JFrog ($FROG) podcast mentions
Timestamped JFrog ($FROG) mentions across our podcast corpus.
Anyway, long story short, this is— there are a few quotes from the talk. You should watch the talk, it's 45 minutes, fascinating. Uh, Wallace said it's the most qualitatively interesting example of AI capabilities I've ever seen. Now remember, OpenAI maybe has some incentive in overselling this. It's good for their business. Wow, we got the best models, don't we? But at the same time, these are security guys. I don't think— and they're talking at Black Hat— I don't think they're exaggerating. Uh, he says the incident involves actually a team of agents who are working together, finding exploits, sharing them with one another, moving laterally through our OpenAI systems and external systems. They hacked at least 4 different other companies, including Modal, JFrog, Artifactory, and doing this over the course of days and weeks.
Leo Laporte · This Week in Tech (Audio) · Fluff for Armor - Flock Cameras, ALPR Abuse, & DNA Collecting · 2026-08-09It's a great, it, you just, you could prompt it just like you would an LLM, but it's got incredibly deep knowledge about all these startups. So here we go. The full spectrum of— here is a ranking of companies based on SBC as a percentage of revenue. Uh, Ionic number 1, 240%. OpenAI about 46%. Snowflake, which we mentioned before, 35%. JFrog 28%. Atlassian 25%. And you could see the rest of the list from there. Took just a moment to pull up. Thanks to our friends at Harmonic.
Lon Harris · This Week in Startups · How AI splits startups into winners and losers | E2322 · 2026-08-07It was in a computer that was not on the internet, that was isolated, but it was on the network. So it got out, got into the company network, hacked those machines, got into those machines, got onto the internet. We're now learning more and more about this, including the fact that it hacked other companies, including JFrog, and used a zero-day. It found an exploit that no one knew about out to use that to get finally to Hugging Face. And what was it trying to do? It was trying to get the answers to a quiz. It was taking a cybersecurity quiz instead of— it was called Exploit Gym. Instead of actually— probably been a lot easier if it had just gone and solved the quiz, but it thought, no, why should I do that? The answers must be out there somewhere. It finally found them on Hugging Face. And the reason Hugging Face got suspicious, they found this intrusion, 17 15,000 attacks, a bunch of stuff opened up. I mean, really a mess. But the reason they realized there was something strange going on is the hacker didn't try to do anything but find answers to these quiz questions. It's like, what? OpenAI finally fessed up after a few days. And now we're starting to learn more and more how the Hugging Face analysis came out., and we're seeing this other companies were hacked on the way, which is wild. And then Anthropic says, oh no, yeah, we did that too.
Leo Laporte · This Week in Tech (Audio) · Horses and Sailboats - Folding Phones Get Cute and Expensive in a Race With Apple · 2026-08-03So you choose a profile for your ThinkScanary device, you register it with a hosted console, you got the monitoring, you got the notifications, and then you relax, you sit back, you wait. An attacker has breached your network, or a malicious insider. Anybody who's snooping around will— cannot help but make themselves known. By accessing your Thinks Canary. Now, you should have at least one for every network segment. A big bank may have hundreds, uh, every remote office, every network segment. A small business like ours, a handful. I'll give you an example, a pricing example though. When you go to canary.tools/twit, it's $7,500 a year for 5 of them. Okay, you get 5 Thinks Canaries, you get your own hosted console, you get upgrades, you get support, you get maintenance. And if you use the code TWIT in the how did you hear about us box, you'll also get 10% off the price. And not just for the first year, forever, for as long as you have those Things Canaries. Now here's the good news. There's no risk. You can always return your Things Canaries with their 2-month money-back guarantee for a full refund. I should mention, we've been, we've been talking about the Things Canaries since the company started. That's more than 10 years now. And in all that time, that refund guarantee has never once been claimed. Visit canary.tools/twit, enter the code TWIT, in the How Did You Hear About Us box, you need this. Thanks to Canary. canary.tools/twit. Don't forget to use the offer code TWIT. We, I'm sure, Mike, you talked about this on machinesociety.ai, the wild sci-fi story of the OpenAI model that escaped containment. It was being tested to see how good it was at cybersecurity We've been talking about it for a couple of weeks now. It escaped containment. It was in a computer that was not on the internet, that was isolated, but it was on the network. So it got out, got into the company network, hacked those machines, got into those machines, got onto the internet. We're now learning more and more about this, including the fact that it hacked other companies, including JFrog, and used a zero-day. It found an exploit that no one knew about out to use that to get finally to Hugging Face. And what was it trying to do?
Leo Laporte · This Week in Tech (Audio) · Horses and Sailboats - Folding Phones Get Cute and Expensive in a Race With Apple · 2026-08-03Yeah, that makes sense. Interesting. So what else did you wanna talk about? I sort of, You know, I, I was looking through the, the only other one that I think, at least name-wise, that I think is super interesting is JFrog. But not because, not because I'm like some super, you know, sharp name on it, but whenever people talk about it, I find it to be a very interesting business.
Bill Brewster · The Business Brew · Sonu Chawla - Managing Mid Cap Exposure - $TSCM · 2026-03-26Yeah. JFrog, obviously this was a seed we planted in 2024 in the mid-cap product. When the company had a sharp sell-off post-earnings, you know, in the small to mid-cap world, 25 to 30% drawdowns are not unheard of.
Sonu Chawla · The Business Brew · Sonu Chawla - Managing Mid Cap Exposure - $TSCM · 2026-03-26And sometimes those are the best opportunities if you've done the work and the due diligence to pull the trigger. If you, you know, if you still believe in the investment thesis,. And so we saw that with JFrog when they had a $1 million revenue miss because the deal there, the thing about JFrog is it's a small cap company that sells to large cap enterprises and really large deals because, you know, they're buying their software. For their security as well as for the developer teams. And they were, they had like 3 really large deals that were in the pipeline. And one of them literally slipped by a couple of days. It caused, that caused them to miss by a million and the stock sold off like a lot. Yeah. And so that was our opportunity to initiate a position. And obviously it was a nice winner last year as the stock doubled. And we had scaled back the position size, you know, coming into 2026. It's been a much more difficult period for the stock, as I mentioned. There's been very little nuance to this, to the sell-off in software. And this company we think is very well positioned. In fact, 3 out of the 5 AI model companies are their customers, including the 2 big ones that we all talk about. So, you know, I think it is an AI beneficiary, but that isn't to say that people aren't nervous and, you know, trigger-happy and any— we live in the world of headline investing, unfortunately, and narrow investing. And so any headline crosses, you shoot first, ask questions later. So JFrog has been caught in that. So what it is, is it is, um, think of them as sort of the system of record for software code. So software code that is now going to be executed in sort of the machine language. So it's called binaries. So it's a system of record for executable software code, which are called binaries, and they're the actual pieces of software that are going to be deployed into production. And so while many competitors focus on the source code, you know, the writing phase, The JFrog's Artifactory platform manages the shipping phase. So, you know, it is, you know, it supports virtually all software package types and cloud environments, which makes them an essential glue in a multi-cloud hybrid world. And this universal, you know, universal support of all these packages leads to high switching costs and a land and expand model that allows them to layer on high margin security products once they're embedded as the sort of the core repository for these binaries. So if you think about, you know, once that, and one more thing on the security front, they have a product called Curation, think of them as, you know, we all, to the extent vibe coding catches on and people use Claude or whatever to, there are a lot of hobby developers now, right? People who've never coded just start building apps and stuff like that. You're downloading a lot of open source packages, software packages, behind the scenes when you're developing an app. And that is, from a security standpoint, a big no-no because you might be downloading a lot of vulnerabilities that come along with these open-source packages. And so what their curation product is, it is a firewall that enforces the corporate policies and scans it to make sure that bad things aren't getting downloaded into your environment. And it's become so table stakes that a lot of their growth recently has been coming from curation product in the security realm. Security used to be almost zero, nonexistent 2 years ago. Now it's 10% of their ARR exiting 2025. And we think there is a lot of growth potential for this business because only, you know, a fraction of their customer base has even bought security from them. So we are excited about the growth potential for JFrog and especially at these levels since the stock has pulled back.
Sonu Chawla · The Business Brew · Sonu Chawla - Managing Mid Cap Exposure - $TSCM · 2026-03-26Yeah. Yeah, and to the— to your point on the million dollars slipping, I mean, that, that to me, given the customer base, sounds like somebody wanted to push something to behind quarter end to make their numbers look good, you know. And, and JFrog doesn't quite have the, you know, the muscle to say no, you got to close before quarter end here. And they lost that little public company battle. And then, yeah, and then it gets— and then it misses the revenue number, and then people sell it, and there's no liquidity to buy. But should theoretically be a better environment for the long-term investor.
Bill Brewster · The Business Brew · Sonu Chawla - Managing Mid Cap Exposure - $TSCM · 2026-03-26