secrets, IaC, contextual analysis, malicious-package detection) + Curation (proactive malicious-open-source-package blocking) + Distribution / Pipelines / CI-CD adjacencies + JFrog ML (MLOps / model management — from the Qwak acquisition) + JFrog Connect (multi-cloud control plane). Revenue is ~all subscription; net revenue retention ~115-120%+; cloud growing faster than self-managed. End-markets: enterprise software/DevOps teams across all verticals (tech, financials, healthcare, retail, government, etc.). Geographic mix: Americas ~60-65% + EMEA ~25-30% + APAC ~8-12%.

Capital position: ~$0.00 aggregate annual dividend (no dividend) + $0+ aggregate buybacks (none/minimal) + aggregate net cash position ($0.4-0.6B+ cash + investments; no/minimal debt) + ~$0+ aggregate net leverage + non-rated credit profile + ~115-125M aggregate diluted shares.

Artifactory + JFrog Cloud Platform Pipeline (~$0.36-0.45B Revenue)

The Artifactory + JFrog Cloud Platform pipeline is FROG's foundation thesis: ~$0.36-0.45B aggregate platform subscription revenue (aggregate ~80-88% revenue mix); selected primary Artifactory (selected primary ~~the universal binary/artifact repository — the "system of record" for software packages, container images, Helm charts, ML models across ~all package types (Maven, npm, PyPI, Docker, NuGet, Go, Conda, Cargo, Hugging Face models, etc.) + selected various aggregate ~~the central node in the software supply chain — every build pulls dependencies from + pushes artifacts to Artifactory + selected various aggregate ~~hybrid/multi-cloud deployment (self-managed on-prem/private cloud OR JFrog Cloud SaaS) + selected various aggregate ~~~enterprise-grade — HA, replication, access control, the single source of truth for binaries) + selected various aggregate JFrog Cloud (selected primary ~~the SaaS deployment of the platform — the growth vector (cloud revenue growing faster than self-managed; cloud mix rising toward ~40%+ of revenue + selected various aggregate ~~consumption + subscription hybrid pricing + selected various aggregate ~~lower friction to adopt + expand) + selected various aggregate ~~Distribution + Pipelines + CI/CD adjacencies + Connect (multi-cloud control plane) + selected various aggregate ~~the JFrog Platform — DevOps + DevSecOps + MLOps in one) + selected various aggregate post-2024-2025 ~platform growth + cloud mix shift + selected various aggregate ~~~net revenue retention ~~~115-120%+ (the expansion engine) + selected various aggregate ~~~~~~$1M+ ARR customers growing faster + selected various aggregate ~~~75-80%+ aggregate non-GAAP gross margin.

FY2025 Artifactory + JFrog Cloud Platform dynamics ($0.36-0.45B aggregate revenue): selected continued post-2024 ~~+18-28% aggregate platform subscription revenue growth (selected primary ~~JFrog Cloud growing faster than self-managed + selected various aggregate ~~net revenue retention ~115-120%+ (seats + package types + cloud + security modules) + selected various aggregate ~~~$100K+ and $1M+ ARR customer-cohort growth + selected various aggregate ~~enterprise standardization on Artifactory) + ~$0.36-0.45B aggregate platform subscription revenue + selected various aggregate ~~~75-80%+ aggregate non-GAAP gross margin (selected various aggregate ~~cloud has a slightly lower gross margin than self-managed — a mix headwind as cloud grows, partly offset by scale). Selected post-2024 ~$0.40-0.65 aggregate annual non-GAAP EPS contribution as Artifactory + JFrog Cloud Platform pipeline drives the dominant recurring-revenue base.

FY2026 catalyst: continued Artifactory + JFrog Cloud Platform pipeline + ~$0.40-0.65 aggregate non-GAAP EPS contribution under continued Shlomi Ben Haim leadership (~14-16 year tenure). Selected aggregate ~$0.43-0.55B aggregate FY2026 platform subscription revenue + selected various ~~+18-26% aggregate growth + selected various aggregate ~~JFrog Cloud mix rising toward ~~40-45%+ of revenue + selected various aggregate ~~net revenue retention ~115-120%+ + selected various aggregate ~~$1M+ ARR customer growth + selected various aggregate ~~package-type expansion (AI/ML models — Hugging Face integration — as a new artifact class) + selected various aggregate ~~~75-80% aggregate non-GAAP gross margin. Risks: GitHub / Microsoft (MSFT, ~$3-4T Mcap; GitHub Packages + GitHub Advanced Security + Copilot — the dominant developer platform, increasingly bundling artifact/package + security capabilities) + GitLab (GTLB, ~$5-10B; the integrated DevSecOps platform — package registry + security) + Sonatype (private; Nexus Repository — the direct artifact-repository competitor + Nexus Lifecycle SCA) + cloud-provider native registries (AWS CodeArtifact + ECR, Azure Artifacts + ACR, Google Artifact Registry — "good enough" free/cheap alternatives bundled with the cloud) + Cloudsmith (private; cloud artifact management) + Harness / CloudBees (CI/CD platforms with artifact features) + Docker Inc. (Docker Hub) + selected various aggregate artifact-repository + DevOps-platform competitive considerations + cloud-provider-bundling considerations (the key risk — AWS/Azure/GCP giving away "good enough" artifact registries pressures the standalone value prop, especially in cloud-native shops) + GitHub/GitLab platform-consolidation considerations (developers wanting one platform — could marginalize a best-of-breed repository) + cloud-mix-margin-headwind considerations + net-revenue-retention-deceleration considerations (NRR is the bull-case linchpin; macro/IT-budget pressure could compress it) + competition from Sonatype on both repository AND security + new-developer-workflow-disruption (AI coding agents) considerations + go-to-market / enterprise-sales-execution considerations.

Security (Xray + Advanced Security + Curation) + JFrog ML Pipeline (~$0.06-0.10B+ Revenue + Margin/Growth Catalyst)

The Security (Xray + Advanced Security + Curation) + JFrog ML pipeline is FROG's primary growth-accelerant thesis: selected primary Xray + Advanced Security + Curation + JFrog ML (within the platform; ~~~the high-growth, high-value upsell layer); selected primary Xray (selected primary ~~software composition analysis — scans every artifact for known vulnerabilities (CVEs) + license-compliance issues + selected various aggregate ~~deep recursive scanning of all dependencies + selected various aggregate ~~the "shift-left" security on the binaries Artifactory already holds — a natural attach) + selected various aggregate Advanced Security (selected primary ~~secrets detection + Infrastructure-as-Code (IaC) security + container/contextual analysis (which CVEs are actually exploitable in your context — noise reduction) + malicious-package detection + selected various aggregate ~~~the premium DevSecOps tier) + selected various aggregate Curation (selected primary ~~proactively block known-malicious open-source packages from ever entering the organization — at the proxy/download layer + selected various aggregate ~~~addresses the open-source-supply-chain-attack threat (typosquatting, dependency confusion, malicious updates — a fast-growing attack vector)) + selected various aggregate JFrog ML (selected primary ~~the Qwak acquisition (~~2024) — MLOps / model management — store, version, serve, monitor ML models alongside software artifacts in the same platform + selected various aggregate ~~the "AI/ML supply chain" extension — as enterprises ship more ML models, they need the same governance/security/provenance + selected various aggregate ~~AI-model curation/security) + selected various aggregate post-2024-2025 ~security + JFrog ML attach growth.

FY2025 Security + JFrog ML dynamics: selected primary ~~Xray + Advanced Security + Curation attach growing faster than the platform overall (selected various aggregate ~~security-module penetration of the Artifactory base is still low — a large runway + selected various aggregate ~~regulatory tailwinds — SBOM (software bill of materials) mandates, US executive orders on software supply chain, the EU Cyber Resilience Act — driving security-tooling demand + selected various aggregate ~~Curation as the newer high-growth product) + selected various aggregate ~~JFrog ML (Qwak) integration + early MLOps cross-sell + selected various aggregate ~~security/ML as a margin-and-growth accelerant (these modules expand ARR per customer + lift NRR). Selected post-2024 ~$0.10-0.20 aggregate annual non-GAAP EPS contribution (selected various aggregate ~~growing as security/ML attach scales) as Security + JFrog ML pipeline drives the upsell + AI-extension lever.

FY2026 catalyst: continued Security + JFrog ML pipeline + ~$0.10-0.20 aggregate non-GAAP EPS contribution + selected various aggregate ~~~~security ARR growth (Xray + Advanced Security + Curation) outpacing the platform + selected various aggregate ~~security-module penetration rising (from low base) + selected various aggregate ~~SBOM/regulatory tailwinds (CRA, executive orders, FedRAMP) + selected various aggregate ~~JFrog ML cross-sell into the enterprise AI buildout (model registry + governance + security for ML models — riding the AI wave) + selected various aggregate ~~AI-model curation (blocking malicious/poisoned models — a nascent but growing concern) + selected various aggregate ~~~security/ML lifting NRR + ARR-per-customer. Risks: Snyk (private; the developer-security leader — SCA, SAST, container, IaC — a strong DevSecOps competitor) + GitHub Advanced Security (MSFT — bundled secrets/SCA/code scanning) + GitLab (GTLB — bundled security) + Checkmarx (private; AppSec) + Mend.io (formerly WhiteSource; SCA) + Sonatype (Nexus Lifecycle — direct SCA competitor) + Aqua Security / Wiz / Palo Alto Prisma Cloud (PANW) (cloud/container security — adjacent) + on MLOps: Databricks (private; MLflow + Unity Catalog), Weights & Biases (private), Hugging Face (private), AWS SageMaker, Azure ML, Google Vertex AI + selected various aggregate DevSecOps + SCA + MLOps competitive considerations + the "security-as-a-feature-vs-platform" risk (GitHub/GitLab bundling security could commoditize Xray) + Snyk's developer-mindshare considerations + MLOps-market-fragmentation considerations (a crowded, fast-moving space — JFrog ML must win on the "ML artifacts belong in the same platform as software artifacts" thesis) + Qwak-integration-execution considerations + security-attach-rate considerations (the bull case needs security penetration to keep rising) + AI-supply-chain-standard-emergence considerations (whoever sets the AI-model-provenance standard wins — JFrog is positioning, but it's early).

Capital Position + Balance Sheet

Capital position + balance sheet: ~$0.00 aggregate annual dividend (no dividend; selected primary ~~growth-reinvestment + capital efficiency) + selected various aggregate ~$0+ aggregate buybacks (selected primary ~~none/minimal — early-stage; a small buyback to offset SBC dilution is possible as cash flow matures) + aggregate net cash position (~~~$0.4-0.6B+ aggregate cash + investments; no/minimal debt — IPO proceeds + cash generation) + ~$0+ aggregate net leverage (net cash) + non-rated credit profile (selected primary ~~self-funded; no debt) + ~~~115-125M aggregate diluted shares (selected various aggregate ~~~SBC-driven dilution + the Qwak acquisition equity — share count creep is a watch item) + selected various aggregate ~~positive free cash flow (selected various aggregate ~~~JFrog generates FCF; the question is the GAAP-profitability inflection — SBC is the gap between non-GAAP and GAAP).

FY2026 catalyst: continued no dividend + selected continued ~$0+ aggregate buybacks (selected primary ~~potential small buyback to offset SBC dilution) + selected various aggregate ~~~$0.5-0.7B+ aggregate cash + investments (selected primary ~~free-cash-flow generation + selected various aggregate ~~net cash maintained / growing) + selected various aggregate ~~SBC-as-%-of-revenue declining (selected primary ~~the path to durable GAAP profitability — operating leverage + SBC discipline) + selected various aggregate ~~~modest/selective tuck-in M&A optionality (security + AI/ML adjacencies, like the Qwak deal) + selected continued non-rated/self-funded credit profile. Selected no dividend + selected net cash + selected ~positive FCF + selected ~the GAAP-profitability inflection support continued platform + cloud + security + ML investment + the path from "high-growth, near-breakeven" to "high-growth, durably profitable."

Key Core Metrics

  • FY2025 revenue ~$0.42-0.52B (+18-28% YoY) vs ~$0.43B FY2024; adj. EPS ~$0.55-0.85 (non-GAAP; approaching/at GAAP profitability)
  • Platform subscription revenue ~$0.36-0.45B (~80-88% revenue mix); security (Xray + Advanced Security + Curation) + JFrog ML upsell layer within/around it
  • Deployment models: self-managed (on-prem/private-cloud, the historical base) + JFrog Cloud (SaaS, the growth vector; cloud mix rising toward ~40%+ of revenue)
  • Net revenue retention: ~115-120%+ (the expansion engine — seats + package types + cloud + security modules)
  • $100K+ ARR customers + $1M+ ARR customers growing (the latter faster)
  • Products: Artifactory (universal binary repository — all package types: Maven, npm, PyPI, Docker, Go, NuGet, Cargo, Hugging Face models, etc.) + Xray (SCA — vulnerability + license scanning) + Advanced Security (secrets, IaC, contextual analysis, malicious-package detection) + Curation (proactive malicious-OSS-package blocking) + Distribution/Pipelines/CI-CD + JFrog ML (MLOps — from the Qwak acquisition) + JFrog Connect
  • Non-GAAP gross margin: ~75-80%+ aggregate (cloud is a slight mix headwind)
  • Security-module penetration of the Artifactory base: still low (large runway); SBOM/regulatory tailwinds (US executive orders, EU CRA, FedRAMP)
  • JFrog ML: the Qwak acquisition (~2024) — model registry/governance/security alongside software artifacts; the AI/ML supply-chain extension
  • Aggregate non-GAAP operating margin: ~12-20% (improving on operating leverage)
  • Aggregate net cash position: ~$0.4-0.6B+ cash + investments; no/minimal debt; ~$0+ aggregate net leverage; positive free cash flow
  • Non-rated credit profile (self-funded; no debt)
  • ~115-125M aggregate diluted shares (SBC-driven dilution + Qwak equity — a watch item); ~$0 total capital return FY2025
  • No dividend; no buyback (growth-reinvestment + capital efficiency)
  • Geographic mix: Americas ~60-65% + EMEA ~25-30% + APAC ~8-12%
  • Partnerships: AWS, Microsoft/Azure, GCP, GitHub, ServiceNow, NVIDIA, etc.
  • ~1,500-1,800 employees
  • Shlomi Ben Haim co-founder-CEO since ~founding (~14-16 year tenure; co-founded with Yoav Landman + Fred Simon)
  • HQ Sunnyvale California + Netanya Israel (dual hub); founded ~2008-2009; NASDAQ IPO 2020

Market Evaluation

FROG FY2026 market evaluation: at ~$25-50 share price + ~115-125M aggregate diluted shares = $3-6B equity market cap; net cash ($0.4-0.6B+) → ~$2.5-5.5B aggregate enterprise value; no dividend. Selected primary FROG peers: GitLab (GTLB, ~$5-10B Mcap; integrated DevSecOps platform) + Atlassian (TEAM, ~$40-60B; developer/dev-tools — adjacent) + Datadog (DDOG, ~$40-60B; observability — adjacent infra-tools) + HashiCorp (within IBM; infrastructure automation — adjacent) + Confluent (CFLT, ~$8-12B; data streaming — comparable SaaS-infra growth profile) + Sonatype (private; the direct Nexus Repository + Nexus Lifecycle competitor) + Snyk (private; developer security) + GitHub (within MSFT) + cloud-provider native registries (AWS/Azure/GCP) + selected various aggregate developer-tools + DevSecOps + infrastructure-software companies. Selected FROG ~6-12x EV/Sales (DevOps/software-supply-chain platform with Artifactory as the binary system of record + all package types + hybrid/multi-cloud + JFrog Cloud SaaS growth vector + Xray/Advanced Security/Curation security upsell + JFrog ML MLOps + ~115-120%+ NRR + ~75-80%+ non-GAAP gross margin + a net-cash balance sheet + a path to durable GAAP profitability) + selected ~~30-60x non-GAAP P/E (early profitability) + selected ~~~20-40x EV/FCF + no dividend + selected aggregate ~$0.50-0.62B aggregate FY2026 revenue + selected aggregate ~$0.55-0.85 aggregate FY2026 non-GAAP EPS + selected aggregate Artifactory + JFrog Cloud Platform + Security + JFrog ML pipeline. FY2026 base case: ~$0.50-0.62B aggregate revenue (+18-26%) + ~$0.55-0.85 non-GAAP EPS + ~115-120%+ NRR + cloud mix toward ~40-45% + positive FCF + the GAAP-profitability inflection. Bull case: Artifactory + JFrog Cloud Platform pipeline acceleration (cloud growing faster + NRR holding ~118-122% + $1M+ ARR cohort expansion + Artifactory standardization + AI/ML model artifacts as a new package class) + Security + JFrog ML pipeline acceleration (security penetration of the base rising sharply + SBOM/regulatory tailwinds + Curation high growth + JFrog ML riding the enterprise AI buildout + security/ML lifting ARR-per-customer and NRR) + operating leverage + durable GAAP profitability drives ~$0.55-0.70B aggregate revenue + a multiple re-rating toward a "system-of-record-for-the-software-supply-chain" valuation. Bear case: GitHub/GitLab platform-consolidation + cloud-provider native-registry bundling (AWS/Azure/GCP "good enough" free registries) commoditizing the standalone repository value prop + Sonatype/Snyk competition on both repository AND security + NRR deceleration on IT-budget pressure (the bull-case linchpin compressing toward ~108-112%) + cloud-mix gross-margin headwind + Qwak/MLOps execution misses in a crowded space + AI-coding-agent workflow disruption + SBC-driven share-count creep + slowing $1M+ ARR cohort growth drives ~$0.48-0.55B revenue + ~$0.40-0.60 non-GAAP EPS + de-rating. The thesis depends on the Artifactory + JFrog Cloud Platform pipeline + the Security (Xray + Advanced Security + Curation) + JFrog ML pipeline + Artifactory as the software-supply-chain system of record + all package types + the JFrog Cloud SaaS growth vector + ~115-120%+ NRR + the security/ML upsell + SBOM/regulatory tailwinds + the AI/ML supply-chain extension + the net-cash balance sheet + the path to durable GAAP profitability + Shlomi Ben Haim platform + cloud + security execution.

Related:FROG

Want deeper analysis?

Ask drillr anything about FROG — powered by SEC filings, earnings calls, and real-time data.

Try drillr.ai for free

Related Research

FROGGTLB
Enterprise Software Licensing Folds AI Agent Usage Into Seat ContractsSep 2