--- title: Introducing JFrog Platform Federation: One Control Plane... description: JFrog announces Platform Federation, a peer-to-peer control plane that synchronizes projects, access control, security policies, artifacts, and repositories... canonical: https://daily.dev/posts/introducing-jfrog-platform-federation-one-control-plane-for-synchronizing-every-site-in-your-softwa-vzhodu6f1 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Introducing JFrog Platform Federation: One Control Plane for Synchronizing Every Site in Your Software Supply Chain | daily.dev og:description: JFrog announces Platform Federation, a peer-to-peer control plane that synchronizes projects, access control, security policies, artifacts, and repositories... og:url: https://daily.dev/posts/introducing-jfrog-platform-federation-one-control-plane-for-synchronizing-every-site-in-your-softwa-vzhodu6f1 og:image: https://api.daily.dev/og/posts/vzhoDu6f1.png og:image:alt: Introducing JFrog Platform Federation: One Control Plane for Synchronizing Every Site in Your Software Supply Chain og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Introducing JFrog Platform Federation: One Control Plane for Synchronizing Every Site in Your Software Supply Chain **[JFrog](https://daily.dev/sources/jfrog)** · 9 min read · 1 upvotes · 1 comments ## Summary JFrog announces Platform Federation, a peer-to-peer control plane that synchronizes projects, access control, security policies, artifacts, and repositories across all sites in a multi-site JFrog deployment. It builds on existing Federated Repositories and Access Federation capabilities, extending federation to projects, curation (zero-day vulnerability blocking), and automated repository provisioning. The product targets configuration drift, compliance exposure under regulations like NIS2, cross-region egress costs, and disaster recovery scenarios, positioning itself as necessary for AI-agent-driven, always-on software delivery pipelines. JFrog states the federated model will later expand to Xray, AI Catalog, Advanced Security, and AppTrust. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is JFrog Platform Federation and what does it synchronize across sites? JFrog Platform Federation is a peer-to-peer control plane that keeps projects, access control, security policies, artifacts, and repositories synchronized across every connected site in a distributed JFrog deployment. Each site runs as an equal peer rather than in a hub-and-spoke model, so configuration changes made on any site propagate to all others within seconds, and regional outages do not create a single point of failure. _daily.dev surfaces platform engineering releases like this for teams weighing multi-region supply chain tooling._ ### What are the three currently available capabilities under JFrog Platform Federation? The three available capabilities are Projects Federation, which synchronizes multi-tenant workspaces, roles, SDLC gates, and access tokens across sites; Curation Federation, which enforces zero-day vulnerability blocking rules, waivers, and approvals globally within seconds of being set on any peer; and Automated Repository Provisioning, which creates repositories automatically on new sites based on a defined stage-to-site mapping. _teams evaluating supply chain governance tools can track feature rollouts like these on daily.dev._ ### How much can EU cybersecurity fines under NIS2 cost for gaps in vulnerability handling? Fines under the EU's NIS2 cybersecurity directive can reach up to $17 million or 2.5% of global annual turnover for gaps in vulnerability handling. This is cited as a reason why closing security policy rollout windows quickly across regional sites matters, since unpatched sites during a phased rollout create temporary compliance exposure. _developers tracking regulatory pressure on security tooling can follow compliance-related updates on daily.dev._ ## Community discussion Top comments from developers on daily.dev. **@ckphirakbot** · 0 upvotes >  > > ?????? ## Similar posts on daily.dev - [9 New Innovations. One Trust Layer.](https://daily.dev/posts/9-new-innovations-one-trust-layer--orgvczwlu) · JFrog · 0 upvotes · 0 comments - [Scale Your Engineering Organization Without Losing Control](https://daily.dev/posts/scale-your-engineering-organization-without-losing-control-x4bodvof4) · JFrog · 0 upvotes · 0 comments - [Beyond Mirroring: 5 Reasons Your DevOps Strategy Depends on Repository Federation](https://daily.dev/posts/beyond-mirroring-5-reasons-your-devops-strategy-depends-on-repository-federation-okbkiy54f) · JFrog · 0 upvotes · 0 comments - [we need a federation of forges](https://daily.dev/posts/we-need-a-federation-of-forges-dm5nrzrss) · Hacker News · 2 upvotes · 1 comments - [Automaker Secures Supply Chain With Developer-Friendly Platform](https://daily.dev/posts/automaker-secures-supply-chain-with-developer-friendly-platform-w95boithk) · Dark Reading · 0 upvotes · 0 comments --- Tags: [#devops](https://daily.dev/tags/devops), [#platform-engineering](https://daily.dev/tags/platform-engineering), [#jfrog](https://daily.dev/tags/jfrog) [View this post on daily.dev](https://daily.dev/posts/introducing-jfrog-platform-federation-one-control-plane-for-synchronizing-every-site-in-your-softwa-vzhodu6f1) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Introducing JFrog Platform Federation: One Control Plane for Synchronizing Every Site in Your Software Supply Chain","url":"https://daily.dev/posts/introducing-jfrog-platform-federation-one-control-plane-for-synchronizing-every-site-in-your-softwa-vzhodu6f1","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/introducing-jfrog-platform-federation-one-control-plane-for-synchronizing-every-site-in-your-softwa-vzhodu6f1"},"datePublished":"2026-08-24T15:34:16.132Z","dateModified":"2026-09-14T06:31:43.161Z","description":"JFrog announces Platform Federation, a peer-to-peer control plane that synchronizes projects, access control, security policies, artifacts, and repositories...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bda6882275baa89be30030d270899742?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bda6882275baa89be30030d270899742?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"JFrog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"JFrog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/b11bf37102384ac9983be701b2cf7cd5","url":"https://daily.dev/sources/jfrog"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/introducing-jfrog-platform-federation-one-control-plane-for-synchronizing-every-site-in-your-softwa-vzhodu6f1","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"devops,platform-engineering,jfrog","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"JFrog","item":"https://daily.dev/sources/jfrog"},{"@type":"ListItem","position":3,"name":"Introducing JFrog Platform Federation: One Control Plane for Synchronizing Every Site in Your Software Supply Chain"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/introducing-jfrog-platform-federation-one-control-plane-for-synchronizing-every-site-in-your-softwa-vzhodu6f1","comment":[{"@type":"Comment","text":"???","datePublished":"2026-08-25T09:55:18.489Z","url":"https://daily.dev/posts/vzhoDu6f1#c-Qky5k8KTG","author":{"@type":"Person","name":"Chhoeun K.Keaphirunphirakbot","url":"https://daily.dev/ckphirakbot","image":"https://lh3.googleusercontent.com/a/AATXAJyu3svre68RXAs8yXKtzZsd-K-S7yMa4mOqbq1m=s100"}}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/introducing-jfrog-platform-federation-one-control-plane-for-synchronizing-every-site-in-your-softwa-vzhodu6f1#faq","mainEntity":[{"@type":"Question","name":"What is JFrog Platform Federation and what does it synchronize across sites?","acceptedAnswer":{"@type":"Answer","text":"JFrog Platform Federation is a peer-to-peer control plane that keeps projects, access control, security policies, artifacts, and repositories synchronized across every connected site in a distributed JFrog deployment. Each site runs as an equal peer rather than in a hub-and-spoke model, so configuration changes made on any site propagate to all others within seconds, and regional outages do not create a single point of failure. daily.dev surfaces platform engineering releases like this for teams weighing multi-region supply chain tooling."}},{"@type":"Question","name":"What are the three currently available capabilities under JFrog Platform Federation?","acceptedAnswer":{"@type":"Answer","text":"The three available capabilities are Projects Federation, which synchronizes multi-tenant workspaces, roles, SDLC gates, and access tokens across sites; Curation Federation, which enforces zero-day vulnerability blocking rules, waivers, and approvals globally within seconds of being set on any peer; and Automated Repository Provisioning, which creates repositories automatically on new sites based on a defined stage-to-site mapping. teams evaluating supply chain governance tools can track feature rollouts like these on daily.dev."}},{"@type":"Question","name":"How much can EU cybersecurity fines under NIS2 cost for gaps in vulnerability handling?","acceptedAnswer":{"@type":"Answer","text":"Fines under the EU's NIS2 cybersecurity directive can reach up to $17 million or 2.5% of global annual turnover for gaps in vulnerability handling. This is cited as a reason why closing security policy rollout windows quickly across regional sites matters, since unpatched sites during a phased rollout create temporary compliance exposure. developers tracking regulatory pressure on security tooling can follow compliance-related updates on daily.dev."}}]} ```