JFrog has announced the general availability of advanced security features for its Xray platform in self-hosted subscriptions, allowing organizations to manage and secure their software development pipelines both in-house and in the cloud. These features are designed to address vulnerabilities in the software supply chain, focusing on developers and DevOps infrastructure as primary attack vectors. The platform introduces advanced scanners and contextual analysis to better detect and remediate security issues by examining both source code and binaries, providing a more comprehensive understanding of security vulnerabilities. This approach minimizes false positives and focuses on vulnerabilities that truly matter, offering actionable remediation based on the unique configurations of containers and Infrastructure-as-Code. Additionally, JFrog's security features include secret detection, which identifies exposed credentials, and comprehensive scanning of open-source libraries to identify misconfigurations. The enhancements to JFrog Xray also include proprietary data on CVEs and malicious packages, operational risk policy capabilities, and improved scalability and data-update latency, solidifying its position as a modern DevOps-centric security solution.