Cloudsmith provides a fully managed, multi‑format artifact repository that consolidates Maven, npm, Docker, PyPI and other package types into a single service. It offers encrypted storage, role‑based access controls, automated vulnerability scanning, and global CDN delivery, with native CI/CD integrations and audit logging for enterprise compliance.
Funding
$23M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Product
Problem
Software development teams often rely on disparate, self‑hosted artifact stores or public registries, leading to inconsistent version control, fragmented access policies, and increased risk of supply‑chain attacks. Managing multiple package formats across environments adds operational overhead and can cause downtime when repositories are unavailable or misconfigured.
Solution
Cloudsmith delivers a fully managed, multi‑format artifact repository that consolidates Maven, npm, Docker, PyPI, and additional package types into a single, secure service. The platform provides encrypted storage, role‑based access controls, and automated vulnerability scanning to protect the software supply chain. Integrated APIs and native CI/CD plugins enable continuous publishing and consumption of packages without maintaining on‑prem infrastructure. Global CDN edge nodes ensure low‑latency delivery of artifacts to distributed development and production environments. Comprehensive audit logs and compliance certifications (SOC 2, ISO 27001) give organizations visibility and assurance for regulatory requirements.
Target Audience
The service is aimed at software engineering, DevOps, and security teams in enterprises and mid‑size organizations that need a centralized, secure solution for managing and distributing software packages across multiple formats and environments.
Features
- Unified repository supporting Maven, npm, Docker, PyPI, RubyGems, NuGet, and more, with automatic format detection
- End‑to‑end encryption (TLS in transit, AES‑256 at rest) and fine‑grained RBAC with SSO/SAML integration
- Real‑time vulnerability scanning and policy enforcement for uploaded packages
- RESTful API, CLI, and native plugins for Jenkins, GitHub Actions, GitLab CI, and Azure Pipelines
- Global CDN with edge caching to accelerate artifact download worldwide
- Immutable artifact versioning and rollback capabilities
- Detailed audit trails, usage analytics, and compliance reporting dashboards
- High‑availability architecture with automated backups and disaster‑recovery failover