Protect Your SDLC From Risky And Malicious third party (from packages to models and more)
How’s this for a new year’s resolution: In 2026, you’ll stop software supply chain risks at the door, without slowing down development speed. Sounds imaginary? This webinar is for you. It is safe to assume that developers’ use of third-party packages, tools, and models will only increase this coming year, and for good reason – it drives massive productivity gains. That said, by now it is well known that third parties may also introduce significant security and compliance risk. The recent wave of popular npm package compromises is a good example, highlighting how vulnerable most software supply chains really are. So how can you better protect your SDLC while keeping your developers productive? In this informative webinar, you’ll hear from JFrog software supply chain security experts about how you can shift security ‘lefter’ than left, enabling you to de-risk your software supply chain from the start. You’ll come away with: A detailed understanding of the modern software supply chain risks that come with the unchecked use of third party packages, ML models and developer extensions An expert analysis of recent npm package compromises, and how to avoid those in the future A first-hand look at how JFrog Curation tracks risky and malicious third parties sanctioned by your organization and offers a policy-driven approach to ensure security that doesn’t slow down development.