JFrog swampUP 2026 features Anthropic, NVIDIA, Microsoft speakers on AI security
JFrog Ltd announced the speaker lineup for swampUP 2026, featuring executives from Anthropic, NVIDIA, Microsoft, and other tech leaders. The September 1-3 event in New York City focuses on securing software supply chains in the AI era. JFrog cited research showing that while 97% of organizations claim AI governance, 53% still pull models from public registries, highlighting a critical security gap.

*this image is generated using AI for illustrative purposes only.
JFrog Ltd (Nasdaq: FROG) announced the speaker lineup for swampUP 2026, its premier user conference for teams building and securing software in the AI era. The event takes place September 1-3 at The Glasshouse in New York City. The conference brings together leaders from major technology and security firms to address the challenges of trusted software delivery as development shifts toward machine-generated code.
The 2026 lineup includes executives from Anthropic, Cursor, Google-Wiz, Microsoft, NVIDIA, AT&T, Chainguard, Moderne, Echo Security, Broadcom, TEAM8, and others. Speakers will focus on securing the "Agent Software Supply Chain," a concept JFrog describes as essential when autonomous agents build software. Shlomi Ben Haim, Co-Founder and CEO of JFrog, stated that speed and trust cannot be compromised as development accelerates.
Keynote Speakers and Sessions
The conference features sessions designed to address specific security and governance challenges:
- Anthropic’s Jason Clinton, Deputy CISO, will discuss security leadership perspectives on risks created by AI reshaping software delivery.
- AT&T’s Rinat Zilberstein, VP of Global Software & Product Delivery, will join Ben Haim to discuss enterprise approaches to supply chain security in the frontier AI era.
- Cursor’s David Pan, Field CISO, and Yoav Landman, JFrog Co-Founder and CTO, will explain the necessity of a system of record for governing packages, models, and AI assets.
- Microsoft’s Daniel Meppiel, Software Global Black Belt, will unveil strategies for securing agent-generated software.
- NVIDIA’s Krishna Nadiminti, Developer Experience Leader, will explore translating SBOM data into actionable risk signals for AI agent skills.
- Tim Brown, Partner and CISO in Residence at TEAM8 and former CISO of SolarWinds, will share learnings from past supply chain attacks to help prevent future AI-driven threats.
Additional sessions will feature product leaders from Chainguard demonstrating self-healing supply chains, and a panel with CEOs and CTOs from Moderne, Echo Security, Broadcom, and Chainguard discussing remediation strategies as AI models outpace traditional security cycles.
What the Numbers Show
JFrog research cited in the announcement highlights a significant divergence between perceived security governance and operational practices. While 97% of organizations claim to have AI governance in place, 53% are still pulling models from public registries where malicious payloads have been found. This gap suggests that despite high levels of stated compliance or awareness, operational reliance on unsecured public sources remains widespread among enterprises adopting AI.
Conference Details
swampUP 2026 includes hands-on training labs, certification opportunities, and breakout sessions covering AI/ML model management, agent governance, DevSecOps, and cloud-native architecture. A community gala will be held at the Intrepid Museum in New York City, featuring keynote speaker Carey Lohrenz, the first female F-14 Tomcat Fighter Pilot in the U.S. Navy. Registration is now open via the official conference website.
How might the widespread reliance on public registries for AI models impact JFrog's revenue growth and market share in the enterprise security sector?
What specific regulatory frameworks or compliance standards are likely to emerge to govern 'Agent Software Supply Chains' in response to the identified security gaps?
Will the shift toward autonomous agents necessitate a fundamental redesign of traditional DevSecOps pipelines, and how prepared are legacy enterprises for this transition?

































