Cloudsmith is a cloud-native artifact management platform for secure package, container, and AI model distribution. Compare pricing, features, and reviews.
Cloudsmith is a fully managed, cloud-native artifact management platform built to host, secure, and distribute software packages and containers for engineering teams. It supports nearly every major package ecosystem — npm, Docker/OCI, Maven, PyPI, NuGet, Helm, Debian, RPM, Conda, Cargo, Go, Ruby gems, Terraform, and more — from unified, per-organization repositories, so teams can consolidate what would otherwise be several disconnected artifact servers into a single service.
Founded in Belfast in 2016 by Alan Carson and Lee Skillen, Cloudsmith has grown into a venture-backed software supply chain security company, raising a Series C round in April 2026 to expand its focus on securing AI-driven software supply chains alongside its core package management offering.
Cloudsmith repositories are protocol-compatible with native package manager commands, meaning existing npm, pip, docker, and apt workflows point at Cloudsmith without modification. The platform layers in fine-grained access control, single sign-on, audit logs, and policy engines that can block packages failing license or vulnerability checks from being promoted through a pipeline.
On the security side, Cloudsmith provides vulnerability scanning, SBOM generation and ingestion, provenance tracking, and immutable artifact storage — capabilities aimed at helping organizations satisfy SLSA-style supply chain security requirements and enterprise vendor risk reviews.
Cloudsmith uses a usage-based freemium model with a free Core plan suited to open-source projects and small teams, offering a limited allotment of artifact storage and package delivery bandwidth at no cost. Paid plans (reported around $99-$149/month for Team/Pro and roughly $299/month for a higher Ultra tier) scale the included storage and bandwidth allotments, with overage bandwidth billed per gigabyte and custom Enterprise pricing available for large organizations needing SSO, dedicated support, and compliance features.
A key nuance in the pricing model is that uploads are always free and storage is billed at its peak 'high watermark' rather than cumulative volume, so teams are not penalized for republishing or version churn.
Yes, Cloudsmith offers a free Core plan with a limited allotment of artifact storage and package delivery bandwidth, suitable for open-source projects, small teams, and evaluation. Paid plans start around $99-$149/month for larger storage and bandwidth allotments.
Cloudsmith supports npm, Docker/OCI, Maven, PyPI, NuGet, Helm, Debian/APT, RPM/YUM, Conda, Cargo, Go modules, Ruby gems, Terraform modules, Vagrant boxes, and generic/raw files, all through native, protocol-compatible endpoints.
Cloudsmith is a fully managed cloud (SaaS) platform only; it does not offer a self-hosted or on-premises deployment option.
Cloudsmith is priced on a usage basis across two metrics: artifact data storage (measured at peak/high-watermark usage) and package delivery bandwidth. Uploads are always free. Plans range from a free Core tier to paid Team/Pro and Ultra tiers, plus custom Enterprise pricing.
Cloudsmith was founded in Belfast, Northern Ireland, in 2016 by Alan Carson (CEO) and Lee Skillen (CTO).
Cloudsmith is a cloud-native, SaaS-only platform with broad out-of-the-box multi-format support, while Artifactory is a more established platform typically run self-hosted or in hybrid deployments with a larger existing enterprise footprint and plugin ecosystem.