Prepared remarks
Thank you all for being here today and welcome to the JFrog Second Quarter 2025 Financial Results Earnings Call. I will now pass the conference to Jeffrey Schreiner, Head of Investor Relations. Jeffrey, the floor is yours.
Thank you, Nicole. Good afternoon, and thank you for joining us as we review JFrog's Second Quarter 2025 financial results, which were announced following market close today via press release. Leading the call today will be JFrog's CEO and Co-Founder, Shlomi Ben Haim; and Ed Grabscheid, JFrog's CFO. During this call, we may make statements related to our business that are forward-looking under federal securities laws and made pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995, including statements relating to our future financial performance, including our outlook for Q3 and the full year of 2025. The words anticipate, believe, continue, estimate, expect, intend, will and similar expressions are intended to identify forward-looking statements or similar indications of future expectations. You are cautioned not to place undue reliance on these forward-looking statements, which reflect our views only as of today and not as of any subsequent date.
Please keep in mind that we are not obligating ourselves to revise or publicly release the results of any revision to these forward-looking statements in light of new information or future events. These statements are subject to a variety of risks and uncertainties that could cause actual results to differ materially from expectations. For a discussion of material risks and other important factors that could affect our results, please refer to our Form 10-K for the year ended December 31st, 2024, which is available on the Investor Relations section of our website and the earnings press release issued earlier today. Additional information will be made available in our Form 10-Q for the quarter ended June 30th, 2025, and other filings and reports that we may file from time to time with the SEC. Additionally, non-GAAP financial measures will be discussed on this conference call. These non-GAAP financial measures, which are used as measures of JFrog's performance, should be considered in addition to, not as a substitute for or in isolation from GAAP measures.
Please refer to the tables in our earnings release for a reconciliation of those measures to their most directly comparable GAAP financial measures. A replay of this call will be available on the JFrog Investor Relations website for a limited time. With that, I'd like to turn the call over to JFrog's CEO, Shlomi Ben Haim. Shlomi?
Thank you, Jeff. Good afternoon, and thank you all for joining the call. As the JFrog platform becomes the system of record for all software packages, I'm pleased to report another excellent quarter for the company. We continue to execute with discipline, aiming to meet the growing market demand for a unified platform that enables trusted, scalable software delivery. In Q2, JFrog software revenue was $127.2 million, up 23% year-over-year. Our operating margin was 15.2% in the quarter, demonstrating consistent execution while maintaining disciplined strategic investments. Cloud revenue for Q2 equaled $57.1 million, representing 45% year-over-year growth. We observed sustained cloud usage, while maintaining a strategic focus on converting customers with steady usage above minimum commitment into annual contracts. Our enterprise focus, product and go-to-market bore fruit again this quarter.
I'm pleased to report that our greater than $1 million customers grew to 61 compared to 42 in the year-ago period, equaling 45% growth year-over-year. Customers spending more than $100,000 annually grew to 1,076 compared to 928 in the year-ago period, equaling 16% year-over-year growth. Our trailing 4 quarters net dollar retention increased sequentially, driven by continued adoption of our security product and solid growth across our customer base. Ed will discuss this in greater detail later in the call. Entering the second half of 2025, we are confident that our focus on DevOps, security and MLOps aligns with modern software demands. This quarter's success was fueled by continued cloud growth, rising demand for our unified security solutions and a clear value proposition in the rapidly evolving world of Agentic AI and MLOps. Now I will take a moment to spotlight what powered our Q2 success, highlighting the key drivers behind our strong performance.
First, on cloud growth. I want to address 2 items for JFrog Cloud, both our core business results and then talk about emerging market dynamics. Q2 delivered strong cloud results fueled by expanded annual commitments, helping our customers gain budget clarity and SaaS spending visibility, while growing our recurring revenue base. Now with AI adoption exploding, CIOs are rethinking infrastructure at its core. The unpredictable cost of running AI at scale is forcing a shift from cloud-first to fit-for-purpose. This might mean hybrid, balancing cost predictability with agility, compliance, security and control. JFrog has been hybrid from day 1, a unified software supply chain platform that runs in the cloud, on-prem or both. We are not reacting to this hybrid demand. We've been building for it, giving our customers true freedom of choice. This strategic shift by companies might extend sales cycles of customers that were in the process of migrating workloads to public clouds, but it reflects a deeper enterprise commitment across infrastructures and setups.
As customers bet big on AI, they need a robust solution, but also cost predictability, and that's exactly where JFrog can help them build smarter for the future. We're heading into H2 confident and focused, aligned with customers' demand and built for what's next, staying loyal to our disciplined derisked approach. Next, to AI and machine learning. Over the past few years, JFrog has not only invested in making our platform the system of record for MLOps and AI-driven software delivery, but also partnered with the world's largest companies and leading organizations in the AI ecosystem. Last quarter, we highlighted our partnership with Hugging Face to secure open source AI models, the launch of JFrog ML to enterprise customers as part of our unified platform and the growing adoption of JFrog by native AI companies using Artifactory as the centerpiece model registry in their software supply chain.
In Q2, we were honored to be included in yet another mega initiative in the world of AI when NVIDIA's CEO, Jensen Huang, announced their new enterprise AI factory at the NVIDIA GTC Conference. As part of this emerging standard for enterprise AI development, JFrog was announced as the cornerstone software artifact repository and Secure Model Registry for NVIDIA's initiatives. Justin Boitano, NVIDIA's VP of Enterprise AI Products noted, "enterprises building AI factories need to manage the complexity of AI adoption, while ensuring performance, governance and trust. JFrog's unified software supply chain platform paired with the NVIDIA Enterprise AI factory validated design enables rapid responsible AI innovation at scale". We also continue to gain traction with leading AI industry customers as referenced in Q1 as they rapidly adopt the JFrog platform as an infrastructure solution, a system of record for binaries.
Just as we previously became the registry and single source of truth for all software packages, containers and artifacts or in short, all types of binaries, we are on a mission to become the world's leading AI model registry, offering our customers comprehensive 360 coverage across the entire model life cycle. To achieve this, we are deepening partnerships with AI industry leaders, expanding our support for the AI ecosystem and driving community standards for responsible ML and AI adoption. As AI continues to transform the way we live and work, developer tool stacks are evolving rapidly, integrating code assistant tools to meet growing demands for speed and efficiency. But it's not just tools that are changing. The architecture of software products must now be designed around MCP servers that enable agentic interaction, giving AI technologies access to tools and the systems that power modern application development.
JFrog is all in as an open platform, building a solution that deeply integrates into the AI ecosystem. Our commitment was also marked by the launch of the JFrog MCP server in mid-July during the AWS Summit in New York. This is not all. As responsible members of the AI community and as a vendor committed to building trust across our customers' software supply chain, we recognize that as MCP adoption accelerates in the development world, so does interest from threat actors looking to exploit evolving MCP standards. Our security research team recently uncovered and published significant exploitation risks tied to MCP usage, and we're proud to lead the charge in securing the AI community from these emerging threats. Finally, I want to highlight our DevSecOps solutions. In Q2, we saw multiple customer wins continue to be driven by security with companies focused on the consolidation of tools, a model security and software package curation.
For example, during the second quarter, one of the world's largest telecommunication companies expanded its use of JFrog through JFrog Curation in a seven-figure deal. As part of their standardization and consolidation efforts across their DevOps and DevSecOps toolsets, they placed a strategic investment in our solution to enforce policies and act as a firewall for their software supply chain. JFrog's security solutions are boldly transforming the industry, replacing legacy point solution tools with a unified software supply chain platform and blazing the trail with world-class research and cutting-edge innovations to deliver trusted AI. Some of these innovations will be announced at swampUP. I'm excited to remind you that JFrog will be holding our Annual User Conference on September 9th and 10th in Napa Valley, California. We'll be announcing new products and strategic partnerships, highlighting new innovations and delivering new solutions to the market.
We look forward to welcoming our community to swampUP, where the world of every DevSecOps standard is crafted. With that, I'll turn the call over to our CFO, Ed Grabscheid, with an in-depth recap of Q2 financial results and our updated outlook for Q3 and the full fiscal year of 2025. Ed?
Thank you, Shlomi, and good afternoon, everyone. During the second quarter of 2025, total revenues were $127.2 million, up 23% year-over-year. Our strong performance during the quarter was a result of continued operational execution, driven by strength in our cloud revenues, accelerating adoption in security core products and ongoing demand for our enterprise-level subscriptions. Second quarter cloud revenues grew to $57.1 million, up 45% year-over-year and represented 45% of total revenues versus 38% in the prior year. As Shlomi noted, our strategy remains focused on converting customers with usage above minimum commitments into higher annual contracts. Our growth in the cloud was driven by momentum in the JFrog Security Core and conversion of customers with usage above minimum commitments into higher annual contracts. During the second quarter, our self-managed or on-prem revenues were $70.1 million, up 10% year-over-year.
Aligned with our cloud-first approach, we proactively engage our on-prem customers to migrate DevSecOps workloads to our cloud and enable them to capture even greater long-term value. In Q2, 55% of total revenues came from Enterprise Plus subscriptions, up from 50% in the prior year. Driven by the ongoing execution of our enterprise go-to-market strategy and broader customer adoption of the JFrog platform, revenue contribution from Enterprise Plus subscriptions grew 36% year-over-year. Net dollar retention for the trailing four quarters was 118%, up 2 points sequentially, driven by the adoption of our security core products and increased data consumption, resulting in higher customer commitments. We continue to demonstrate that our customers view JFrog solutions as mission-critical to their software supply chain with gross retention that equaled 97% as of the second quarter 2025. Now I'll review the income statement in more detail.
Gross profits in the quarter were $105.7 million, representing a gross margin of 83.1%, in line with our guidance range versus 84.4% in the year-ago period. The change in gross margin relative to the year-ago period was primarily driven by the increased mix of our cloud revenues. We expect annual gross margins to remain between 82.5% and 83.5% in 2025 due to continued focus on cost optimization with the cloud service providers. Operating expenses in the second quarter were $86.4 million, equaling 68% of revenues. This compares to $73.3 million or 71% of revenues in the year-ago period. Our operating profit in Q2 increased to $19.4 million or an operating margin of 15.2% compared to $13.6 million and 13.2% operating margin in the second quarter of 2024. The continued balance between strategic investments and operational efficiency demonstrates our commitment to profitable growth. Cash flow from operations equaled $36.1 million in the second quarter.
After taking into consideration CapEx requirements, our free cash flow reached $35.5 million or a 28% margin compared to $16 million or a 15% margin in the year-ago period. Now turning to the balance sheet, we ended the second quarter of 2025 at $611.7 million in cash and short-term investments compared to $522 million at the end of 2024. As of June 30th, 2025, our RPO totaled $476.7 million, a 75% increase year-over-year, benefiting from customers' multiyear commitments to JFrog's DevOps and security offerings. And now let me turn to our outlook and guidance for Q3 and the full year 2025. While we are pleased with our strong performance in the first half of the year and see pipeline opportunities continuing to build, given the current macro uncertainties, we believe it is prudent to continue to exercise caution in our forward outlook. Our updated guidance range suggests growing contributions from the JFrog Security Core, increases in cloud commitments and continued adoption of the full JFrog platform.
We continue to derisk our outlook by excluding our largest opportunities given the uncertainty regarding the timing of customer deployments. We estimate full year 2025 baseline cloud growth to now be in the range of 34% to 36%. Cloud revenue guidance continues to exclude any contribution from usage above our annual customers' minimum commitments. We continue to expect our net dollar retention rate to remain in the mid-teens during 2025. For Q3, we expect revenues to be in the range of $127 million and $129 million, with non-GAAP operating profit anticipated to be between $16.5 million and $18.5 million and non-GAAP earnings per diluted share of $0.15 to $0.17, assuming a share count of approximately 122 million shares. For the full year 2025, we anticipate a revenue range of $507 million to $510 million, representing approximately 18.7% year-over-year growth at the midpoint. Non-GAAP operating income is expected to be between $75 million and $78 million and non-GAAP diluted earnings per share of $0.68 to $0.70, assuming a share count of approximately 121 million shares. Now I'll turn the call back to Shlomi for some closing remarks before we take your questions.
Thank you, Ed. This quarter demonstrated yet another powerful example of JFrog's strong execution and even more remarkable given the adversity we faced. Our team in Israel, supported by the global JFrog team, worked under unimaginable threat, literally under fire during the recent conflict with Iran. This resilience and brotherhood are woven into our DNA, and I'm truly grateful and honored to stand alongside such a courageous and dedicated team. Together, we continue to live stronger no matter the challenge. We continue to hold on to hope and pray for peace in the world and for the fast release of the 50 hostages held captive by the brutal terror organization. We deeply wish for their safe return home well before reaching two years in captivity in Gaza's underground tunnels. JFrog's business remains strong. Our technology continues to lead and innovation is growing. We're making meaningful progress towards becoming the system of record for all software. H1 of 2025 was solid, and we're focused on building even more success ahead. With that, thank you for joining our call and may the frog be with you. Operator, we are now open to take questions.
Questions and answers
Your first question comes from the line of Sanjit Singh with Morgan Stanley.
Can you hear me? Awesome. Congrats on a strong Q2. Shlomi, I wanted to talk a little bit about the evolutions, cloud first fit for purpose. If I rewind it back a couple of years ago, there was this sort of customer hesitation on self-managed data center offering and then sort of looking to secure budget for their cloud initiatives. Could you just talk a little bit more about the evolution that you're seeing now? I just want to sort of unpack your comments in terms of how it would translate into continued cloud growth versus potential self-managed growth going forward given the evolution that you were speaking to in your earnings script?
Absolutely. Thank you for the question, Sanjit. What we are hearing from our customers, especially those that were in the process of migrating workloads to the cloud, to the public cloud, is that there is a new type of uncertainty coming from the predictability or the ability to predict costs in the world of AI. AI is being adopted rapidly. And therefore, you need to think or rethink, where your models will be, where the data will be, how you will train it. And therefore, just going blindly to the cloud is not a responsible move for them. So they take a bit more time to consider that. Obviously, this is more relevant to the high-scale companies. A small developer shop that is practicing AI will not start its own data center, but big organizations that are betting heavily on AI will think and rethink, where their data centers will be, whether it would be in the cloud, on-prem or hybrid as most of them are now talking about.
I understand. My follow-up question relates to how some of the product portfolio decisions your team is making are impacting your growth and partnerships within the ecosystem. Specifically, I'm curious about the sunsetting of the JFrog Pipelines product. To what extent has that enhanced your go-to-market collaboration and initiatives with CI/CD players, including Microsoft GitHub? Is there a way in which this decision is helping to focus more on the security aspect of your portfolio, which appears to be gaining increased adoption? I'm trying to connect the dots here, but please let me know if I'm reading too much into it.
Yes. So as you know, our growth is based on a very diverse portfolio, all sectors, all industries, all sizes of companies, cloud, on-prem, so different setups, but also different practices. JFrog is the only unified platform that provides DevOps practices, MLOps practices and DevSecOps practices. This means that we are active in three different courses to accelerate our growth. Specifically regarding JFrog Pipeline, the moment we found out that most of the world is betting on GitHub action and there are new CI practices coming with the trend of AI, we decided to be #1 in what we know how to be #1. Pipeline was not one of them. Therefore, we were focused on the execution and the growth that we established with the new core, mainly security and mainly the migration to the cloud. And I think it was a very smart decision because now, as you can see by the numbers, we are even more focused on execution. The other thing around it is that it opened doors to better integration and better partnerships with companies like GitHub, with companies that are doing CI/CD on top of the source code. And I think it's also accelerated the partnership and the go together to the market without confusing our customers.
Your next question comes from the line of Andrew Sherman with TD Cowen.
Congrats. Shlomi, it would be great to hear more about the pipeline of large enterprise deals. It sounds like you had some in the quarter. It would be great to hear more about those, maybe about this Curation telco big deal. What do they find so compelling? And can that be a good indicator of deals to see in the second half?
Thank you, Andrew. Our pipeline is focused on executing significant deals that involve three key factors. First, we are migrating workloads to the cloud while ensuring we collaborate closely with our customers to secure the right commitments. Our guidance is based on these commitments rather than usage. Secondly, we are integrating security into a comprehensive software solution for the entire software supply chain. For example, a major telecommunications company has added JFrog Curation on top of JFrog Advanced Security to serve as a firewall for binaries between the public hub and their internal software supply chain. This new solution from JFrog, which follows the same principles as every Ops, includes MLOps for managing models and deployment as part of a unified platform. Our key differentiator remains Artifactory, serving as the centerpiece and the model registry for the platform, from which we continue to build capabilities. Looking ahead to the second half of the year, we have a positive outlook. We maintain a cautious perspective on the pipeline and work to mitigate risks associated with large deals that may shift by a week or a month, but we are optimistic and base our guidance on what we have observed.
That's great, Shlomi. The security seems to have had a significant impact this quarter, which is encouraging. Was that anticipated? I thought many renewals were scheduled for the second half. Did any of those come in this quarter? And how are those renewals progressing, particularly for those that were on trial pricing and are now being transitioned to higher-paying customers?
Yes. So we are very excited about what we see in the security landscape, not only that our technology is addressing the real pain and the real threat of today's software supply chain, but also the narrative of consolidating security around the platform and positions solution is catching up really, really fast. In terms of renewal, I think that if you look at our retention rate, it's still very, very high. So it says something about all the renewals that happened in this year. And also in terms of the adoption of more and more security tools with more partners that are reaching out to JFrog and ask to partner with our security tools, we are very positive about 2025 as we were in 2024.
Your next question comes from the line of Miller Jump with Truist.
Congratulations on the strong results. I just want to stay with this idea of Artifactory getting used as the centerpiece and as a model registry for customers. Can you just talk about the consumption trends that you see when customers make this decision? Is there like a notable step-up or acceleration that's being driven there?
Absolutely, Miller. You all remember that JFrog began as a software package and artifact repository company. From 2014 to 2016, Docker transformed every developer's experience by introducing containers, which made JFrog the largest container registry in the world. We now have an incredible opportunity because AI models represent another type of binary. Therefore, part of our strategy is to establish ourselves as the model registry of the world. This means we are not just supporting software packages, containers, and various artifacts but also models, which serve as the core asset of AI. Many of our customers are currently recognizing the need for a model registry as they implement AI. They face two choices: either consolidate around a single system of record, which is Artifactory along with the other 30 packages, or opt for a standalone model registry that could compromise their system of record, impacting the safety, security, and efficiency of their software development and release processes.
We believe that AI is a vast field today, and this will enhance the stickiness of our platform and promote its expansion through the additional features we've integrated with Artifactory. Furthermore, it will position JFrog as a crucial element of the software supply chain since models are the primary asset in the AI landscape, regardless of whether the software is developed by humans or agents. A system of record will still be necessary. So, in response to your question, we anticipate that the demand for Artifactory and its central role will continue to increase.
Makes sense. I want to stay with AI. Last quarter, you talked about a key AI technology leader that you landed as a customer. I'm just curious if there's any update on the work that you're doing with them and then how that ramped versus your expectations in the quarter.
We are extremely, extremely excited about the partnership with them. It was not included in the call, but I can tell you that they upgraded their subscription and doubled their bet on the annual basis with JFrog in just one quarter. So we are not just operating in the world of AI, but also security and DevOps, but AI is growing fast.
Your next question comes from the line of Kingsley Crane with Canaccord.
Congrats on the quarter. First question, so with AI enabling smaller teams to ship code faster, do you see a world JFrog becomes even more critical to smaller orgs and teams? And are you already starting to see that with some new customer interest?
What a great question, Kingsley. What we see today is that something fundamental has changed. In the past, if you were a developer, you had your integrated development environment, continuous integration/continuous deployment source code, and JFrog, which was sufficient. Now, there is an additional element called code assistance that works alongside you. Furthermore, the architecture has changed with the introduction of MCP, which is how platforms are built today. Regardless of the environment—cloud or on-premises—and regardless of whether you're using this AI or that code assistance, a model registry remains essential. You will also need to ensure security around one flow and one pipeline. Therefore, we see JFrog playing a significant infrastructure role, and we are investing in that alongside the expertise we have developed through our partnerships.
Great. That's really encouraging to hear. And Ed, really impressive cash flow in the front half of the year. Is there any reason why this year would be more front-end loaded than last year?
Yes. That's a great question, Kingsley. As you remember, we have many multiyear deals that we've closed. It's reflected in our RPO that happened in the second half of 2024 and that continued in the first half of 2025. And this is what's really driving the free cash flow. In the second half of the year, as Shlomi had noted, we are derisking our largest deals. This is a big driver of our cash flow. Assuming that those deals come through, I don't see a change in our free cash flow from what we would anticipate going forward, but it's all contingent, of course, on the multiyear deals as well as these large deals. But we remain very focused on profitability. We remain very focused on our free cash flow, and we've delivered strong cash flow in the past, and we continue to focus on that going forward.
Your next question comes from the line of Mark Cash with Raymond James.
Shlomi, if I could start with you. I wanted to ask on the overconsumption happening in the cloud. I think last quarter, you talked about how you didn't really see the budgets that may have been developers experimenting here and there. And you have another really strong performance this quarter and seeing success with converting to larger commits. So has there been a change in budgets? And are you seeing experimentation move to actual programs now?
Yes, Mark. You remember well. First of all, we've observed increased usage, particularly when using JFrog infrastructure for models, leading to greater data and storage consumption. This trend is also evident with containers and anything related to AI. It's important to note that our strategy involves addressing any overconsumption beyond the customer's commitment by providing better offers to encourage annual commitments. This is how we maintain our cautious approach and stay aligned with our plans. Overall, we observe healthy consumption, although it's not yet at the levels of 2022, but we do see a positive growth trajectory.
Okay. And Ed, if I could ask you one, just absolutely another massive RPO quarter that's actually accelerating, going to be lapping 3 very large deals this quarter in 3Q. Is there anything we should be considering from an RPO or cRPO dynamic when looking at quarter-over-quarter or year-over-year compares to make sure we're not getting too far ahead of ourselves in like a booking perspective for 3Q or the second half?
Yes. Thank you. That's a very smart question, Mark. And we don't always see a correlation between our cRPO or RPO to revenue. So we think revenue is a good indicator and the guidance that I've given you in the revenue is what I would use to forecast going forward. But you have to remember, our RPO takes into consideration factors of multiyear, takes into consideration the timing of when those bookings happened. We had 3 of the largest deals during the second half of 2024. So RPO may be impacted if larger deals do not transpire, but by the way, derisked out of our guidance going forward. So RPO is a great indicator, but it's not the indicator that we would lead you to continue to look at the guidance that we provide on our revenues.
Your next question comes from the line of Shrenik Kothari with Baird.
This is Zach Schneider on for Shrenik. Congrats on the strong results. So following up on a previous question with cloud adoption continuing and DevSecOps needs shifting earlier in the life cycle, how are you leveraging your hyperscaler partnerships for co-sell marketplace attach? Maybe what percent of new security wins in the quarter were sourced via these marketplaces or just driven by this channel influence?
Yes, Zach, this is Shlomi. I'll take the call and Ed, feel free to chime in. The collaboration with the cloud providers is very important because of 2 reasons: A, it helps us to accelerate deals, especially mega deals that are coming in, mainly through the marketplace and with a lot of collaboration from AWS, GCP and Microsoft Azure. We have strong relationships with them. Some of the deals we are accelerating together. This is not just co-sell and partnership. This is also kind of co-services even when we are going with the customer, scaling with the customer. The second side of it is obviously optimizing the cost. As Ed mentioned on the call, we are optimizing the contracts with these hyperscalers. We are looking at the gross margin, being very responsible to how we grow in the cloud. So not just pushing the pedal all the way down, but doing it in a responsible, smart way.
Great. Makes total sense. And then I guess switching gears a little. Obviously, it sounds like strong sequential growth in AI/ML package usage across the platform. Are there any new usage tiers, ingestion thresholds? Should we expect any pricing model changes in 2026 to really capitalize on this trend?
Yes. So what we saw actually in terms of the usage for AI packages, and I think you're probably calling out the Hugging Face and PyPI that we called out in the first quarter, it was more of stabilization or sustained usage on a quarter-over-quarter basis. It's still very early, and we're evaluating the monetization of AI is still in the infancy stage. But once that starts to mature, we'll certainly capture value.
Your next question comes from the line of Jason Ader with William Blair.
Yes. Can you hear me okay?
We hear you well, Jason.
Okay. Good to talk to you guys. Shlomi, I just want to take a step back. Can you talk about the impact of all the AI coding tools? I mean there's just so much happening there. Every week, it seems like there's a new announcement, and it's pretty powerful stuff, obviously. What impact has that had on the DevOps tool chain in general and on your business in specific? And if it hasn't had an impact yet, can you just talk about how you think it might play out over time?
Yes. As I mentioned earlier, there is now a new tool called code assistance in every developer's toolkit. It benefits both junior and experienced developers, regardless of the programming language or code being used. This tool is enhancing the workflow, allowing for faster development and increased output, specifically more binaries. We are pleased with this development as long as these binaries are managed within JFrog. However, this also introduces new vulnerabilities. We noted the rising significance of the MCP server, which is being rapidly adopted by many companies. This quick uptake presents a substantial risk, as threats from hackers are aware of this acceleration. Any company implementing MCP architecture and new code assistant tools faces potential security challenges. Therefore, we increasingly see JFrog's relevance in addressing these issues through our technology and our comprehensive strategy for integrating security and automation layers on top of Artifactory. Keep in mind that our tools are compatible with a wide range of integrations, whether it's Cursor, Windsurf, or MCP from various providers, making JFrog the definitive system of record for users.
Okay. Great. So I mean, just to round out the question, do you feel like it's benefiting you guys yet, all of this kind of front-end AI coding or it's still not moving the needle yet?
Well, for sure, there are new threats that are coming. And when you speak with the customer about security and what you need to protect, model security are coming on every discussion. So the answer is yes. It's still very early in the process. People are still trying to understand how this new environment looks like, but all of them are aware of the threat and therefore, open to have discussions with modern solution and not yesterday solution. The second thing, as I mentioned before, if you have your Docker registry in Artifactory, your Python Registry in Artifactory, your Java repository in Artifactory, then why you would go with a stand-alone model registry? So my answer is yes. And still, I will stay humble and say it's still too early to say it will completely change everything we guided for in the next years.
Okay. Great. And then if I could ask a question for Ed. Ed, you have mentioned that security will be a significant part of the business in 2025. Can you provide an update on that? Will you be able to share more details about the impact of security on the JFrog business at some point?
Yes. What we've committed to you, Jason, and we did this at the end of 2024 was we gave the metrics around our attach rates with security, and we plan to do the same thing during 2025. We see nice momentum. We're excited about what security can bring, but we'll give you an update at the end of the year.
Your next question comes from the line of Jonathan Ruykhaver with Cantor.
Can you hear me?
We can hear you now, Jonathan.
Okay. Yes. So the MCP opportunity, I'd just like you to talk a little bit more about that. I think it was 2 weeks ago that GitHub announced a critical flaw in its MCP server. And I think some attackers were actually able to manipulate AI agents into leaking sensitive data. So how do you see that solution not only today, but when you look at securing AI agent behavior relative to repositories, what is that opportunity for you? And will you see additional capabilities? It seems like from what I understand, it's a basic kind of entry-level offering, but there are a lot of other threats around protocols, around access for these MCP servers that still need to be addressed. So just talk about that position and what it looks like 12 months from now.
Yes, Jon. MCP represents a new way to engage with software products and build integrations. JFrog's philosophy from the beginning has been that we are too integrated to fail. There is no tool related to the software supply chain that does not connect with JFrog—this includes CI/CD, security, databases, and storage—because we have established ourselves as the system of record for all binaries. This is rooted in APIs and REST technology. In the current landscape of AI, where not only humans but also agents and machines need to connect with your tool, MCP serves as the protocol enabling this integration with the JFrog platform or any other platform. Consequently, MCP has become crucial for every product provider; to allow AI to interact with your tool or platform, you must enable MCP at the outset. On another note, many users are adopting MCP and installing it, leading to a situation where every user becomes a target for hackers. Our JFrog Research team has identified a threat and vulnerability within the MCP context, and we promptly shared this information with the public. This will certainly enhance our standing in discussions related to AI security and trustworthy AI in the software supply chain.
Yes. And Shlomi, as a quick follow-on, where do you see this opportunity? Will it be aimed more at the foundational model providers like OpenAI and Anthropic or large enterprise or both?
No, it's not at all one company or another. Every agent you can assume that in the future or not in the future, it's already in the present, but it will exceed in the future. Not only developers will write code, but also agents. So if I want this new persona to see JFrog as a system of record, I have to open the door for it. So every type of Agentic AI that will interact with JFrog will come through an MCP integration.
Your next question comes from the line of Raimo Lenschow with Barclays.
This is Eamon Coughlin on for Raimo, A great quarter. Can we dig a little deeper into linearity in the quarter? Should we view 2Q's performance broadly as a continuation of the customer usage from Q1? And did you see a continuation of these trends in July?
So first, let me just start by saying I will not comment on anything in the third quarter. I'll go back to the second quarter and give you an update on what happened. There were three dynamics with our cloud. First was security wins. We're starting to see customers uptake in their security and big security wins; those tend to land in the cloud. So that was dynamic number one. The second piece was the usage. We had customers that saw benefit from taking a larger agreement, annual agreement with JFrog. These were users that were using over minimum commitments, and we secured those. The confidence that gave me is reflected in my guidance that I gave to you in the 34% to 36% on the cloud. The third piece is the sustained usage. So for those customers that were using over minimum commitments, that has been sustained on a quarter-over-quarter basis.
Got it. That's super helpful. And then great to see continued cloud growth acceleration in the quarter. But can you help us understand the key drivers of your subscription self-managed portfolio?
Yes. Why don't I answer here? Self-managed, we addressed that on the call as well. There is a new trend now that AI might need a hybrid solution. What can be better than an identical product, hybrid means that it's identical in the cloud and on-prem? So that's a new trend, mainly driven by the AI adoption and the seek for cost predictability and stability. The second thing that we see in on-prem is just like what Ed mentioned in the cloud. Our on-prem customers are also looking for security. So the fact that we have our security available for you in the cloud, but also as a self-hosted or private cloud is also a benefit, and we see that this growth generated by these trends as well.
Your next question comes from the line of Koji Ikeda with Bank of America.
This is George McGreehan speaking on behalf of Koji. I wanted to ask about the strong momentum we're experiencing in security deals and how that contributes to forward-looking metrics like the acceleration in RPO. Have there been any changes in the competitive landscape for security? Are there any notable changes in win rates? Additionally, how would you describe the tone of conversations with customers regarding security deals compared to a year or two ago?
Yes. Thank you, George, for this question. It comes in two different ways, as I mentioned, and as you know, on the JFrog go-to-market strategy with security. First of all, our customers, whether it's the CISO or the CIO or both, they are asking to look for consolidation, and they will push very hard on it, not only because of the cost benefit from it, but also from the enormous number of scanners that they used to have just two years ago, three years ago. Every developer bought another tool, every compliance group brought another tool. It became a zoo of scanners, and they are looking for consolidation and obviously also benefiting from the efficiency and the cost perspective. This is more business side and management side. What happened on the technology side is that there are a lot of new threats that cannot be identified by the previous software that covered software supply chain security.
If you remember what we spoke about in the previous quarter, the fact that we scanned the entire Hugging Face 1.5 models and provided not only vulnerability findings, but also contextual analysis, telling you not only that we found this vulnerability that maybe every scanner can find, but also how exposed you are to this risk and if you should waste time on doing it. And the third thing is that modern security is a new thing. Nobody knows really how to cover it. And since models are hosted at JFrog and also the data, the metadata that you train models with, we have better access to this asset and better visibility to this asset. And I would welcome you to swampUP when we will speak about it even more and even share some great innovations with you to address this pain. There is no CISO in today's world that is not waking up at night several times because of model security. And I think that this is another driver that pushes JFrog to be a relevant player, not only in the world of DevSecOps, but in the world of MLSecOps as well.
Your next question comes from the line of William Mandl with KeyBanc Capital Markets.
This is Billy on for Jason Celino. Shlomi, it sounds like there's strong demand for the security core, but curious what customer reception has been around runtime security, maybe how that is contributing to the strength you're seeing in your security business?
Yes. Billy, I think that cyber is important. Runtime is important. And DevSecOps and software supply chain is important. This is a complementary solution. We were all very excited to see the acquisition of Palo Alto, which emphasized their advantage in the world of cyber and runtime. And if you look at the growing demand for software supply chain security, it's coming from a different threat and a different need. And I think that they will coexist together.
Your final question comes from the line of Rob Owens with Piper Sandler.
Thanks for squeezing me in. Obviously, very exciting about the security success that you guys are seeing here. Curious if you look at those deals, I know you're going to give us more information around attach rates at year's end, but any sense that you can give us in terms of what this is doing to pricing, especially as you're seeing certain customers maybe take that end-to-end portfolio?
Rob, so yes, as you've mentioned, we will provide more details at the end of the year as we did in 2024. Pricing and subscription model is something that we are looking at, especially now when there are some innovations and new offerings that we will announce at swampUP. There might be new packages for security and new packages for advanced adopters of our security solution. And we also have to think about the fact that JFrog started to bring the software supply chain security not too long ago to the market. So we have to be focused on the adoption. We have to be focused on growing within our portfolio with the number of logos. So the entry point is also important. But stay tuned. There are some announcements that will change some of the subscription package on the security layer as well.
There are no further questions at this time. I will now turn the call back to Shlomi for closing remarks.
Thank you, everyone, for joining the call. We are very, very excited about the momentum. We also appreciate all of your questions and may the frog be with you.
This concludes today's call. Thank you for attending. You may now disconnect.