JFrog (FROG) Q2 2026: Cloud Revenue Jumps 53% as Security Drives Multi-Year Commitments
JFrog’s Q2 2026 results highlight a decisive shift toward cloud and security-led platform adoption, with enterprise customers prioritizing trusted software supply chains in the AI era. Management’s focus on security integration, governance, and rapid remediation is resonating amid escalating software supply chain threats. With raised guidance and accelerating multi-year deals, JFrog is positioning itself as the control plane for AI-driven software delivery.
Summary
- Security Attach Rate Surges: Enterprise customers are increasingly bundling security with platform deals.
- Cloud Consumption Momentum: AI-driven workloads and binary growth are fueling rapid cloud adoption.
- Governance Emerges as Next Frontier: DevGovOps and compliance are becoming core customer priorities.
Business Overview
JFrog provides an integrated platform for managing, securing, and distributing software artifacts—compiled software components known as binaries—across the software supply chain. The company generates revenue through subscription-based offerings, split between cloud (SaaS, pay-as-you-go or committed) and self-managed (on-premises) deployments. Major segments include Artifactory (artifact repository), security solutions (curation, XRay, Advanced Security), and governance tools, all increasingly bundled as Enterprise Plus subscriptions for large organizations.
Performance Analysis
JFrog delivered a quarter of accelerating top-line growth, driven by cloud revenue up 53% year-over-year, now comprising 53% of total revenue. This rapid shift reflects AI’s impact on software development, with organizations generating and distributing more binaries at unprecedented scale. Self-managed (on-premises) revenues grew modestly, underscoring the ongoing migration to cloud and hybrid models. Enterprise Plus subscriptions, which bundle advanced features, expanded to 59% of total revenue, growing 39% year-over-year and signaling deeper customer adoption of the full platform.
Security remains a standout driver. Over 80% of new $1M+ customers attached security solutions, and 40% of new logos landed with security from the outset. Gross margin held steady at over 83%, while disciplined operating expense management supported a material increase in operating and free cash flow margins. Deferred revenue and remaining performance obligations (RPO) both saw record gains, reflecting multi-year, high-value commitments, particularly from customers seeking integrated security and governance.
- Cloud Mix Shift: Cloud now represents the majority of revenue, reflecting customer preference for scalable, consumption-based models in volatile AI environments.
- Security Upsell Drives Larger Deals: Security integration is raising average deal size and duration, fueling record RPO growth and multi-year contracts.
- Operational Leverage: Operating margin and free cash flow margins expanded, supported by cloud cost optimization and higher-value deals.
JFrog’s ability to convert usage over commitments into longer-term contracts, while maintaining high net dollar retention, underpins durable growth and validates the strategic pivot toward cloud and AI-aligned security.
Executive Commentary
"As AI accelerates software creation, engineering velocity, and code quality, the challenge is no longer generating source code but managing the tsunami of binaries compiled. It is now about establishing trust in these software artifacts, models, agents, and packages that AI and humans increasingly produce without sacrificing speed."
Shlomi Ben Haim, CEO and Co-Founder
"Cloud revenues in the second quarter accelerated to $87.5 million, up 53% year-over-year, now representing 53% of total revenues versus 45% in the prior year. Our outperformance in the cloud was driven by robust usage across our customer portfolio, which continues to exceed contractual minimum commitments and increased adoption of our security core products."
Ed Grabscheid, Chief Financial Officer
Strategic Positioning
1. Security as a Platform Differentiator
JFrog’s integrated security offerings are now mission-critical for customers. The company’s approach—embedding security directly into Artifactory, the central artifact repository—positions it as the single source of truth for software supply chains. Recognition as a leader in Gartner’s Magic Quadrant for software supply chain security further validates this strategy, and the high attach rate for security in major deals demonstrates customer trust.
2. Cloud-First Adoption Accelerates
Cloud is now the dominant revenue stream, driven by AI-fueled binary growth and the need for scalable, flexible consumption models. JFrog’s go-to-market teams are converting usage overages into higher annual commitments, while maintaining flexibility for customers amid uncertain AI-driven demand. The company’s cloud-native architecture and hybrid deployment options (e.g., “mothership” cloud with on-prem distribution) are winning over AI-native enterprises that require scale and reliability.
3. Governance and DevGovOps as Emerging Growth Levers
Governance is rapidly rising to board-level priority. JFrog is investing in DevGovOps—embedding governance, compliance, and auditability directly into software delivery pipelines. This is critical as AI adoption scales and regulations tighten. Recent seven-figure wins for governance solutions, especially among highly regulated or AI-intensive enterprises, underscore the growing demand for integrated compliance and policy enforcement.
4. AI Partnerships and Ecosystem Expansion
Strategic integrations with leading AI players—such as Anthropic and Cursor—extend JFrog’s reach into the AI developer ecosystem. These partnerships embed JFrog’s security and governance directly into popular AI coding agents, reinforcing its relevance as AI-generated software becomes the norm.
Key Considerations
JFrog’s Q2 performance reflects a business at the intersection of AI transformation and software supply chain security. The company’s platform-centric approach is resonating with large enterprises, but several strategic considerations will shape its trajectory:
Key Considerations:
- Security-Led Expansion: Security is not only driving upsell and larger contracts but also accelerating platform consolidation among large customers.
- Cloud Usage Predictability: Management’s guidance philosophy excludes usage above commitments, maintaining conservatism but potentially understating upside if overages persist.
- Hybrid and Multi-Cloud Demand: Major AI-native wins increasingly require hybrid deployments, highlighting the importance of flexibility and scale in JFrog’s architecture.
- Governance as a Growth Vector: DevGovOps is emerging as a must-have, especially as AI and regulatory complexity grow—JFrog’s early traction here could be a durable differentiator.
Risks
Escalating software supply chain attacks and rapid AI adoption heighten both opportunity and risk. JFrog’s credibility hinges on its ability to remediate vulnerabilities quickly and transparently, as seen in the recent OpenAI incident. However, a substantial portion of revenue remains self-hosted, where patching is customer-dependent. Competitive pressure, regulatory changes, and the pace of cloud migration could introduce volatility or slowdowns if not managed proactively.
Forward Outlook
For Q3 2026, JFrog guided to:
- Revenue between $164 million and $166 million
- Non-GAAP operating profit of $27 million to $29 million
For full-year 2026, management raised guidance:
- Revenue of $648 million to $652 million (22% YoY growth at midpoint)
- Non-GAAP operating income of $116 million to $120 million
- Baseline cloud growth of 41% to 43%
- Net dollar retention floor raised to 120%
Management emphasized growing security contribution, increasing cloud commitments, and robust pipeline strength as key drivers for the remainder of the year.
- Security-led deals expected to sustain momentum
- Cloud migration and hybrid deployments remain strategic focus
Takeaways
JFrog’s execution in Q2 2026 demonstrates its emergence as a critical enabler of trusted, AI-era software supply chains.
- Security Attach Drives Multi-Year Commitments: Security is now a core pillar, with high attach rates fueling larger, longer-term deals and platform consolidation.
- Cloud and Governance Catalyze Next Growth Phase: Cloud adoption is accelerating, and governance is emerging as the next must-have, especially for AI-intensive and regulated customers.
- Investors Should Watch: The pace of cloud migration, security adoption, and DevGovOps traction as leading indicators of JFrog’s ability to sustain durable, high-margin growth in the evolving AI landscape.
Conclusion
JFrog’s Q2 2026 results underscore its strategic evolution from DevOps tooling to a trusted platform for secure, governed software delivery in the AI era. With security and cloud at the forefront, and governance rising in importance, JFrog is well-positioned to capture long-term enterprise demand—provided it maintains execution discipline and adapts to the rapidly changing threat landscape.
Industry Read-Through
JFrog’s results and narrative signal accelerating enterprise demand for integrated software supply chain security and governance as AI transforms development practices. The surge in cloud and security attach rates reflects a broader industry pivot toward platform consolidation and risk mitigation. Vendors across DevOps, security, and cloud infrastructure should expect heightened customer scrutiny on integrated, scalable, and compliant solutions. As AI-native workloads proliferate, the ability to deliver trust, rapid remediation, and compliance at scale will become a defining competitive advantage across the software infrastructure sector.