JFrog Ltd. (NASDAQ: FROG) announced new DevGovOps capabilities through its AppTrust product, aimed at helping organizations meet EU software regulatory requirements, according to a company press release.

The new features include an out-of-the-box compliance framework for the EU Digital Operational Resilience Act (DORA), Repo-Level Policies, and AI Verification Policies. The DORA framework and AI Verification Policies are available immediately.

The DORA framework codifies compliance standards into machine-readable rules across five software-delivery obligation areas: ICT change management, source code and component integrity, vulnerability and patch management, resilience testing, and incident management. Customers can activate applicable controls without writing code, with each control mapped to a specific DORA requirement.

Repo-Level Policies allow organizations to enforce governance controls at the repository level, replacing manual processes with automated gatekeeping and providing audit trails throughout the artifact lifecycle.

AI Verification Policies allow teams to write policies in plain language, with large language models evaluating each release against them and generating signed proof of compliance. JFrog states the feature continuously validates whether releases match original intent, such as matching pull requests to their source project tickets.

The announcements were made at JFrog's swampUP Europe 2026 conference in Barcelona.

EU regulations including DORA, the Cyber Resilience Act (CRA), and the EU AI Act carry significant penalties for non-compliance. The CRA, for example, requires manufacturers to report actively exploited vulnerabilities within 24 hours and notify authorities within 72 hours, with fines reaching €15 million or 2.5% of global annual turnover, whichever is higher.

"Regulations now demand more controls and visibility, backed up by evidence for every release, and AI is dramatically accelerating the pace and the number of releases," said Yoav Landman, co-founder and CTO of JFrog.

The JFrog Platform is available as SaaS across major cloud providers and as a self-managed deployment.