Business Software for JFrog - Page 2
View:
-
1
Swift
Apple
Writing Swift code is interactive and fun, the syntax is concise yet expressive, and Swift includes modern features developers love. Swift code is safe by design and produces software that runs lightning-fast. Swift is the result of the latest research on programming languages, combined with decades of experience building Apple platforms. Named parameters are expressed in a clean syntax that makes APIs in Swift even easier to read and maintain. Even better, you don’t even need to type semi-colons. Inferred types make code cleaner and less prone to mistakes, while modules eliminate headers and provide namespaces. To best support international languages and emoji, Strings are Unicode-correct and use a UTF-8 based encoding to optimize performance for a wide-variety of use cases. You can even write concurrent code with simple, built-in keywords that define asynchronous behavior, making your code more readable and less error-prone.Starting Price: Free -
2
Ruby
Ruby Language
Wondering why Ruby is so popular? Its fans call it a beautiful, artful language. And yet, they say it’s handy and practical. Since its public release in 1995, Ruby has drawn devoted coders worldwide. In 2006, Ruby achieved mass acceptance. With active user groups formed in the world’s major cities and Ruby-related conferences filled to capacity. Ruby-Talk, the primary mailing list for discussion of the Ruby language, climbed to an average of 200 messages per day in 2006. It has dropped in recent years as the size of the community pushed discussion from one central list into many smaller groups. Ruby is ranked among the top 10 on most of the indices that measure the growth and popularity of programming languages worldwide (such as the TIOBE index). Much of the growth is attributed to the popularity of software written in Ruby, particularly the Ruby on Rails web framework.Starting Price: Free -
3
Rust
Rust
Rust is blazingly fast and memory-efficient: with no runtime or garbage collector, it can power performance-critical services, run on embedded devices, and easily integrate with other languages. Rust’s rich type system and ownership model guarantee memory-safety and thread-safety — enabling you to eliminate many classes of bugs at compile-time. Rust has great documentation, a friendly compiler with useful error messages, and top-notch tooling — an integrated package manager and build tool, smart multi-editor support with auto-completion and type inspections, an auto-formatter, and more. Whip up a CLI tool quickly with Rust’s robust ecosystem. Rust helps you maintain your app with confidence and distribute it with ease. Use Rust to supercharge your JavaScript, one module at a time. Publish to npm, bundle with webpack, and you’re off to the races.Starting Price: Free -
4
Go
Golang
With a strong ecosystem of tools and APIs on major cloud providers, it is easier than ever to build services with Go. With popular open source packages and a robust standard library, use Go to create fast and elegant CLIs. With enhanced memory performance and support for several IDEs, Go powers fast and scalable web applications. With fast build times, lean syntax, an automatic formatter and doc generator, Go is built to support both DevOps and SRE. Everything there is to know about Go. Get started on a new project or brush up for your existing Go code. An interactive introduction to Go in three sections. Each section concludes with a few exercises so you can practice what you've learned. The Playground allows anyone with a web browser to write Go code that we immediately compile, link, and run on our servers.Starting Price: Free -
5
Apache Ivy
Apache Software Foundation
Apache Ivy™ is a popular dependency manager focusing on flexibility and simplicity. Find out more about its unique enterprise features, what people say about it, and how it can improve your build system! Ivy is a tool for managing (recording, tracking, resolving, and reporting) project dependencies. Ivy is essentially process agnostic and is not tied to any methodology or structure. Instead, it provides the necessary flexibility and reconfigurability to be adapted to a broad range of dependency management and build processes. While available as a standalone tool, Ivy works particularly well with Apache Ant providing a number of powerful Ant tasks ranging from dependency resolution to dependency reporting and publication. Ivy has a lot of powerful features, the most popular and useful being its flexibility, integration with Ant, and strong transitive dependencies management engine. Ivy is open source and released under a very permissive Apache License.Starting Price: Free -
6
JFrog Distribution
JFrog
Enable fast, trusted software releases across the globe — ensuring security and overcoming limited bandwidth and network lag. JFrog Distribution enables you to speed up deployments and concurrent downloads at scale throughout your SDLC: from CI, to CD, through device management – spanning remote sites, hybrid infrastructure, clouds, edges, embedded devices, and IoT fleets. Improve deployment speed, governance and network utilization when releasing updates across large-scale, hybrid infrastructure to any edge/device. Easily share base images, plugins and custom software with a broad ecosystem or with specific, authenticated users. Support high-concurrency downloads and verified consumption. Improve developer productivity and CI cycles, enabling 1,000s downloads/second, content HA and optimized network performance - even with inbound-only firewalls or limited connectivity.Starting Price: $45 per user per month -
7
TeamCity
JetBrains
Powerful Continuous Integration out of the box. Define up to 100 build configurations (jobs) and run unlimited builds. Run up to 3 builds concurrently. Add extra agents when necessary. Utilize the full potential of all the TeamCity features. This product includes features identical to those available to our largest customers. Receive peer support through the forum, alternatively file a bug or feature request, and vote for them in our public issue tracker. Unlimited users, unlimited build time. No strings attached. Build, check and run automated tests on the server even before committing your changes – keeping your code base clean at all times. Don’t wait for a build to finish to discover that something is wrong. Form your project tree to inherit parent settings and permissions. Create templates with common settings and inherit any number of build configurations from them.Starting Price: $18/month -
8
CodeShip
CloudBees
Do you want everything set up for you instantly, or do you want to customize your environment and your workflow? CodeShip lets the developer pick the path that’s best for them, to maximize productivity and let teams evolve over time. From deployments to notifications to code coverage to security scanning and on-premise SCMs, CodeShip lets you integrate with any tool, service or cloud you need for your organization’s perfect workflow. Not only do we make CodeShip easy to use, we also provide fast and thorough developer support. When you need help or identify a problem, you want to talk to someone technical sooner rather than later, and that’s what you’ll get with CodeShip. You can get your builds and deployments working in less than 5 minutes with CodeShip’s turnkey environment and simple UI. From there, you can evolve into more sophisticated workflows and config-as-code as your projects grow.Starting Price: $49 per month -
9
Travis CI
Travis CI
The simplest way to test and deploy your projects in the cloud or on-prem. Easily sync your projects with Travis CI and you’ll be testing your code in minutes. Check out our features – now you can sign up for Travis CI using your Assembla, Bitbucket, GitHub or GitLab account to connect your repositories! Testing your open-source projects is always 100% free! Log in with your cloud repository, tell Travis CI to test a project, and then push. Could it be any simpler? Many databases and services are pre-installed and can be enabled in your build configuration. Make sure every Pull Request to your project is tested before it’s merged. Updating staging or production as soon as your tests pass has never been easier! Builds on Travis CI are configured mostly through the build configuration stored in the file .travis.yml in your repository. This allows your configuration to be version controlled and flexible.Starting Price: $63 per month -
10
Terraform
HashiCorp
Terraform is an open-source infrastructure as code software tool that provides a consistent CLI workflow to manage hundreds of cloud services. Terraform codifies cloud APIs into declarative configuration files. Write infrastructure as code using declarative configuration files. HashiCorp Configuration Language (HCL) allows for concise descriptions of resources using blocks, arguments, and expressions. Run terraform plan to check whether the execution plan for a configuration matches your expectations before provisioning or changing infrastructure. Apply changes to hundreds of cloud providers with terraform apply to reach the desired state of the configuration. Define infrastructure as code to manage the full lifecycle — create new resources, manage existing ones, and destroy those no longer needed. -
11
Gradle
Gradle
Gradle Inc. is the company behind the leading software solution for improving developer productivity and happiness called Develocity (formerly Gradle Enterprise) and the popular open-source Gradle Build Tool, which is downloaded over 30 million times a month. Gradle is also pioneering the emerging practice of Developer Productivity Engineering (DPE). Elite development teams from companies like Airbnb, LinkedIn, Microsoft, Nasdaq, and Netflix, practice DPE to deliver quality software more rapidly at scale. They achieve this by leveraging Develocity’s innovative build and test performance acceleration technologies and analytics to proactively improve the reliability of the developer toolchain and make failure troubleshooting more efficient. -
12
Drone
Harness
Configuration as a code. Pipelines are configured with a simple, easy‑to‑read file that you commit to your git repository. Each pipeline step is executed inside an isolated Docker container that is automatically downloaded at runtime. Any source code manager. Drone integrates seamlessly with multiple source code management systems, including GitHub, GitHubEnterprise, Bitbucket, and GitLab. Any platform. Drone.io natively supports multiple operating systems and architectures, including Linux x64, ARM, ARM64 and Windows x64. Any language. Drone works with any language, database or service that runs inside a Docker container. Choose from thousands of public Docker images or provide your own. Create and share plugins. Drone uses containers to drop pre‑configured steps into your pipeline. Choose from hundreds of existing plugins, or create your own. Drone makes advanced customization easy. Implement custom access controls, approval workflows, secret management, yaml syntax extensions& more. -
13
JFrog Insight
JFrog
JFrog has acquired CloudMunch and we are focused on integrating our solutions to empower your experience with DevOps BI and analytics. We can’t do it without your feedback and welcome you to be among the first customers to try JFrog Insight. Managing and monitoring DevOps values will now be an easy task. JFrog Insight is enterprising DevOps with the first continuous intelligence and configuration solution. This universal tool will provide a complete picture of your DevOps ecosystem and process, collect key metrics, correlate them across the diverse systems, giving actionable insights to development managers, operations teams, and compliance officers. Our R&D team is currently working on a perfect merge of CloudMunch product into JFrog’s tools stack to give you JFrog Insight – the next gen DevOps bringing BI analytics to your organization. -
14
Vagrant
HashiCorp
Vagrant is a tool for building and managing virtual machine environments in a single workflow. With an easy-to-use workflow and focus on automation, Vagrant lowers development environment setup time, increases production parity, and makes the "works on my machine" excuse a relic of the past. Mirror production environments by providing the same operating system, packages, users, and configurations, all while giving users the flexibility to use their favorite editor, IDE, and browser. Declarative configuration file describes all the requirements and builds them through a consistent workflow. -
15
Amazon EKS
Amazon
Amazon Elastic Kubernetes Service (Amazon EKS) is a fully managed Kubernetes service. Customers such as Intel, Snap, Intuit, GoDaddy, and Autodesk trust EKS to run their most sensitive and mission-critical applications because of its security, reliability, and scalability. EKS is the best place to run Kubernetes for several reasons. First, you can choose to run your EKS clusters using AWS Fargate, which is serverless compute for containers. Fargate removes the need to provision and manage servers, lets you specify and pay for resources per application, and improves security through application isolation by design. Second, EKS is deeply integrated with services such as Amazon CloudWatch, Auto Scaling Groups, AWS Identity and Access Management (IAM), and Amazon Virtual Private Cloud (VPC), providing you a seamless experience to monitor, scale, and load-balance your applications. -
16
Apache Maven
The Apache Software Foundation
Apache Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information. If you think that Maven could help your project, you can find out more information in the "About Maven" section of the navigation. This includes an in-depth description of what Maven is and a list of some of its main features. If the problem has not been reported before, the recommended way to get help is to subscribe to the Maven Users Mailing list. Many other users and Maven developers will answer your questions there, and the answer will be archived for others in the future. -
17
ActiveState
ActiveState
ActiveState provides software development teams with the world's most comprehensive library of secure and trusted open source, over 79 million vetted components across all major language ecosystems (e.g., Java, Javascript, Python, R, Go, etc.), including transitive dependencies and OS-level libraries. By building everything from source, we ensure that every component is what it says it is, contains the fewest amount of vulnerabilities, and is continuously remediated. Companies can consume this open source where and when they need it - through their existing artifact repositories, as container images or managed distributions, or via IDPs. When teams transfer their open source responsibility to ActiveState, developers and security teams break free from the endless cycle of vulnerability management. Developers gain confidence knowing their code will make it to production faster and with less friction. Security gains assurance that policy and compliance standards are met by default. -
18
Alpine Linux
Alpine Linux
Alpine Linux is an independent, non-commercial, general purpose Linux distribution designed for power users who appreciate security, simplicity and resource efficiency. Alpine Linux is built around musl libc and busybox. This makes it smaller and more resource efficient than traditional GNU/Linux distributions. A container requires no more than 8 MB and a minimal installation to disk requires around 130 MB of storage. Not only do you get a fully-fledged Linux environment but a large selection of packages from the repository. Binary packages are thinned out and split, giving you even more control over what you install, which in turn keeps your environment as small and efficient as possible. Alpine Linux is a very simple distribution that will try to stay out of your way. It uses its own package manager called apk, the OpenRC init system, script driven set-ups and that’s it! This provides you with a simple, crystal-clear Linux environment without all the noise. -
19
Bionic
Bionic
Bionic uses an agentless approach to collect all of your application artifacts and provides a deeper level of application visibility that your CSPM tool cannot. Bionic continuously collects your application artifacts and creates an inventory of all of your applications, services, message brokers, and databases. Bionic integrates as a step in CI/CD pipelines and detects critical risks in the application layer and code, so teams can validate security posture in production. Bionic analyzes your code, performing checks for critical CVEs, and provides deeper insights into the blast radius of potential attacks surfaces. Bionic prioritizes code vulnerabilities based on the context of the overall application architecture. Create customized policies to prioritize architecture risk based on your company's security standards. -
20
Blink
Blink Ops
Blink is an ROI force multiplier for security teams and business leaders looking to quickly and easily secure a wide variety of use cases. Get full visibility and coverage of alerts across your organization and security stack. Utilize automated flows to reduce noise and false positives in alerts. Scan for attacks and proactively identify insider threats and vulnerabilities. Create automated workflows that add relevant context, streamline communications, and reduce MTTR. Take action on alerts and improve your cloud security posture with no-code automation and generative AI. Shift-left access requests, streamline approvals flows, and unblock developers while keeping your applications secure. Continuously monitor your application for SOC2, ISO, GDPR, or other compliance checks and enforce controls. -
21
depthfirst
depthfirst
depthfirst is an AI-native application security platform designed to help organizations detect, prioritize, and fix software vulnerabilities by deeply understanding their code, infrastructure, and business logic as a unified system. depthfirst, built around its core “General Security Intelligence,” analyzes entire repositories and environments to map how systems actually function, enabling it to uncover complex, real-world vulnerabilities that traditional scanners often miss. It evaluates full attack paths, permissions, and data flows to determine whether an issue is truly exploitable, significantly reducing false positives and allowing teams to focus only on meaningful risks. depthfirst operates across multiple layers of the stack, including source code, dependencies, secrets, containers, and running applications, providing continuous security coverage from development through production. -
22
CycloneDX
CycloneDX
OWASP CycloneDX is a lightweight Software Bill of Materials (SBOM) standard designed for use in application security contexts and supply chain component analysis. Strategic direction and maintenance of the specification is managed by the CycloneDX Core working group, with origins in the OWASP community. A complete and accurate inventory of all first-party and third-party components is essential for risk identification. BOMs should ideally contain all direct and transitive components and the dependency relationships between them. Adopting CycloneDX allows organizations to quickly meet these minimum requirements and mature into using more sophisticated use cases over time. CycloneDX is capable of achieving all SBOM requirements defined in the OWASP Software Component Verification Standard (SCVS).
