Case Study: Leading Financial Services Company achieves secure, air‑gapped open‑source access and 80% reduction in package curation time with JFrog

How this global finance company scaled its international software development while ensuring 24×7 access by adopting the JFrog Software Supply Chain Platform

This leading law enforcement agency needed to accelerate software delivery while maintaining extreme security: its internal development network has no direct Internet access and operates in an Air Gap/DMZ architecture, which made obtaining and vetting open-source packages slow, manual and error-prone (previously ~30 minutes per package). With hundreds of developers and hundreds of releases per month, the agency required a way to leverage OSS safely without compromising compliance or developer productivity.

JFrog Professional Services deployed a multi-instance JFrog platform (Artifactory, Xray, Curation, Advanced Security and Catalog) across the Internet, DMZ and internal zones, using vault transfers and automated pre-DMZ curation and vulnerability scanning. The solution automated package requests and secure transfers, supports 30+ package types, processes 1,000+ OSS packages/month, cut curation and request time by ~80% (to ~3–5 minutes per package), and blocked risky components before they reached the development environment—improving release speed, scalability and security.