Snapshot
- Ticker: FROG (Nasdaq)
- Bucket: Software in the AI Crosshairs
- Q1 2026 position: 554,987 shares, $26.0M, 0.52% of 13F — not top-20
- HQ: Sunnyvale, California (founded in Israel; major R&D in Netanya)
- What it does: Software supply chain platform — Artifactory binary/artifact management, security (Xray, advanced security) and ML-model management for enterprise DevOps.
Business Overview
JFrog’s Artifactory is the de facto system of record for software binaries — every build, dependency, container and, increasingly, ML model an enterprise ships flows through it. The company has layered security (software supply chain scanning, curation) and MLOps/model registry capabilities (JFrog ML) on top, positioning itself as the delivery and governance plane for both human- and AI-written software.
Growth has been accelerating, driven by cloud: FY2025 revenue was 243.3M up 45%. Q1 2026 revenue was 78.9M (51% of revenue, crossing half for the first time). Customers with >37.3M — a rare combination of accelerating growth and solid cash generation at this scale.
Why Atreides Owns It
JFrog is a picks-and-shovels way to be long the explosion of AI-generated code without taking the dev-tools displacement risk head-on. Baker exited GitLab entirely (after building it to a ~1M-customer cohort are early evidence. The position was initiated in Q3 2025, the same quarter the software sleeve began rotating away from seat-exposed names, and Atreides added 37% more shares in Q1 2026 even as it cut software exposure elsewhere — a small but rising-conviction holding ($47 implied per share, near where it first entered).
Position History
| Quarter | Type | Shares/Notional | Value | % of 13F |
|---|---|---|---|---|
| Q4 2024 | — | not held | — | — |
| Q1 2025 | — | not held | — | — |
| Q2 2025 | — | not held | — | — |
| Q3 2025 | Common | 397,244 | $18,801,559 | 0.37% |
| Q4 2025 | Common | 404,276 | $25,251,079 | 0.31% |
| Q1 2026 | Common | 554,987 | $26,045,540 | 0.52% |
A small position built without drama: entered Q3 2025, held flat through Q4, then increased ~37% in Q1 2026 while the stock gave back its Q4 gains. One of the few software names Atreides added to in Q1 2026 rather than cutting or exiting.
Risks
- Consumption can cut both ways: if AI agents also optimize builds and dependencies, artifact volume growth may disappoint the “more code = more JFrog” thesis.
- GitHub (Microsoft) bundles competing artifact and security features into the platform where developers already live.
- Sub-$30M position — easily exited; Atreides’ history shows little patience with software names that stop working.
- Israel-concentrated R&D carries geopolitical operational risk.
- Cloud mix shift pressures gross margin relative to the self-hosted base.