--- title: Cloudsmith Reviews meta_title: 'Cloudsmith Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 44 reviews by the users' company size, role or industry to find out how Cloudsmith works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 44 scale: '5' date_modified: '2026-08-08' parent_category: name: Development url: https://www.g2.com/categories/development --- # Cloudsmith Reviews **Vendor:** Cloudsmith **Category:** [Repository Management Software](https://www.g2.com/categories/repository-management) **Average Rating:** 4.5/5.0 **Total Reviews:** 44 ## About Cloudsmith Cloudsmith is the modern artifact management and software supply chain security platform. It gives engineering teams a unified control layer for every package, container, binary, and ML model moving through their software supply chain – across 30+ formats, with built-in policy enforcement and continuous security monitoring. Modern engineering teams assemble software more than they author it and AI agents pull in open source dependencies at a pace that exceeds ad hoc governance. Cloudsmith functions as a private registry that sits between public sources and your builds; It is the first place every artifact lands and where policy enforcement occurs before anything enters your environment. Splitting artifact management and security across disconnected tools causes teams to lose the consistent visibility and control they need to move fast – and with confidence. Cloudsmith replaces that complexity with a unified platform that scales with your organization. Built for platform engineering teams, security leads, and the engineering leaders who support them, Cloudsmith reduces the operational burden of managing artifact infrastructure, enforces governance consistently across every team and format, and gives organizations full traceability across their supply chain. ## Cloudsmith Pros & Cons **What users like:** - Users appreciate the **ease of use** of Cloudsmith, enabling efficient artifact management without the complexity of multiple registries. (2 reviews) - Users appreciate the **seamless integrations** of Cloudsmith, enhancing efficiency and simplifying artifact management across various formats. (2 reviews) - Users value the **reliability** of Cloudsmith, with consistent performance and seamless integration into their workflows. (2 reviews) - Users praise Cloudsmith for its **comprehensive cloud integration** , streamlining artifact management and improving efficiency across multiple formats. (1 reviews) - Users value the **development efficiency** of Cloudsmith, streamlining artifact management and simplifying the software delivery process. (1 reviews) - Efficiency (1 reviews) - Productivity Improvement (1 reviews) - Quality Improvement (1 reviews) - Users value the **reliable repository management** of Cloudsmith, enjoying seamless integration and minimal issues during use. (1 reviews) **What users dislike:** - Users find the **difficult setup** of Cloudsmith frustrating, experiencing issues with onboarding and native integrations. (1 reviews) - Users find Cloudsmith's pricing model **expensive** , especially for teams with high storage and bandwidth needs. (1 reviews) - Users face **integration issues** with Cloudsmith, leading to potential confusion during onboarding and high costs for large teams. (1 reviews) ## Cloudsmith Reviews ### 1. Best of the bunch **Rating:** 3.0/5.0 stars **Reviewed by:** Ryan L. | Lead developer, Small-Business (50 or fewer emp.) **Reviewed Date:** July 10, 2025 **What do you like best about Cloudsmith?** Cloudsmith provides a simple UI to configure multiple internal and external repositories for various projects and repository types. We have some configured for our internal development uses and others for distributing artefacts and container images to customers. We moved to Cloudsmith from Sonatype Nexus repository OSS to gain support and move to a hosted solution. The onboarding was simple, and it was easy to get our CI pipelines integrated with the service. I particularly liked that Cloudsmith can handle the signing of RPMs, which previously was cumbersome and prone to breaking in our automated pipelines. The ability to throttle and limit individual entitlement tokens has also been a key tool for us. **What do you dislike about Cloudsmith?** When we first started using Cloudsmith, on paper it seemed like it ticked a lot of boxes, with security scanning, audit logging and it would allow us to simplify all our disparate repository services into one. As we are a small ISV, we opted for the Pro plan, as $700 per month to host some artefacts seemed like a silly amount of money. We understood the usage-based limits of our plan; however, we quickly realised that many of the features we liked about Cloudsmith also required the next tier plan. Even things as simple as audit logs to identify excessive bandwidth use. Unfortunately, looking at the cost of artefact management solutions, it seems that this pricing is the norm. Whilst we like what Cloudsmith offers, the value for money doesn't quite stack up in the way it is currently priced. **What problems is Cloudsmith solving and how is that benefiting you?** Consolidating multiple disprate repositories. Hosting artifacts and containers for customers and developers. **Official Response from Glenn Weinstein:** > Thanks Ryan for the valuable feedback - we're so glad Cloudsmith has proven to be a useful alternative to Sonatype Nexus. RPM signing and entitlement tokens are two deceptively powerful features and it's a thrill to hear how much value they're providing for your team. ### 2. Although the webui is not great, the overall product is functional **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** December 11, 2023 **What do you like best about Cloudsmith?** We can upload, download and delete packages. I like the way we can easily have different repositories and access them with the same TOKEN. Although, I would've prefered to not include that info in the URL. The webui is really simple. **What do you dislike about Cloudsmith?** Searching for packages should be really easy to do but at the moment, it's painfuly slow. I thought it could be related to peaks but unfortuntelly I was wrong. There are 2 different scripts to install CS repos. One for debian and another for redhat alike distros. That, IMO, is confusing. The detecction phase should be done by this single missing script. **What problems is Cloudsmith solving and how is that benefiting you?** We don't need to host all of our repositories on our own and we can manage them with ease **Official Response from Dan McKinney:** > Thank you very much for the feedback, this is super valuable for us and thanks for taking the time to write it! Hopefully, I can provide some additional information here that may be helpful: 1. An Entitlement Token in the URL is just one of the authentication methods that Cloudsmith supports. You can also use HTTP Basic Auth with a Username/API-Key, and interpolate these credentials from environment variables or a secret store - I've included a link to our docs on the different authentication options for Python package setup, just as an example. 2. We like to think that package discovery/searching is one of the strong points of Cloudsmith, and we don’t typically hear reports of UI slowness so this is something we are quite interested in and shall investigate further. 3. Having a single setup script for Debian or RedHat repositories is a great product suggestion and one that I can certainly pass on to our Product team. Again, thank you for taking the time to provide feedback like this. We are always striving to improve Cloudsmith and it's very important to us that we are building the right things! We would love to hear more from you should you continue to use Cloudsmith and help us to build the world's best package management platform. ## Cloudsmith Discussions - [What is Cloudsmith used for?](https://www.g2.com/discussions/what-is-cloudsmith-used-for) - 1 comment - [View Cloudsmith pricing details and edition comparison](https://www.g2.com/products/cloudsmith/reviews?filters%5Bnps_score%5D%5B%5D=3§ion=pricing&secure%5Bexpires_at%5D=2026-08-10+21%3A29%3A33+-0500&secure%5Bsession_id%5D=552aeb9e-3313-432e-8812-49e4869a0f89&secure%5Btoken%5D=316836fb2117727916e7676f90da02be791a3e37b2537989658ec3e2f407ec37&format=llm_user) ## Cloudsmith Integrations - [Argo CD](https://www.g2.com/products/argo-cd/reviews) - [AWS CodeBuild](https://www.g2.com/products/aws-codebuild/reviews) - [Azure Active Directory Domain Services](https://www.g2.com/products/azure-active-directory-domain-services/reviews) - [Bitbucket](https://www.g2.com/products/bitbucket/reviews) - [Buildkite](https://www.g2.com/products/buildkite/reviews) - [Chainguard](https://www.g2.com/products/chainguard/reviews) - [CircleCI](https://www.g2.com/products/circleci/reviews) - [Codefresh](https://www.g2.com/products/octopus-deploy-codefresh/reviews) - [Datadog](https://www.g2.com/products/datadog/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [Google](https://www.g2.com/products/google-google/reviews) - [Harness](https://www.g2.com/products/harness-giving-harness/reviews) - [Jenkins](https://www.g2.com/products/jenkins/reviews) - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews) - [Microsoft Azure DevOps](https://www.g2.com/products/microsoft-azure-devops/reviews) - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews) - [Octopus Deploy](https://www.g2.com/products/octopus-deploy/reviews) - [Okta](https://www.g2.com/products/okta/reviews) - [OneLogin](https://www.g2.com/products/onelogin/reviews) - [Progress Chef](https://www.g2.com/products/progress-chef/reviews) - [Puppet Enterprise](https://www.g2.com/products/puppet-enterprise/reviews) - [Red Hat Ansible Automation Platform](https://www.g2.com/products/red-hat-ansible-automation-platform/reviews) - [Roadie](https://www.g2.com/products/roadie/reviews) - [Semaphore](https://www.g2.com/products/semaphore/reviews) - [Slack](https://www.g2.com/products/slack/reviews) - [Travis CI](https://www.g2.com/products/travis-ci/reviews) - [Zapier](https://www.g2.com/products/zapier/reviews) ## Cloudsmith Features **Functionality** - Package Management - Integration - Code Analysis - Vulnerability Checks - Static Analysis - Project Management - Repository Management - Issue Management - Workflow Management - Assignment Management - Change Management - Testing/QA Management - Application Management **Management** - Configuration Management - Access Control - Orchestration - Portfolio Management - Workflow Management - Timeline Management - Testing Management - Change Management - Issue Management - Compliance Management - Policy Management - User Management - Application Management - Task Management - Project Management - Release Management - Audit Management **Security** - Tampering - Malicious Code - Verification - Security Risks **Management** - Package Access Control - Package Tracking - Automation - Rollback - Version Control - Task Progress Tracking - Issue Tracking - Activity Tracking - Bug Tracking **Functionality** - Automation - Integrations - Extensibility - Continuous Integration - Third-Party Integrations **Tracking** - Bill of Materials - Audit Trails - Monitoring **Additional Functionality** - Code Review - Access Controls/Permissions - Audit Trail - Rules-Based Workflow - API - Visual Analytics - Two-Factor Authentication - Bug/Issue Capture - Custom Development - Backup and Recovery - Multiple Programming Languages Supported - Security Testing - Authentication - Alerts/Notifications - Collaborative Development - Generative AI - Performance Monitoring - Search/Filter - Content Library - Encryption - Vulnerability Scanning - Wiki - Reporting/Analytics - AI Copilot **Processes** - Pipeline Control - Workflow Visualization - Continuous Deployment - Prioritization - Version Control - Rules-Based Workflow - Approval Workflow - Configurable Workflow **Additional Functionality** - Single Sign On - Search/Filter - Real-Time Reporting - Data Import/Export - Reporting/Analytics - AI Copilot - Commenting/Notes - Data Extraction - SSL Security - Performance Metrics - Status Tracking - Real-Time Monitoring - Troubleshooting Reports - API - Issue Tracking - Projections - Real-Time Data - Event Logs - Collaboration Tools - Generative AI - Role-Based Permissions - Monitoring - Activity Dashboard - Authentication - KPI Monitoring - Activity Tracking - Real-Time Notifications - Dashboard ## Top Cloudsmith Alternatives - [JFrog](https://www.g2.com/products/jfrog-2024-03-28/reviews) - 4.2/5.0 (154 reviews) - [Sonatype Nexus Repository](https://www.g2.com/products/sonatype-nexus-repository/reviews) - 4.5/5.0 (21 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - 4.5/5.0 (884 reviews)