JFrog lifts 2026 revenue view to $680M as AI code floods software supply chains

JFrog raised its 2026 revenue outlook to $680 million-$682 million after third-quarter revenue grew 31% to $179.2 million, according to its earnings release. Bloomberg reported that the company expects its fastest revenue growth in four years, as AI gives attackers more sophisticated ways to probe corporate defenses.

The numbers behind the raised outlook

JFrog, the software supply chain company based in Sunnyvale, California, published the results on November 5, 2026, for the quarter ended September 30. Cloud revenue rose 60% to $101.5 million, or 57% of the total. Non-GAAP operating income was $40.7 million, a 22.7% margin, and non-GAAP diluted earnings per share were $0.32. On a GAAP basis the company posted an operating loss of $1.8 million and diluted earnings of $0.05 per share.

For the full year, JFrog now guides to non-GAAP operating income of $142.5 million-$144.5 million and non-GAAP diluted EPS of $1.14-$1.16. For the fourth quarter it expects revenue of $183 million-$185 million and non-GAAP EPS of $0.28-$0.30.

Customer metrics improved as well. Net dollar retention over the trailing four quarters reached 124%, up from 118%. Customers with annual recurring revenue above $1 million numbered 112, up 58% year over year, and Enterprise+ subscriptions made up 61% of revenue, up from 56%. Operating cash flow was $69.3 million and free cash flow $66.5 million, with $880.9 million in cash and investments.

AI-written code is the sales pitch

CEO Shlomi Ben Haim framed the quarter around AI coding tools. “AI agents are writing code faster than any developer can review it,” he said in the release, adding that “speed without trust can’t scale.” The company’s argument is that machine-generated code and packages need to be scanned and controlled before they reach production.

JFrog described several products aimed at that gap: Zero-Touch Remediation, a Self-Healing Software Supply Chain Security Ecosystem with partners including Broadcom, Chainguard and IBM/Red Hat, AI Asset Scanning, Agent Guard, and support for Microsoft’s Agent Package Manager. It also announced a partnership with Wiz to connect code, cloud and runtime security. The release does not give separate revenue figures for these products, so their contribution to the raised outlook is not established.

A third step up in the outlook

The new range sits well above where JFrog stood a quarter ago. In August, according to a MarketBeat report on the second-quarter results, the company had lifted its 2026 revenue guidance to $648 million-$652 million from $628 million-$632 million, with adjusted EPS guidance of $0.96-$1.00. Compared with that August range, the revenue outlook is now about $30 million higher at both ends, and the EPS range has moved up by roughly $0.16-$0.18.

Remaining performance obligations, the contracted revenue not yet recognized, stood at $812.4 million, up 60%. That gives the company some visibility, though the release does not say how much will convert to revenue in 2026.

What the claim does and does not show

The link between AI-enabled hackers and JFrog’s growth comes from the company’s own framing and Bloomberg’s summary. The earnings release reports strong demand and new security products, but it does not quantify how much of the growth stems from attacks or from customers’ own use of AI coding agents. Readers who run software pipelines should treat the AI narrative as a vendor’s explanation rather than an independent finding.

Bloomberg published a similar story the same day about Cloudflare, which raised its annual profit view on AI network demand. Together the two reports suggest that infrastructure and security vendors are among the early commercial beneficiaries of AI adoption, though each company’s figures reflect its own business.

The figures above are from the company’s results announcement and have not been independently audited here. JFrog held its earnings call on November 5 at 2:00 p.m. PT.