JFrog names nine winners of software supply chain awards

JFrog has named nine companies as the first winners of its Software Supply Chain Excellence Awards, with recipients across the Americas, Europe and Asia-Pacific.

The awards are split into three categories: Unified Platform, Software Supply Chain Security and Trusted AI Adoption. The winners are Ford Motor Company, Rakuten Symphony, SCHOTTEL Industries, S&P Global, Iress, TSB Bank, NVIDIA, Singapore Airlines and Husqvarna Group.

The awards recognise customers that have changed how they manage software development, security and governance. A panel of industry leaders and experts judged entries on two measures: strength of vision and quality of metrics.

The Convergence Award covers organisations that moved from separate tools to a shared platform used by development and security teams. Its winners built a single workflow for building, securing and shipping software.

Ford Motor Company, Rakuten Symphony and SCHOTTEL Industries received the award. The category reflects a broader shift among large organisations seeking closer oversight of software artefacts as engineering teams manage a growing number of tools and automated processes.

Security focus

The Guardian Award centres on software supply chain security. S&P Global, Iress and TSB Bank were recognised for building systems designed to secure software artefacts end to end and stop threats earlier in the process.

JFrog linked the category to a rise in AI-related threats facing development teams. Over the past year, it identified more than 900 malicious AI agent skills carrying high-impact payloads, adding to pressure on companies to tighten checks on what enters their software environments.

That threat picture is also shaping how boards and regulators view software governance. As companies adopt AI tools in coding and deployment, the issue is no longer limited to open-source packages and traditional vulnerabilities. It now includes AI models, agent skills and other assets moving through development pipelines.

AI governance

The Trusted Intelligence Award recognises organisations that have extended software governance to AI-related assets. NVIDIA, Singapore Airlines and Husqvarna Group won that category.

The award is aimed at companies adopting AI without adding unmanaged risk. In practice, that means applying governance and security controls not only to code and binaries, but also to AI models, agent skills and MCP servers.

The emergence of the category underlines how software supply chain management is changing. For technology and non-technology groups alike, AI tools are becoming part of standard development operations, forcing security and compliance teams to adapt established controls to a wider set of digital assets.

Roie Shorer, Chief Growth Officer at JFrog, said pressure on organisations is increasing as automation expands and regulatory scrutiny grows.

"Agents now write, review and deploy code faster than ever, while malicious AI models, agent skills and extensions are turning up in the registries developers use daily. Increasing regulations require proof at every step - from code to runtime," said Roie Shorer, Chief Growth Officer at JFrog.

He said the companies that perform best in this environment are those that maintain visibility and control across development, security and compliance functions.

"The companies that pull ahead in the AI era will be those going beyond simply automating for speed and scale. The ones who can see exactly what's shipping and why will bring trust, control and adaptability. This year's winners didn't just add tools; they established a single source of truth where developers, security and compliance teams can operate using the same data and the same rules. We're very proud of all of them and thrilled to be part of their journey," Shorer said.

The recipient list shows that software supply chain oversight is now a concern across sectors including automotive, telecommunications, industrial manufacturing, finance, banking, aviation and semiconductors. It also suggests companies are treating governance of software and AI assets as an operational issue rather than a narrow security task.

JFrog is best known for tools used to manage software packages, binaries and release processes, and has increasingly positioned its platform as a single system of record for software assets. The award categories reflect that strategy, with a strong emphasis on consolidation, traceability and shared controls between engineering and security teams.

The nine winners were selected globally, making the awards an international marker of how major enterprises are organising software and AI oversight as development practices change.