Cloudsmith Reviews & Product Details

Cloudsmith is the modern artifact management and software supply chain security platform. It gives engineering teams a unified control layer for every package, container, binary, and ML model moving through their software supply chain – across 30+ formats, with built-in policy enforcement and continuous security monitoring. Modern engineering teams assemble software more than they author it and AI agents pull in open source dependencies at a pace that exceeds ad hoc governance. Cloudsmith functions as a private registry that sits between public sources and your builds; It is the first place every artifact lands and where policy enforcement occurs before anything enters your environment. Splitting artifact management and security across disconnected tools causes teams to lose the consistent visibility and control they need to move fast – and with confidence. Cloudsmith replaces that complexity with a unified platform that scales with your organization. Built for platform engineering teams, security leads, and the engineering leaders who support them, Cloudsmith reduces the operational burden of managing artifact infrastructure, enforces governance consistently across every team and format, and gives organizations full traceability across their supply chain.

Product Website

Seller

Cloudsmith

Discussions

Cloudsmith Community

Languages Supported

English

Overview by

Juliana Kelly

Pricing

Pricing provided by Cloudsmith.

Core

Free

Per Month

View More Pricing Information

Cloudsmith Integrations

(28)

Verified by Cloudsmith

Cloudsmith Media

Cloudsmith Demo - Upstream proxy & caching

Route external dependencies through Cloudsmith and apply the same policies to public packages as your internal ones.

Deploy pre-built templates for common security and compliance use cases including: vulnerability & malware management, license compliance, and blocklists.

Write precise, adaptable governance defined as code (OPA/Rego) to enforce complex organizational logic, including cooldown policies for open source packages.

Track and analyze repository activity including package downloads, bandwidth consumption, and storage usage.

Learn why ConstructConnect migrated from JFrog Cloud to Cloudsmith to eliminate hidden costs, simplify their CI/CD pipelines, and secure their software supply chain.

Learn how BHS Corrugated transformed their developer experience by moving from fragmented, self-hosted GitHub repositories to Cloudsmith: the world’s leading cloud-native artifact management platform.

Discover how DataHub uses Cloudsmith as its cloud-native distribution engine to deliver high-performance software artifacts to a global audience with zero downtime and zero maintenance.

Cloudsmith: the modern artifact management and software supply chain security platform

Official Downloads

(2)

edit

Cloudsmith Artifact Management Report 2026

G2 reviews are authentic and verified.

Here's how.

Paul M.

CISO

Mid-Market (51-1000 emp.)

7/8/2025

"Great ease of use, download stats a bit lacking"

4/5

What do you like best about Cloudsmith?

Cloudsmith works really well for us as a multi-format repository. We store a mixture of docker images, RPMs, linux binaries in there for distribution to our customers. The customer token provisioning works well enough, and the API is pretty useful Review collected by and hosted on G2.com.

What do you dislike about Cloudsmith?

The download stats for Docker images aren't the best. They're per layer, and it makes it hard to work out what images customers are pulling. This makes our customer success team work harder than they need to. Review collected by and hosted on G2.com.

Response from Paul McKeever of Cloudsmith

edit

Hey Paul,

Great to hear Cloudsmith is working out well for your docker images, RPMs and other binaries. Software distribution is a really common use case for Cloudsmith so it's genuinely nice to hear things are working well.

I'm sorry to hear your colleagues have been having impacted by the download stats we offer.

Tracking consumption of downloads when sometimes we only deliver a single layer is definitely more complex than with other artifact types like RPMs.

But...we can (and will) do better here in future. I totally understand your frustration and will make sure this is flagged with our wider product and engineering teams.

Thanks again for trusting us with your software artifacts and please keep the feedback coming :)

Verified User in Real Estate

Mid-Market (51-1000 emp.)

1/2/2024

"Decent partner"

3.5/5

What do you like best about Cloudsmith?

We use Cloudsmith for hosting our Dart/Flutter packages. So far the platform is stable and gives us everything we need. Both sales and customer support are very approachable and do a great effort to understand our situation and they come with good solutions for our problems. Review collected by and hosted on G2.com.

What do you dislike about Cloudsmith?

We ran into a small issue where the Dart/pub handling seems to be a bit different compared to pub.dev in case of pushing the same version of a package twice. However support provided a workaround and development is looking into a potential solution as well. Review collected by and hosted on G2.com.

Response from Glenn Weinstein of Cloudsmith

edit

Thanks for the review! We've worked hard to provide a fully managed Dart repository to our customers, and it's great to hear your positive feedback on working with our sales & support teams.

Verified User in Financial Services

Enterprise (> 1000 emp.)

7/8/2025

"Decent product with slightly behind UI"

3.5/5

What do you like best about Cloudsmith?

Best for package management and version control for continuous CI/CD. Easily integratabtle into the workflow. Review collected by and hosted on G2.com.

What do you dislike about Cloudsmith?

Somewhat older UI with the limit be harder to understand and debug. Poor customer support. Review collected by and hosted on G2.com.

Response from Glenn Weinstein of Cloudsmith

edit

Thanks for the feedback! Glad to know Cloudsmith is working well in terms of CI/CD and package management.

I'm really sorry to hear about your experience with customer support - we'd love to make that right. We also released a new UI last year at https://app.cloudsmith.com which I think improves a lot of the limitations of our old UI (still available at https://cloudsmith.io) - I'd love to know if you find the new UI to be an improvement.

I know this review was left anonymously, but I'd love to hear from you - you can reach me anytime at ceo@cloudsmith.com. Thanks again for being a customer!

Verified User in Computer Software

Small-Business (50 or fewer emp.)

7/12/2025

"Reliable"

4.5/5

What do you like best about Cloudsmith?

Doesn't have frequent outages, pulls images as and when necessary Review collected by and hosted on G2.com.

What do you dislike about Cloudsmith?

nothing particular, it's pretty convenient to use Review collected by and hosted on G2.com.

Response from Glenn Weinstein of Cloudsmith

edit

We'll take it! Thanks for the feedback on Cloudsmith :) Service uptime & reliability are a big part of why we think a cloud-native solution works best for artifact management.

Arnstein R.

Small-Business (50 or fewer emp.)

3/8/2024

"Cloudsmith is a great alternative for open source projects"

4/5

What do you like best about Cloudsmith?

We use Cloudmith to host our open source builds for Vespa.ai. The service has proven reliable and is easy to use for our current purpose. Functional REST api makes it flexible in the way we can choose to integrate with Cloudsmith. Review collected by and hosted on G2.com.

What do you dislike about Cloudsmith?

I would like to see better machine to machine integration instead of using API tokens. Review collected by and hosted on G2.com.

What problems is Cloudsmith solving and how is that benefiting you?

Everyone that produce software need some kind of distribution mechanism. There are several vendors in this space that offer such products, but Cloudsmith is one of the most complete ones in terms of package format support. For our open source project at Vespa.ai (https://github.com/vespa-engine/vespa) Cloudsmith was the only one that could offer a free tier and support container registry, Maven repository and RPM repository. For our open source project Cloudsmith generously provides 50GB of storage and 200GB of transfer each month. Review collected by and hosted on G2.com.

Response from Paul McKeever of Cloudsmith

edit

Thanks for the positive feedback, Arnstein! It's been great to see Vespa.ai get up and running so quickly.

We'd love to hear how we could improve machine-to-machine integration outside of API tokens. Feel free to reach out through support any time!

Joss G.

Mid-Market (51-1000 emp.)

4/4/2023

"Excellent platform, excellent documentation and support second to none"

5/5

What do you like best about Cloudsmith?

For us, it's a developer first platform. That means that you have clear, full documentation and mostly every single edge case you could think of out of the box. For those questions or things that seem a bit unusual, a quick chat with support results in either resolution or a feature request which is properly considered and often makes it into the platform. Review collected by and hosted on G2.com.

What do you dislike about Cloudsmith?

Honestly, so far I have found nothing that I dislike. No matter what the weird business case I need to support, cloudsmith has my back. When we first started using it I assumed that there would be dead ends but I have yet to find them! Review collected by and hosted on G2.com.

Verified User in Logistics and Supply Chain

Mid-Market (51-1000 emp.)

11/20/2023

"Cloudsmith great for managing python packages"

4.5/5

What do you like best about Cloudsmith?

Cloudsmith has great CLI capabilities - we have Makefiles and scripts that run Cloudsmith CLI commands, and help us to quickly build, compile, and upload new versions of packages to Cloudsmith. We frequently have to build and update versions, so the CLI makes that easy. Review collected by and hosted on G2.com.

What do you dislike about Cloudsmith?

The two-factor authentication method I have with Duo requires me to find a code, and type it in.

It'd be nice if like some other apps, it allowed me to get a push notification and just click approve, instead of having to go and find the code and type in 6 characters. Review collected by and hosted on G2.com.

What problems is Cloudsmith solving and how is that benefiting you?

Cloudsmith solves the problems of have a central package management system for us, where we can quickly build and upload new versions of packages, for multiple languages. We use Cloudsmith for multiple languages at my company - personally I've only use it for Python packages for my team, and it allows me to quickly upload versions of packages and download and use them in other repositories that rely on this package, so that we can modularize code and share it across repos easily. Review collected by and hosted on G2.com.

Response from Paul McKeever of Cloudsmith

edit

We appreciate the feedback! Great to hear that you're using our CLI to automate everything.

I'll share your feedback on the two-factor authentication method with our product team.

If there's ever anything we can do to help please just reach out.

Richard V.

Small-Business (50 or fewer emp.)

11/16/2023

"Great artifact manager"

5/5

What do you like best about Cloudsmith?

The support team genuinely care about helping our business succeed.

The multi format repository concept makes it very very easy to use.

Cloudsmith is a genuine cloud native SaaS product, not an on-prem product deployed to cloud like some of its competitors, so the speed it achieves at scale is truly impressive.

Implementation was trivial as it supports native tooling in all the formats it supports.

Similarly integration is very easy because of their "native first" approach. Review collected by and hosted on G2.com.

What do you dislike about Cloudsmith?

There is nothing unhelpful about Cloudsmith. Review collected by and hosted on G2.com.

Response from Karen Gardner of Cloudsmith

edit

Thanks so much for sharing your experience and insights Richard! I love to hear the feedback on the support team as your success is priority #1 for us.

Verified User in Information Technology and Services

Mid-Market (51-1000 emp.)

12/11/2023

"Although the webui is not great, the overall product is functional"

3/5

What do you like best about Cloudsmith?

We can upload, download and delete packages. I like the way we can easily have different repositories and access them with the same TOKEN. Although, I would've prefered to not include that info in the URL. The webui is really simple. Review collected by and hosted on G2.com.

What do you dislike about Cloudsmith?

Searching for packages should be really easy to do but at the moment, it's painfuly slow. I thought it could be related to peaks but unfortuntelly I was wrong.

There are 2 different scripts to install CS repos. One for debian and another for redhat alike distros. That, IMO, is confusing. The detecction phase should be done by this single missing script. Review collected by and hosted on G2.com.

Response from Dan McKinney of Cloudsmith

edit

Thank you very much for the feedback, this is super valuable for us and thanks for taking the time to write it!

Hopefully, I can provide some additional information here that may be helpful:

1. An Entitlement Token in the URL is just one of the authentication methods that Cloudsmith supports. You can also use HTTP Basic Auth with a Username/API-Key, and interpolate these credentials from environment variables or a secret store - I've included a link to our docs on the different authentication options for Python package setup, just as an example.

2. We like to think that package discovery/searching is one of the strong points of Cloudsmith, and we don’t typically hear reports of UI slowness so this is something we are quite interested in and shall investigate further.

3. Having a single setup script for Debian or RedHat repositories is a great product suggestion and one that I can certainly pass on to our Product team.

Again, thank you for taking the time to provide feedback like this. We are always striving to improve Cloudsmith and it's very important to us that we are building the right things!

We would love to hear more from you should you continue to use Cloudsmith and help us to build the world's best package management platform.

See how Cloudsmith improved

Sacha W.

Senior DevOps Engineer

Information Technology and Services

Small-Business (50 or fewer emp.)

11/16/2023

"The future of Artifactorys"

5/5

What do you like best about Cloudsmith?

The ability to listen and the willingness to understand your challenges and how Cloudsmith can alleviate those pain points. Review collected by and hosted on G2.com.

What do you dislike about Cloudsmith?

The only downsides had nothing to do with Cloudsmith its a refreshing example of a next generation artifactory that I wish my clients would use. Review collected by and hosted on G2.com.

Response from Paul McKeever of Cloudsmith

edit

Thanks for the feedback, Sacha! I’m so glad to hear you were able to find all the artifact capabilities you need in Cloudsmith.