JFrog Unveils DevSecOps for IoT

JFrog Connect Enables Development-to-Device, Secure Workflows with Vulnerability & Compliance Analysis for IoT and Linux Edge Devices.

JFrog, the Liquid Software company and creators of the JFrog DevOps Platform, today introduced JFrog Connect, a new solution designed to help developers update, manage, monitor, and secure remote Linux & IoT devices at scale.  Available immediately, JFrog Connect ushers in a new era of software automation, traceability, and security to the world of connected devices via a modern DevOps platform.  A fully integrated part of the JFrog Platform, JFrog Connect empowers companies to manage one to hundreds of thousands of devices using a consistent operational model and intuitive user interface across cloud, on-premises, and multi-cloud deployments.

“The massively distributed nature of edge/IoT expands the enterprise attack surface, and also exacerbates operational, cross-functional software update workflow challenges,” said Yoav Landman, Co-founder and CTO, JFrog. “One of the main reasons for that, is that updating edge devices is often siloed from a modern software supply chain. JFrog Connect, integrated with the JFrog Platform, effectively helps companies manage automatic, continuous delivery of secure software updates from developers’ keystrokes to any distributed edge or fleet of connected things, while fortifying their software supply chain against emerging attack vectors.”

As increasing numbers of enterprises deploy IoT-based solutions, we believe it’s important to understand that doing so also introduces new entry points for malicious packages and cybersecurity attacks – particularly since IoT devices often run on unreliable and vulnerable networks that can’t be trusted.  A recent analyst survey found developers rank security 46% (39% in 2020) and deployment 31% (23% in 2020) among their top three concerns, along with the need for additional integrations with complementary technologies and systems.¹ Additionally, a lack of reliable, secure, IoT management solutions can result in expensive product recalls, service outages, unnecessary site visits, and more.

Fully integrated with the JFrog Platform, JFrog Connect, enables developers to automate DevSecOps activities with deeply integrated best practices and continuous governance across the entire software development lifecycle using a unified solution – across cloud, on-premises, or hybrid instances – which reduces deployment time and operational pain.

Key features of JFrog Connect include:

• Secure, over-the-air (OTA) updates in seconds: Low-code, drag-and-drop interface that enables developers to build their own update flow logic, including artifacts, containers, running scripts, commands, release bundles, pulling from Git repositories, and more.
• Automatic rollback: In the event an update process fails, JFrog Connect will instantly trigger rollback to ensure the device returns to the previous known software state.
• Robust container support: Confidently and securely update and manage a single Docker container, or Docker Compose microservices to manipulate complex applications in edge and IoT devices.
• Artifact security & distribution: Gain peace of mind with atomic distribution and signed releases of continuous, secure software updates from JFrog Artifactory.
• Real-time monitoring: Complete visibility of an IoT devices’ current state, resources, data and applications keeps devices secure and stable.
• Seamless edge device integration with unparalleled control. A suite of access tools empowers developers to connect, gain instant insight, and manage a wide-range of Linux-based IoT devices from anywhere in the world.
• Comprehensive management. Full end-to-end management of connected devices that can be grouped by name, description, or tags, for managing complex deployments. topologies of edge and IoT devices.

As part of the JFrog Platform, JFrog Connect enables developers to automate DevSecOps activities with deeply integrated best practices and continuous governance across the entire software development lifecycle, all the way to the edge – regardless of industry.

Select vertical customer use cases relying on JFrog Connect:

• Retail & Hospitality: JFrog Connect enables the secure use of drones and/or robots for last-mile delivery services in rural areas, devices in restaurants and hotels for food ordering or guest services, self-service kiosks, self-checkout systems, and more. All these connected devices require constant monitoring and updating to ensure effective operation, proper utilization, security, and compliance.
• Energy & Utilities: JFrog Connect enables oil and gas workers to monitor remote wellheads for an entire field from a central location and enable better field communication, while reducing maintenance costs and power consumption.
• Manufacturing: Modern manufacturing floors are not only manned by humans, but by thousands and tens of thousands of devices like industrial robots, quality equipment, testing and data gathering tools, safety equipment and monitoring, etc. All these devices need constant security monitoring, troubleshooting, and updating to ensure safe, predictable operations in high-risk environments.