Conference Description
Key Takeaways
- JFrog’s flagship conference addressing secure software delivery in AI-driven development environments
- Focus on software supply chain security, AI governance, and intelligent release management
- Designed for DevOps, DevSecOps, platform engineers, security leaders, and technical executives
- Covers compliance frameworks, agentic AI integration, and resilient delivery pipelines
- In-person event in New York featuring keynotes, hands-on labs, executive summits, and an expo hall
Introduction
swampUP 2026 is JFrog’s annual conference dedicated to the intersection of software supply chain security and AI-driven software delivery. The event convenes engineering leaders, security professionals, and platform architects to examine how organisations can scale AI adoption within their development pipelines without sacrificing trust, traceability, or regulatory compliance. As artificial intelligence becomes embedded in every stage of the software lifecycle, from code generation to deployment automation, the need for robust governance frameworks and secure delivery infrastructure has become a pressing concern across industries.
About swampUP 2026
Held in New York, swampUP 2026 brings together practitioners and decision-makers from software, cloud computing, telecommunications, financial services, and enterprise IT. The conference programme spans keynote presentations, hands-on technical labs, executive summits, breakout sessions, and an expo hall featuring solutions from major technology vendors. The event caters to both technical practitioners seeking implementation guidance and senior leaders responsible for security strategy and platform investment decisions.
JFrog positions the conference around the concept of establishing a system of record for trusted software delivery, an approach that treats software artefacts, dependencies, and AI models with the same rigour applied to financial or compliance data. This framing reflects broader industry movement toward treating software supply chains as critical infrastructure requiring end-to-end visibility and control.
Software Supply Chain Security in the AI Era
The conference programme addresses the operational reality that AI-assisted development accelerates code production while simultaneously expanding the attack surface. When development teams integrate large language models, code generation tools, and automated testing frameworks, they introduce new categories of dependencies that traditional security scanning may not adequately address. swampUP 2026 examines practical strategies for maintaining security posture as AI tooling becomes standard across engineering organisations.
Sessions explore how DevSecOps practices must evolve to accommodate AI-native workflows, where automated agents may generate, test, and deploy code with minimal human intervention. This shift raises questions about accountability, auditability, and the mechanisms required to ensure that AI-generated artefacts meet the same security and compliance standards as human-authored code.
Governance, Compliance, and Intelligent Release Management
A significant portion of the conference focuses on what organisers describe as DevGovOps, the integration of governance requirements directly into delivery pipelines rather than treating compliance as a separate checkpoint. This approach becomes increasingly important as regulatory frameworks around AI usage mature and organisations face pressure to demonstrate control over their software supply chains.
The programme examines intelligent release governance, where policy enforcement and risk assessment are automated within the delivery pipeline. Rather than relying on manual approval gates that slow deployment velocity, organisations can implement systems that evaluate releases against security policies, licence compliance requirements, and vulnerability thresholds in real time. This capability becomes essential when development teams operate at the pace that AI-assisted tooling enables.
Building Resilient Delivery Infrastructure
Beyond security and compliance, swampUP 2026 addresses the operational challenge of building delivery pipelines that can recover from failures without manual intervention. The concept of self-healing infrastructure has gained traction as organisations recognise that the complexity introduced by AI tooling, microservices architectures, and multi-cloud deployments exceeds what traditional monitoring and incident response can manage effectively.
Sessions cover how platform engineering teams can design systems that detect anomalies, isolate failures, and restore service automatically. This resilience becomes particularly important when AI agents are involved in deployment decisions, as the speed of automated systems can amplify the impact of misconfigurations or security incidents.
Who Should Attend
swampUP 2026 is structured for professionals responsible for software delivery infrastructure, security architecture, and platform strategy. DevOps and DevSecOps engineers will find technical depth in the hands-on labs and breakout sessions, while CTOs, CISOs, and product leaders can engage with strategic content in the executive summit track. The conference is particularly relevant for organisations actively integrating AI tooling into their development workflows and seeking frameworks for doing so securely.
Technology Ecosystem
The expo hall and sponsor programme feature major cloud providers including AWS, Google, and Microsoft Azure, alongside security-focused vendors such as Chainguard, Wiz, and Sonar. NVIDIA’s presence reflects the growing importance of GPU infrastructure in AI workloads, while companies like Red Hat, Cloudbees, and Moderne represent the broader DevOps and platform engineering ecosystem. This vendor mix illustrates how software supply chain security has become a concern that spans infrastructure, development tooling, and security operations.