JFrog's Q2: AI-Devoured Binaries and Security Firewalls Power Another Beat
Cloud growth accelerates to 53%, security attach expands, and the company turns an OpenAI vulnerability into a trust pitch.
FROG · Earnings Call · 2026-08-06
The Q2 Beat and the AI Tailwind
JFrog delivered another blowout quarter, beating the high end of guidance across every metric. Total revenue grew 29% YoY to $163.8M, but the headline is cloud: $87.5M, up 53%, now 53% of the mix. The company's thesis is that AI agents and the explosion of compiled artifacts are turning JFrog into the "single source of truth" for software supply chains. As CEO Shlomi Haim put it, the challenge isn't generating source code but “managing the tsunami of binaries compiled” — Shlomi Haim, CEO and Co-Founder · 2026-08-06. The software artifact growth is validating the model — customers are consuming well above contractual minimums, and the company is deliberately guiding only on committed revenue, keeping overage as upside. The stock has responded, up ~113% over the last 90 days, though it's currently 6% off its peak.
Security: From Attack to Opportunity
The quarter's most defining narrative was the OpenAI incident — an AI model discovered a self-hosted Artifactory vulnerability. JFrog's response was fast, transparent, and turned it into a sales pitch. On the call, Haim said:
Once this AI model found a vulnerability within Artifactory, they contacted the JFrog team immediately. We remediated fast, worked in great partnership with the security researchers of OpenAI...
This is a textbook example of software supply chain attacks becoming a recurring driver. The company noted that over 80% of new $1M+ customers added security, and over 40% of new logos land with it. The AI coding agents also expand the attack surface, and JFrog's Curation firewall is protecting customers — a powerful proof point.
DevGovOps and the New Artifact Types
The company is positioning beyond DevOps/DevSecOps into DevGovOps — embedding governance, compliance, and auditability directly into the delivery pipeline. A landmark deal with an electronic-design leader brought this to life. JFrog is also becoming the registry for new AI-native artifacts like MCP servers and skills — which are, as Haim emphasized, just binaries. "“The desired outcome is that you will have more software being shipped in a higher quality... binary” — Shlomi Haim, CEO and Co-Founder · 2026-08-06", he said, framing why binary traffic is the ultimate proxy for AI productivity. This is a structural expansion of the addressable market.
Financial Engine and Guidance Raise
The operating leverage is improving: gross margin held at 83.2%, and non-GAAP operating margin expanded to 19.9% (from 15.2% a year ago). Free cash flow reached a record $53.8M, a 33% margin. RPO grew 38% YoY to $659M, with “customers that land with security typically tak[ing] a multiyear agreement” — Ed Grabscheid, CFO · 2026-08-06, explaining the strong backlog. Management raised full-year revenue guidance to $648–652M (22% growth) and cloud to 41–43% growth. The trajectory is steep — revenue has grown roughly 5x since 2019, and the acceleration in 2026 is unmistakable.
Prior calls have consistently emphasized they "will only guide on those commitments," a philosophy reiterated this quarter (as Ed Grabscheid said in May): "“we will only guide on those commitments” — Ed Grabscheid, Chief Financial Officer · 2026-05-08". The consistency of that discipline, combined with the AI-fueled consumption, gives the overage upside real optionality. In the 2025 Q4 call, Shlomi had already flagged that AI agents would create "more binaries," which is now showing up in the numbers. "MCP servers are yet another binary," he noted in May, and that's turning into a concrete product strength.
Why It Matters
JFrog is emerging as the control plane for the AI-era software supply chain. The OpenAI incident, far from being a liability, showcased the speed of remediation and the cloud's safety — a narrative that now drives both security attach and cloud migration. With cloud crossing 50% of revenue and security becoming a compulsory add-on, the company is riding two secular waves simultaneously. The risk remains that guidance is conservative and overage volatility could spook investors, but the trend is unquestionably positive. JFrog's challenge is to convert this moment into durable commitments — and the RPO numbers suggest they're succeeding.