JFrog extends AI security capabilities to detect Shadow AI on developer workstations
JFrog has expanded its AI Security capabilities with local Shadow AI detection and AI asset scanning using a Bring Your Own LLM Key (BYOK) model. Announced at its swampUP Europe 2026 event on November 3, the new capabilities are designed to help enterprises identify, assess and govern AI assets used across developer environments and software supply chains.
The local Shadow AI detection capability extends monitoring to individual developer workstations. According to JFrog, developers often download and install AI skills, plugins, MCP servers and other agent-related components through repositories, collaboration platforms and third-party marketplaces without undergoing centralised security reviews.
Such assets may operate with the permissions and credentials available to the developer, potentially exposing enterprise systems and sensitive information to security risks. JFrog’s new capability identifies these assets on developer machines and assesses their associated risks.
The company said the detection mechanism operates through its JFrog Agent Plugin, which can be...
Copyright of this story solely belongs to www.expresscomputer.in. To see the full text click HERE
