Description
Seal Security is a launch partner in JFrog Zero-Touch Remediation, the remediation layer of JFrog's Self-Healing Software Supply Chain, which JFrog announced at swampUP 2026. When a fix exists for a known vulnerability, Zero-Touch Remediation picks the best available patch from JFrog's ecosystem partners, serves the fixed version to new builds through Artifactory, and attests every action through JFrog AppTrust. It does this without breaking a build, forcing a version upgrade, or disrupting developer workflows.
What Seal brings to Zero-Touch Remediation
Seal provides standalone backported patches that keep the same version number. Each sealed package is the exact version your teams already run, with only the security fix applied. Patches are cryptographically signed and ship before the CVE, and before a fixed version is released. Because nothing else changes, there is no migration, no regression cycle and no code to rewrite.
How Seal works with JFrog Artifactory
- Seal as an Artifactory remote. Add the Seal Artifact Server as a remote repository for each ecosystem you seal, such as npm, Maven, PyPI and Go, and include it in the virtual repository your package managers already use. Developers keep pulling from Artifactory exactly as before.
- Sealed packages in your system of record. Builds pull sealed versions through your existing Artifactory, so every remediated dependency lives alongside the rest of your artifacts, with no change to your artifact management architecture.
- Works with the Seal CLI. If your CI pipeline can only reach the internet through Artifactory, the Seal CLI routes both its platform calls and its sealed-package downloads through JFrog.
Why it matters
The upstream fix for a CVE often ships in a new major version, with breaking changes and weeks of regression testing. For end-of-life libraries there may be no upstream fix at all. With Seal patches flowing through Artifactory, the fix reaches every project that pulls the package, so teams close critical findings across the organization without waiting on an upgrade.
