# Cloudsmith Reviews **Vendor:** Cloudsmith **Category:** [Repository Management Software](https://www.g2.com/categories/repository-management) **Average Rating:** 4.5/5.0 **Total Reviews:** 41 ## About Cloudsmith Cloudsmith is the modern artifact management and software supply chain security platform. It gives engineering teams a unified control layer for every package, container, binary, and ML model moving through their software supply chain – across 30+ formats, with built-in policy enforcement and continuous security monitoring. Modern engineering teams assemble software more than they author it and AI agents pull in open source dependencies at a pace that exceeds ad hoc governance. Cloudsmith functions as a private registry that sits between public sources and your builds; It is the first place every artifact lands and where policy enforcement occurs before anything enters your environment. Splitting artifact management and security across disconnected tools causes teams to lose the consistent visibility and control they need to move fast – and with confidence. Cloudsmith replaces that complexity with a unified platform that scales with your organization. Built for platform engineering teams, security leads, and the engineering leaders who support them, Cloudsmith reduces the operational burden of managing artifact infrastructure, enforces governance consistently across every team and format, and gives organizations full traceability across their supply chain. ## Cloudsmith Pros & Cons **What users like:** - Users value Cloudsmith for its **ease of use** and seamless integration across various artifact types, improving efficiency. (2 reviews) - Users value the **seamless integrations** of Cloudsmith, simplifying processes and enhancing software delivery efficiency. (2 reviews) - Users value the **reliability** of Cloudsmith, noting consistent performance and zero downtime in their daily operations. (2 reviews) - Users appreciate the **cloud integration** of Cloudsmith, streamlining artifact management and enhancing efficiency across multiple formats. (1 reviews) - Users value the **development efficiency** of Cloudsmith, benefiting from its centralized and simplified artifact management capabilities. (1 reviews) - Efficiency (1 reviews) - Productivity Improvement (1 reviews) - Quality Improvement (1 reviews) - Users value the **reliable repository management** of Cloudsmith, enjoying seamless integration and minimal issues during use. (1 reviews) **What users dislike:** - Users find the **difficult setup** of Cloudsmith challenging, impacting their overall experience and usability. (1 reviews) - Users find the **pricing model expensive** , especially for teams dealing with large artifacts and frequent downloads. (1 reviews) - Users face **integration issues** with Cloudsmith, leading to a confusing onboarding process and potential cost concerns. (1 reviews) ## Cloudsmith Reviews ### 1. An Excellent Platform for a Secure Software Supply Chain **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Semiconductors | Enterprise (> 1000 emp.) **Reviewed Date:** March 18, 2026 **What do you like best about Cloudsmith?** We adopted Cloudsmith as a modern, cloud‑native replacement for Artifactory to improve our software supply‑chain posture through mandatory authentication, fine‑grained access control, policy enforcement, and strong CI/CD integration. Our teams really value its broad support for package types (npm, NuGet, Docker, PyPI, raw binaries) and its ability to consolidate ingress mirroring, internal artifacts, and external distribution into a single platform, reducing fragmentation and bespoke solutions. The team at Cloudsmith has also been an incredible partner, working very closely with us on our migration as well as new features needed to meet our use cases. **What do you dislike about Cloudsmith?** Moving from Artifactory with its file-system based organization of raw repos to Cloudsmith's label based organization can be tricky. Support for security scanning of AI models is not yet publicly available. **What problems is Cloudsmith solving and how is that benefiting you?** It’s great to have all our packages in one central service, giving us clear visibility across our software supply chain. We really like the model of having a single repo be able to handle multiple package types/ecosystems as it greatly simplifies things for our developers. **Official Response from Glenn Weinstein:** > We're glad to provide a more straightforward path for securing the software supply chain! Thanks for sharing your experience with Cloudsmith so far, and for confirming how much we put into the relationship AFTER the initial purchase. Multi-format, metadata-based repos is a change from JFrog Artifactory (and Sonatype Nexus), but it really provides a more flexible and powerful structure. ### 2. Excellent Security and Support, Smooth Package Management **Rating:** 4.5/5.0 stars **Reviewed by:** Rob G. | Enterprise (> 1000 emp.) **Reviewed Date:** March 18, 2026 **What do you like best about Cloudsmith?** I like that Cloudsmith offers excellent customer support, they are very hands-on, easy to get hold of and respond quickly. Good performance for everyone wherever they are located, which is great. Cloudsmith allows us to effectively manage our security posture, including defining policies for handling malicious packages, open source licensing and more. **What do you dislike about Cloudsmith?** The UI refresh is nearing completion not complete quite yet, with some features only available in the older UI. It's just a few minor features that we still rely on, like the recycle bin. **What problems is Cloudsmith solving and how is that benefiting you?** Cloudsmith helps us manage over 100,000 packages and images, improving our security by handling supply chain risks and vulnerabilities. It provides insights into package usage for better response to threats, and it supports our global teams with consistent performance. **Official Response from Glenn Weinstein:** > Thanks Rob for the helpful review! Cloudsmith does many things, but improving security posture around the software supply chain - in the ways you mentioned - is quickly emerging as our most critical use case. We're working on retiring the old UI - we're close! Thanks for your patience on that! ### 3. Unified Artifact Management with Strong Security **Rating:** 5.0/5.0 stars **Reviewed by:** Karthik G. | Project engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** November 18, 2025 **What do you like best about Cloudsmith?** I highly appreciate Cloudsmith for its simplicity and comprehensive support for all artifact types, including Docker, PyPI, npm, and even raw files, which eliminates the need to juggle multiple registries and thereby reduces complexity and increases efficiency. The platform's cloud-native, fully managed nature functions as a centralized hub for securing, controlling, and distributing software assets globally. Moreover, Cloudsmith's built-in security features, such as automatic vulnerability scanning, license checks, and policy enforcement, impressively eliminate the need for additional tools, ensuring robust protection against supply-chain security risks. I am also highly satisfied with the universal format support provided by Cloudsmith, accommodating over 30 different formats, simplifying artifact management, and improving visibility by consolidating scattered artifacts into a single, easy-to-access repository. The CDN-backed delivery network augments this by ensuring speedy and reliable access to artifacts on a global scale. Overall, Cloudsmith addresses fragmented artifact management issues by offering an integrated solution that greatly enhances the modern software delivery and DevOps processes. **What do you dislike about Cloudsmith?** I find the pricing model of Cloudsmith problematic. The pricing is based on bandwidth and storage, which can become expensive for teams with large artifacts or frequent downloads. Additionally, there’s a lack of personal experience with setup and usage due to the SaaS model, which may imply a non-intuitive onboarding process or lack of clarity in its native integrations. **What problems is Cloudsmith solving and how is that benefiting you?** Cloudsmith centralizes artifact management, solving fragmentation by supporting 30+ formats and improving security with vulnerability scanning and policy enforcement, all while easing global distribution through a CDN network. **Official Response from Glenn Weinstein:** > Thanks Karthik for the very thoughtful review! Universal format support really differentiates Cloudsmith from most of the team-level artifact management tools out there. I also appreciate the pricing feedback. It's tricky to land on a pricing model that customers perceive as fair (i.e. it's proportional to the value Cloudsmith delivers) and also reasonably easy to meter and understand. I'd love any additional feedback on this (you can reach me at ceo@cloudsmith.com). We're also working hard to provide a world-class onboarding experience! ### 4. The Swiss Army Knife Platform to manage dependencies **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.) **Reviewed Date:** September 26, 2025 **What do you like best about Cloudsmith?** We use Cloudsmith for several purposes, including as an artifact repository and as a private Helm Chart repository. Integrating Cloudsmith with our pipelines has been very straightforward, and its Helm Chart repository feature allows us to securely and easily provide our charts to customers. We push and pull our built artifacts to Cloudsmith daily, and so far, we have not experienced any issues or downtime. Up until today, I have never had to interact with the customer support, because I didn't need to. **What do you dislike about Cloudsmith?** Although the web UI is easy to use, I sometimes get the sense that something isn't quite right. I'm not a web designer, so I can't identify exactly what feels off. **What problems is Cloudsmith solving and how is that benefiting you?** Cloudsmith helps us address two main challenges: sharing specific artifacts with customers after they have been built in our pipeline, and distributing private Helm charts to our clients. Both of these issues are effectively resolved due to the seamless integration between our CI system and Cloudsmith. **Official Response from Glenn Weinstein:** > We're thrilled to hear you're able to rely on Cloudsmith as the backbone of your software supply chain - both internally and to external customers! We've worked hard on the "new" web UI and would love to take any feedback that we can use to make it better :) ### 5. Cost effective and easy to integrate **Rating:** 5.0/5.0 stars **Reviewed by:** Ernesto L. | Principal Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** July 08, 2025 **What do you like best about Cloudsmith?** We've been using Cloudsmith to host our private Conan recipes and packages and it's been working great. We compared including JFrog but found Cloudsmith to be the most cost-effective for our needs. It was easy to integrate into our existing workflows and ubiquitious once setup. We had to reach out to support for an issue that arised from a particular use case we had for Cloudsmith and they were prompt to respond and have been keeping us updated through its resolution. **What do you dislike about Cloudsmith?** We have been using it for about 8 months now and have not had any issues with Cloudsmith that would make us dislike it. **What problems is Cloudsmith solving and how is that benefiting you?** We've been using Cloudsmith to host our private Conan recipes and packages. We use github actions as part of our internal binary deployment and had the need for a cloudbased repository management to store our private recipes and packages. **Official Response from Paul McKeever:** > Hey Ernesto, Thanks so much for taking the time to write a thoughtful review. So nice to hear things your Conan registry is working out well 💪 Support is super important to us here - we never want our users to be blocked. Please keep in touch, and if you have any feedback or suggestions they are always welcome. ### 6. Easy to use artifact storage **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** July 16, 2025 **What do you like best about Cloudsmith?** What I like best about Cloudsmith is its support for a wide range of package formats like Docker, RPM, DEB, and more — it’s incredibly versatile and saves us time managing multiple repositories. I also really like the new web app; it's clean, modern, and intuitive to use, which makes everyday tasks much easier and more efficient. On top of that, having a direct Slack channel with the Cloudsmith developers has been incredibly helpful, their responsiveness and willingness to assist make a big difference. **What do you dislike about Cloudsmith?** For the way I’ve used Cloudsmith so far, I’ve identified a few areas that could be improved: • Intermittent CI/CD install failures – our pipelines sometimes fail when adding repositories; a simple re‑run usually succeeds, but the flakiness costs time. • New web‑app usability – there’s no “select all packages on this page” option, and for DEB / RPM packages the target distribution and architecture aren’t immediately visible (both these were available in the old web-app). • Bulk deletion via API – it would be much handier to delete packages in groups instead of having to specify each one individually. • openSUSE repo re‑installation – reinstalling a repository that already exists fails on openSUSE, whereas the same action works on RHEL and Debian/Ubuntu. • Distinct RPM icons – SLES and RHEL packages use the same logo; separate icons would make them easier to tell apart. • Multi‑platform Docker copies – when copying a multi‑platform Docker image from one repo to another (via API or UI), only the primary image gets copied; the additional ones are left behind. **What problems is Cloudsmith solving and how is that benefiting you?** Cloudsmith helps us solve the challenge of managing multiple types of artifacts in one place. We use it primarily as a repository manager and Docker registry, which allows us to centralize and secure our packages, streamline our CI/CD pipelines, and simplify customer access. **Official Response from Glenn Weinstein:** > That's great feedback on Cloudsmith's web app & format support, as well as our communications via Slack - thanks! The review was posted anonymously, but I wanted to let you know our team is going through the improvement suggestions point-by-point, and we'd love to dig in further (on the pipeline failures, the openSUSE repo reinstalls, and the multi-platform Docker copies). We've also got open feature requests logged for the "select all packages" and "bulk delete via API" ideas. We're all ears and I promise we'll do everything we can to deliver on this list! ### 7. Best of the bunch **Rating:** 3.0/5.0 stars **Reviewed by:** Ryan L. | Lead developer, Small-Business (50 or fewer emp.) **Reviewed Date:** July 10, 2025 **What do you like best about Cloudsmith?** Cloudsmith provides a simple UI to configure multiple internal and external repositories for various projects and repository types. We have some configured for our internal development uses and others for distributing artefacts and container images to customers. We moved to Cloudsmith from Sonatype Nexus repository OSS to gain support and move to a hosted solution. The onboarding was simple, and it was easy to get our CI pipelines integrated with the service. I particularly liked that Cloudsmith can handle the signing of RPMs, which previously was cumbersome and prone to breaking in our automated pipelines. The ability to throttle and limit individual entitlement tokens has also been a key tool for us. **What do you dislike about Cloudsmith?** When we first started using Cloudsmith, on paper it seemed like it ticked a lot of boxes, with security scanning, audit logging and it would allow us to simplify all our disparate repository services into one. As we are a small ISV, we opted for the Pro plan, as $700 per month to host some artefacts seemed like a silly amount of money. We understood the usage-based limits of our plan; however, we quickly realised that many of the features we liked about Cloudsmith also required the next tier plan. Even things as simple as audit logs to identify excessive bandwidth use. Unfortunately, looking at the cost of artefact management solutions, it seems that this pricing is the norm. Whilst we like what Cloudsmith offers, the value for money doesn't quite stack up in the way it is currently priced. **What problems is Cloudsmith solving and how is that benefiting you?** Consolidating multiple disprate repositories. Hosting artifacts and containers for customers and developers. **Official Response from Glenn Weinstein:** > Thanks Ryan for the valuable feedback - we're so glad Cloudsmith has proven to be a useful alternative to Sonatype Nexus. RPM signing and entitlement tokens are two deceptively powerful features and it's a thrill to hear how much value they're providing for your team. ### 8. Ease of use **Rating:** 4.0/5.0 stars **Reviewed by:** Saima H. | Sr. Manager, DX, Enterprise (> 1000 emp.) **Reviewed Date:** July 08, 2025 **What do you like best about Cloudsmith?** We chose it for its strong supply chain security, especially its protection against dependency confusion and package tampering. Our teams appreciate the visibility into package usage, automated policy enforcement, and centralized artifact management, all of which supported internal compliance and developer experience. **What do you dislike about Cloudsmith?** There is some toil and operational overhead with Cloudsmith, including: Manual steps required for initial rollout and configuring coverage across all services and the usage dashboards are not as detailed as we would have liked **What problems is Cloudsmith solving and how is that benefiting you?** It has helped to simplify our internal compliance through license checks/policy enforcement & has improved developer velocity by giving teams a single, managed registry for both internal and third-party packages. This reduces friction in our CI/CD workflows and makes it easier to control what goes into our prod environment. **Official Response from Glenn Weinstein:** > That's great feedback, thanks Saima :) We're investing a lot of time & effort into improving our observability suite generally, so I hope we can eventually provide the kind of detailed usage dashboards you're looking for. We've also built a lot of additional Customer Success resources over the past 12-18 months to assist new customers with initial rollout and configuration, so hopefully future customers can benefit from our collective learnings! Good luck with Cloudsmith and reach out anytime at ceo@cloudsmith.com or on Slack. ### 9. Simple, Reliable Package Management **Rating:** 5.0/5.0 stars **Reviewed by:** Greg T. | Staff Platform Engineer, Computer Software, Mid-Market (51-1000 emp.) **Reviewed Date:** July 08, 2025 **What do you like best about Cloudsmith?** Cloudsmith is easy to set up, reliable, and supports multiple package formats in one place. The UI and CLI are both intuitive, and it fits nicely into our CI/CD pipelines **What do you dislike about Cloudsmith?** Pricing can become a bit expensive at scale, especially with lots of artifacts, but overall the value is still strong. **What problems is Cloudsmith solving and how is that benefiting you?** It replaced the need to host and manage our own Maven repository. Cloudsmith gave us a reliable, secure way to publish and distribute Java packages without the operational hassle. **Official Response from Paul McKeever:** > Hey Greg, Thanks for taking the time to share your feedback with us. Developer experience (and automation) is something we care about deeply, and I'm glad the integration into your pipelines was smooth. Appreciate the point you're making on pricing....on-demand charges are definitely more expensive so we offer custom annual plans for when usage scales. Thanks again for trusting us with your Maven packages, and I appreciate you choosing us as a partner. ### 10. Very powerful artifact manager - near perfect enterprise ready solution **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Retail | Enterprise (> 1000 emp.) **Reviewed Date:** July 01, 2025 **What do you like best about Cloudsmith?** There is a huge amount of details to like, but on top of my list is definitely the extensive API side by side with the Terraform support. This is closely followed by a documentation which is not only easy to use and has up to date content, but also has live action API integration, so no guesswork is needed to puzzle together curl commands as you can even test it directly from the documentation and will have a fully working query easy to copy and paste into your own scripts as required. Combined with an easy to use interface and a very approachable support I would recommend it anytime! **What do you dislike about Cloudsmith?** There is one thing missing for perfection: Custom user roles. If it would be possible to assign users individual rights on specific areas, such as adding upstreams from a curated whitelist, or creating entitlement tokens or even OIDC entries, this would require far less administrative work. **What problems is Cloudsmith solving and how is that benefiting you?** Having a central artifact management solution, does mitigate the risk of third party package providers not being available and adds am important additional layer of defense security wise. **Official Response from Paul McKeever:** > Appreciate the positive feedback. Great to hear rollout has been easy and that you’ve been automating things with the API and Terraform! I’ve noted your feedback on custom user roles, and will be sure to share the need for more granular permissions with the wider team. Thanks again for choosing Cloudsmith. ### 11. Great ease of use, download stats a bit lacking **Rating:** 4.0/5.0 stars **Reviewed by:** Paul M. | CISO, Mid-Market (51-1000 emp.) **Reviewed Date:** July 08, 2025 **What do you like best about Cloudsmith?** Cloudsmith works really well for us as a multi-format repository. We store a mixture of docker images, RPMs, linux binaries in there for distribution to our customers. The customer token provisioning works well enough, and the API is pretty useful **What do you dislike about Cloudsmith?** The download stats for Docker images aren't the best. They're per layer, and it makes it hard to work out what images customers are pulling. This makes our customer success team work harder than they need to. **What problems is Cloudsmith solving and how is that benefiting you?** Secure distribution of software artefacts to end users **Official Response from Paul McKeever:** > Hey Paul, Great to hear Cloudsmith is working out well for your docker images, RPMs and other binaries. Software distribution is a really common use case for Cloudsmith so it's genuinely nice to hear things are working well. I'm sorry to hear your colleagues have been having impacted by the download stats we offer. Tracking consumption of downloads when sometimes we only deliver a single layer is definitely more complex than with other artifact types like RPMs. But...we can (and will) do better here in future. I totally understand your frustration and will make sure this is flagged with our wider product and engineering teams. Thanks again for trusting us with your software artifacts and please keep the feedback coming :) ### 12. Decent partner **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Real Estate | Mid-Market (51-1000 emp.) **Reviewed Date:** January 02, 2024 **What do you like best about Cloudsmith?** We use Cloudsmith for hosting our Dart/Flutter packages. So far the platform is stable and gives us everything we need. Both sales and customer support are very approachable and do a great effort to understand our situation and they come with good solutions for our problems. **What do you dislike about Cloudsmith?** We ran into a small issue where the Dart/pub handling seems to be a bit different compared to pub.dev in case of pushing the same version of a package twice. However support provided a workaround and development is looking into a potential solution as well. **What problems is Cloudsmith solving and how is that benefiting you?** We want to have a central place to host our internal dart packages, there are not a lot of parties which provide that option. **Official Response from Glenn Weinstein:** > Thanks for the review! We've worked hard to provide a fully managed Dart repository to our customers, and it's great to hear your positive feedback on working with our sales & support teams. ### 13. Decent product with slightly behind UI **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** July 08, 2025 **What do you like best about Cloudsmith?** Best for package management and version control for continuous CI/CD. Easily integratabtle into the workflow. **What do you dislike about Cloudsmith?** Somewhat older UI with the limit be harder to understand and debug. Poor customer support. **What problems is Cloudsmith solving and how is that benefiting you?** Cloudsmith has helped us to manage container images to continuously deploy out software and is very easy to integrated into existing systems. **Official Response from Glenn Weinstein:** > Thanks for the feedback! Glad to know Cloudsmith is working well in terms of CI/CD and package management. I'm really sorry to hear about your experience with customer support - we'd love to make that right. We also released a new UI last year at https://app.cloudsmith.com which I think improves a lot of the limitations of our old UI (still available at https://cloudsmith.io) - I'd love to know if you find the new UI to be an improvement. I know this review was left anonymously, but I'd love to hear from you - you can reach me anytime at ceo@cloudsmith.com. Thanks again for being a customer! ### 14. Reliable **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** July 12, 2025 **What do you like best about Cloudsmith?** Doesn't have frequent outages, pulls images as and when necessary **What do you dislike about Cloudsmith?** nothing particular, it's pretty convenient to use **What problems is Cloudsmith solving and how is that benefiting you?** We store binaries for our repositories **Official Response from Glenn Weinstein:** > We'll take it! Thanks for the feedback on Cloudsmith :) Service uptime & reliability are a big part of why we think a cloud-native solution works best for artifact management. ### 15. Cloudsmith is a great alternative for open source projects **Rating:** 4.0/5.0 stars **Reviewed by:** Arnstein R. | Small-Business (50 or fewer emp.) **Reviewed Date:** March 08, 2024 **What do you like best about Cloudsmith?** We use Cloudmith to host our open source builds for Vespa.ai. The service has proven reliable and is easy to use for our current purpose. Functional REST api makes it flexible in the way we can choose to integrate with Cloudsmith. **What do you dislike about Cloudsmith?** I would like to see better machine to machine integration instead of using API tokens. **What problems is Cloudsmith solving and how is that benefiting you?** Everyone that produce software need some kind of distribution mechanism. There are several vendors in this space that offer such products, but Cloudsmith is one of the most complete ones in terms of package format support. For our open source project at Vespa.ai (https://github.com/vespa-engine/vespa) Cloudsmith was the only one that could offer a free tier and support container registry, Maven repository and RPM repository. For our open source project Cloudsmith generously provides 50GB of storage and 200GB of transfer each month. **Official Response from Paul McKeever:** > Thanks for the positive feedback, Arnstein! It's been great to see Vespa.ai get up and running so quickly. We'd love to hear how we could improve machine-to-machine integration outside of API tokens. Feel free to reach out through support any time! ### 16. Excellent platform, excellent documentation and support second to none **Rating:** 5.0/5.0 stars **Reviewed by:** Joss G. | Mid-Market (51-1000 emp.) **Reviewed Date:** April 04, 2023 **What do you like best about Cloudsmith?** For us, it's a developer first platform. That means that you have clear, full documentation and mostly every single edge case you could think of out of the box. For those questions or things that seem a bit unusual, a quick chat with support results in either resolution or a feature request which is properly considered and often makes it into the platform. **What do you dislike about Cloudsmith?** Honestly, so far I have found nothing that I dislike. No matter what the weird business case I need to support, cloudsmith has my back. When we first started using it I assumed that there would be dead ends but I have yet to find them! **What problems is Cloudsmith solving and how is that benefiting you?** We use cloudsmith for all of our internal libraries and images. In the future, we will be shipping our public SDKs with the platform as well, complete with EULA enforcement. For the range of systems we have to support, having a practically turn key solution is a life saver ### 17. Cloudsmith great for managing python packages **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Logistics and Supply Chain | Mid-Market (51-1000 emp.) **Reviewed Date:** November 20, 2023 **What do you like best about Cloudsmith?** Cloudsmith has great CLI capabilities - we have Makefiles and scripts that run Cloudsmith CLI commands, and help us to quickly build, compile, and upload new versions of packages to Cloudsmith. We frequently have to build and update versions, so the CLI makes that easy. **What do you dislike about Cloudsmith?** The two-factor authentication method I have with Duo requires me to find a code, and type it in. It'd be nice if like some other apps, it allowed me to get a push notification and just click approve, instead of having to go and find the code and type in 6 characters. **What problems is Cloudsmith solving and how is that benefiting you?** Cloudsmith solves the problems of have a central package management system for us, where we can quickly build and upload new versions of packages, for multiple languages. We use Cloudsmith for multiple languages at my company - personally I've only use it for Python packages for my team, and it allows me to quickly upload versions of packages and download and use them in other repositories that rely on this package, so that we can modularize code and share it across repos easily. **Official Response from Paul McKeever:** > We appreciate the feedback! Great to hear that you're using our CLI to automate everything. I'll share your feedback on the two-factor authentication method with our product team. If there's ever anything we can do to help please just reach out. ### 18. Great artifact manager **Rating:** 5.0/5.0 stars **Reviewed by:** Richard V. | Small-Business (50 or fewer emp.) **Reviewed Date:** November 16, 2023 **What do you like best about Cloudsmith?** The support team genuinely care about helping our business succeed. The multi format repository concept makes it very very easy to use. Cloudsmith is a genuine cloud native SaaS product, not an on-prem product deployed to cloud like some of its competitors, so the speed it achieves at scale is truly impressive. Implementation was trivial as it supports native tooling in all the formats it supports. Similarly integration is very easy because of their "native first" approach. **What do you dislike about Cloudsmith?** There is nothing unhelpful about Cloudsmith. **What problems is Cloudsmith solving and how is that benefiting you?** We need a place to keep an indelible record of the software we produce. **Official Response from Karen Gardner:** > Thanks so much for sharing your experience and insights Richard! I love to hear the feedback on the support team as your success is priority #1 for us. ### 19. Although the webui is not great, the overall product is functional **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** December 11, 2023 **What do you like best about Cloudsmith?** We can upload, download and delete packages. I like the way we can easily have different repositories and access them with the same TOKEN. Although, I would've prefered to not include that info in the URL. The webui is really simple. **What do you dislike about Cloudsmith?** Searching for packages should be really easy to do but at the moment, it's painfuly slow. I thought it could be related to peaks but unfortuntelly I was wrong. There are 2 different scripts to install CS repos. One for debian and another for redhat alike distros. That, IMO, is confusing. The detecction phase should be done by this single missing script. **What problems is Cloudsmith solving and how is that benefiting you?** We don't need to host all of our repositories on our own and we can manage them with ease **Official Response from Dan McKinney:** > Thank you very much for the feedback, this is super valuable for us and thanks for taking the time to write it! Hopefully, I can provide some additional information here that may be helpful: 1. An Entitlement Token in the URL is just one of the authentication methods that Cloudsmith supports. You can also use HTTP Basic Auth with a Username/API-Key, and interpolate these credentials from environment variables or a secret store - I've included a link to our docs on the different authentication options for Python package setup, just as an example. 2. We like to think that package discovery/searching is one of the strong points of Cloudsmith, and we don’t typically hear reports of UI slowness so this is something we are quite interested in and shall investigate further. 3. Having a single setup script for Debian or RedHat repositories is a great product suggestion and one that I can certainly pass on to our Product team. Again, thank you for taking the time to provide feedback like this. We are always striving to improve Cloudsmith and it's very important to us that we are building the right things! We would love to hear more from you should you continue to use Cloudsmith and help us to build the world's best package management platform. ### 20. The future of Artifactorys **Rating:** 5.0/5.0 stars **Reviewed by:** Sacha W. | Senior DevOps Engineer, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** November 16, 2023 **What do you like best about Cloudsmith?** The ability to listen and the willingness to understand your challenges and how Cloudsmith can alleviate those pain points. **What do you dislike about Cloudsmith?** The only downsides had nothing to do with Cloudsmith its a refreshing example of a next generation artifactory that I wish my clients would use. **What problems is Cloudsmith solving and how is that benefiting you?** Cloudsmith is truly the future of Artifactorys allowing you to store Terraform modules, Container images, dependencies, tool dependencies for example the IBM ACE toolkit which is 1.7GB and this is to just mention a few. There were no limitations around our use case. **Official Response from Paul McKeever:** > Thanks for the feedback, Sacha! I’m so glad to hear you were able to find all the artifact capabilities you need in Cloudsmith. ### 21. A powerful tool for almost every workflow in software development **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** November 17, 2023 **What do you like best about Cloudsmith?** Cloudsmith makes working with private repositories for all kinds of tech stacks easy. It is easy to setup and somewhat fast to get used to. We use it almost daily. **What do you dislike about Cloudsmith?** Sometimes we still get some issues with stuff that was already working. It just stops working for an hour or two and works after a while again. Sometimes, integration into a new project can be a bit fiddely but you get used to all the different methods eventually. I also had to regenerate my api key twice because everything broke. It was an easy fix, though. **What problems is Cloudsmith solving and how is that benefiting you?** Easy to access, integrate cloud storage which is ready to use for common tech stacks like docker or npm. ### 22. It's awesome **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** November 20, 2023 **What do you like best about Cloudsmith?** Cloudsmith is a great option for private npm repos. Works well to have a private npm repo on Cloudsmith associated with an npm scope. It's easy to set up. It's flexible. I like how there's unlimited users, but charged on disk space. That makes it very cost-effective for small teams. Customer support is generally responsive. I've used Cloudsmith in 2 companies now - in my previous company they went above and beyond for a few issues I had. **What do you dislike about Cloudsmith?** We hit a few issues with rate limits in CI, but worked around them. **What problems is Cloudsmith solving and how is that benefiting you?** Private npm hosting **Official Response from Paul McKeever:** > Thanks so much for this feedback. I'm delighted to hear you've had a great experience and that you've taken us with you across teams! We definitely do want to make the benefits of cloud-native artifact management available to all teams, not just in the enterprise. If you run into any issues or ever have any feedback, don't hesitate to reach out. ### 23. Comprehensively solves very current problems **Rating:** 4.0/5.0 stars **Reviewed by:** Victor v. | Mid-Market (51-1000 emp.) **Reviewed Date:** November 28, 2023 **What do you like best about Cloudsmith?** Easy to setup an account and setup a first implementation/integration. Amazing support and features that solve issues many don't even realise are problems. **What do you dislike about Cloudsmith?** Was built for a specific usecase, and while flexible, it may take more effort to work arround issues present (at time of review) in the solution. **What problems is Cloudsmith solving and how is that benefiting you?** Managing dependencies is difficult, security scanning these consistently is difficult. Cloudsmith makes it easy. **Official Response from Paul McKeever:** > Hi Victor, Thanks for taking the time to share your feedback. We appreciate it! As a universal artifact repository, there's a huge range of use cases for Cloudsmith. If you run into any issues that you need to work around, we'd love to hear about it so that we can continue to make our platform a great solution for teams like yours. ### 24. Very responsive and gets the job done for artifact management **Rating:** 5.0/5.0 stars **Reviewed by:** Justin P. | Mid-Market (51-1000 emp.) **Reviewed Date:** April 10, 2023 **What do you like best about Cloudsmith?** The value is perfect for our needs. Other products overcharge for what we use as a basic artifact management product with private settings also. The team has been extremely responsive to any issues we may encounter. *Note that this is a compensated review. It is not shaded by that, though. **What do you dislike about Cloudsmith?** This was a forced migration from Bintray and Cloudsmith met most of the requirements, however it did not meet all. There are a few areas we had to write some custom code to handle, but nothing too onerous, and they provide an extensive API to accomplish that. **What problems is Cloudsmith solving and how is that benefiting you?** We need a product that can host artifacts, and especially handle artifacts that need to be gated so that they are only accessible to paying customers. Cloudsmith meets that requirement. ### 25. Very intuitive, fast and powerful! **Rating:** 5.0/5.0 stars **Reviewed by:** Joel K. | Anwendungsentwickler, Small-Business (50 or fewer emp.) **Reviewed Date:** January 23, 2023 **What do you like best about Cloudsmith?** It is so easy get started with the tool! There is a description for every feature and even for 3rd party tools that just work with cloudsmith. You also have a very clear and structured overview of your repositories and packages. It works great with different package managers. **What do you dislike about Cloudsmith?** We didnt really see something that we disliked. The only thing maybe which I dont 100% like is that the same package with multiple versions uploaded are not collapsable and are displayed as their own package. But I can imagine this is only a matter of changing settings we currently dont know of and it is definitly not a problem which hinders any work efficiency. It would only look a bit better if you have many different packages with different versions. **What problems is Cloudsmith solving and how is that benefiting you?** We manage all of our private and internal packages with cloudsmith. Especially our tools that we made to ease with development are now easier to install on new systems and updates are also alot faster and easier to install! ### 26. Lifesaver after JFrog artifactory was decommissioned **Rating:** 5.0/5.0 stars **Reviewed by:** Sundar V. | Senior Software Architect, Mid-Market (51-1000 emp.) **Reviewed Date:** September 07, 2023 **What do you like best about Cloudsmith?** Great documentation, outstanding support and a product that speaks for itself. **What do you dislike about Cloudsmith?** Nothing that I can think of in particular **What problems is Cloudsmith solving and how is that benefiting you?** After JFrog BinTray was retired, we were scrambling to find a new home for our Java-based artifacts that can be easily uploaded and retrieved. Cloudsmith fit that need perfectly. ### 27. Cloudsmith is what Artifact Management should look like these days **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** February 01, 2023 **What do you like best about Cloudsmith?** A service that just works with a team that provies great service and tooling arund the product. **What do you dislike about Cloudsmith?** The UI was slow to unuable at times, but here we saw improvements as well. **What problems is Cloudsmith solving and how is that benefiting you?** Support for a wide range of artifact types, precise access management and reliable delivery. ### 28. review Gabor **Rating:** 4.5/5.0 stars **Reviewed by:** Gabor T. | Enterprise (> 1000 emp.) **Reviewed Date:** March 09, 2023 **What do you like best about Cloudsmith?** I'ts easy to use and fast. It has better support **What do you dislike about Cloudsmith?** Well, compared to artifactory, folder creatin is a bit harder. **What problems is Cloudsmith solving and how is that benefiting you?** notification system in case of lack of space etc. very useful. ### 29. CloudSmith solves our package management and software distribution needs **Rating:** 4.5/5.0 stars **Reviewed by:** Garret P. | Senior DevOps Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** August 23, 2022 **What do you like best about Cloudsmith?** We spent a fair amount of time evaluating SaaS alternatives to our current open-source, self-hosted solution. Cloudsmith offers a feature-rich solution that should give us added stability. Their pricing is reasonable and will allow us the flexibility to pay as we grow. We have also been pleased with the timeliness of the customer support for this important piece of our software development infrastructure. **What do you dislike about Cloudsmith?** So far, we haven't found much that we dislike. We are interested in the ability to mark a Debian package as compatible with multiple versions of the Debian distribution (two or three vs. "any"). The workaround is to upload an identical package for each distro, so if the storage metering could dedup that, we'd feel more like we're using our true quota. **What problems is Cloudsmith solving and how is that benefiting you?** Using CloudSmith will allow us to spend less time on maintaining our self-hosted solution and more time focusing on our core business. ### 30. Great product **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** April 05, 2023 **What do you like best about Cloudsmith?** Cloudsmith is easy to use, has comprehensive features we need and has excellent support from the Cloudsmith team. **What do you dislike about Cloudsmith?** We have not found anything to dislike - the product does its job well. **What problems is Cloudsmith solving and how is that benefiting you?** We are using Cloudsmith to distribute many kinds of packages both to customer-deployed and SaaS installations of our product. The support for the different package ecosystems and the comprehensive API have saved us a lot of effort. ### 31. Best Package Repository **Rating:** 5.0/5.0 stars **Reviewed by:** Rick G. | Architect, Small-Business (50 or fewer emp.) **Reviewed Date:** August 15, 2021 **What do you like best about Cloudsmith?** Provides package management for all OpenCPN Plugins Reliability, ease of use, and great support. Permits Organization setup and use of Teams. Opensource support. Cloudsmith has been a wonderful service. **What do you dislike about Cloudsmith?** Since we are using it for OpenCPN plugins, which have similar repositories, it would be helpful to adjust Retainage settings globally, which is just a minor inconvenience. **Recommendations to others considering Cloudsmith:** The industry is correct. Opensource Marine Navigation Software **What problems is Cloudsmith solving and how is that benefiting you?** How to build and deploy OpenCPN plugins for multiple OS. OpenCPN is open source Marine Navigation Software, benefitting many Sailors and Cruisers. ### 32. Best private package repository I've found **Rating:** 5.0/5.0 stars **Reviewed by:** Anthony M. | Founder, Small-Business (50 or fewer emp.) **Reviewed Date:** January 24, 2022 **What do you like best about Cloudsmith?** They have an excellent support team with quick response times plus a great feature set including entitlement tokens, auditing of who downloaded what, and an API to automate everything. **What do you dislike about Cloudsmith?** We had some past issues with specific NuGet packages not uploading but resolved these by working with support. **What problems is Cloudsmith solving and how is that benefiting you?** We needed a private repo for NuGet and npm packages to allow paying customers to access our software. With Cloudsmith, we can create unique entitlement tokens for each client, limit which packages or versions they have access to, remove permissions at any time, and set an expiration date to coincide with the Customer's license. We were also able to automate the generation of entitlement tokens with the Cloudsmith API and see logs of which customers are downloading which products. ### 33. Easy and elegant to use with excellent tech support **Rating:** 4.5/5.0 stars **Reviewed by:** Aaron B. | Senior Software Engineer and Tech Lead, Small-Business (50 or fewer emp.) **Reviewed Date:** December 01, 2021 **What do you like best about Cloudsmith?** Cloudsmith provides a quick way for my company to produce and manage binary dependencies for multiple languages and OS distributables. Because of this, our software code base is more modular. Furthermore, we can control which installation artifacts that we want to be public for our customers to be able to download. Cloudsmith does a great job of providing documentation that includes example scripts for multiple languages and scripting environments. And if we run into difficulties, Cloudsmith's online technical support is second to none. They are always responsive and quick to provide help through their chat service. **What do you dislike about Cloudsmith?** Nothing much. Sometimes which version of a snapshot should be used can get a bit confused but that's been a minor issue. **Recommendations to others considering Cloudsmith:** Utilize Cloudsmith to manage dependencies and distribute installation artifacts to your customers. **What problems is Cloudsmith solving and how is that benefiting you?** We use Cloudsmith to manage dependencies across our codebase. Smaller dependencies encourage code reuse. The second use for Cloudsmith is to distribute installation artifacts to our customers. ### 34. I find that CloudSmith is the ideal place to have repositories, both stable and development. **Rating:** 5.0/5.0 stars **Reviewed by:** Neftalí Y. | CEO, Small-Business (50 or fewer emp.) **Reviewed Date:** October 11, 2021 **What do you like best about Cloudsmith?** It seems to me that the options and diversity of repositories. Since it allows to use of npm, composer, maven, docker, rpm, deb. I think it's great **What do you dislike about Cloudsmith?** What I don't like is that private or even personal repositories cannot make it, other than individual accounts. As a developer, I create packages for various companies and have them available there. Still, as a developer, I would also like to offer my packages from my profile. Like I do with Github **Recommendations to others considering Cloudsmith:** I recommend you download the installation binaries and place them directly on your site. **What problems is Cloudsmith solving and how is that benefiting you?** I have my packages and my clients through there. It is easy to upload the packages once they are packaged. The version management is excellent; even in some cases, I package directly from the repository on bitbucket or GitHub, which saves a lot of time. ### 35. Amazing support, great product **Rating:** 5.0/5.0 stars **Reviewed by:** Micah Y. | DevOps Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** November 22, 2021 **What do you like best about Cloudsmith?** Their support is absolutely the most responsive and on-top-of-things of any of the service providers I have dealt with. I once emailed about an issue in the late afternoon and there was a fix deployed to prod before I checked email in the morning! The product also works very well and is pretty intuitive. I've also dealt with their biggest competition; the support and product are both better. (The other might have a few more features, but is more confusing to use.) **What do you dislike about Cloudsmith?** Not much. I was hoping to proxy Node repos to an upstream but it doesn't support that yet (it's apparently on the roadmap). **What problems is Cloudsmith solving and how is that benefiting you?** It provides an easy-to-use set of repositories for Node, Docker, and Rust/Cargo. ### 36. Good experience with cloudsmith CD solution **Rating:** 4.5/5.0 stars **Reviewed by:** Asaf M. | Senior Solution Engineering Manager **Reviewed Date:** April 28, 2022 **What do you like best about Cloudsmith?** Muli repo and fast support. and mainly ease of use. **What do you dislike about Cloudsmith?** So mentioned roadmap items go slow. But ofcourse I understand there is some prioritization involved **What problems is Cloudsmith solving and how is that benefiting you?** Worldwide CD we use many type of repo Docker Helm rpm deb and plain ### 37. Simple and powerful repository management **Rating:** 4.5/5.0 stars **Reviewed by:** Benjamin K. | Expert Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** October 13, 2021 **What do you like best about Cloudsmith?** Support responds almost immediately and is very helpful. Repositories are multi-type which means that we can keep all artifacts of our releases in one place. You can have as many repositories as required without additional costs. **What do you dislike about Cloudsmith?** A Gradle plugin for publishing would be nice. We have built our own now. We also had to build a download section in our customer portal as we cannot expose the Cloudsmith GUI to customers. **What problems is Cloudsmith solving and how is that benefiting you?** We use Cloudsmith to store packages that our customers can download via our portal. It is easy to access the repositories using native tools (yum, docker, etc.). ### 38. Very useful repository management **Rating:** 4.5/5.0 stars **Reviewed by:** Suzanne G. | Marketing Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** July 02, 2021 **What do you like best about Cloudsmith?** Cloudsmith gives us a comprehensive way to manage our software package distribution. It's easy for us and our customers to use and the customer service is responsive when we have questions. **What do you dislike about Cloudsmith?** Their web UI is frustrating. We use entitlement tokens to manage our distributions across multiple repositories, and each token has to be manually copied from one repo to all the others. It's also impossible to figure out which customers have tokens in which repos without looking through them all, and there's no way to search or reorder the list of tokens. **What problems is Cloudsmith solving and how is that benefiting you?** Cloudsmith is a great way for us to manage the distributions of packaged versions of our software to our customers. It's simple and straightforward and they provide good instructions that we can pass on to our users. ### 39. Incredibly good and unique **Rating:** 5.0/5.0 stars **Reviewed by:** Al N. | Senior DevOps Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** August 04, 2021 **What do you like best about Cloudsmith?** Do you need a public or private repository of type X? You get it in few clicks. No need to spawn another virtual machine, learn how to self-host repositories of type X, and maintain complex configurations. And if you're lost, a live human engineer (or two) will support you on short notice (15 min). **What do you dislike about Cloudsmith?** The CLI could be optimized to push batches **What problems is Cloudsmith solving and how is that benefiting you?** Build dependencies hosting in binary form ### 40. Great for customer service and features **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** December 10, 2021 **What do you like best about Cloudsmith?** The best part of CloudSmith is their customer service. Whenever we need assistance, they are there to help. **What do you dislike about Cloudsmith?** The way docker images are labelled with "latest" is sometimes inconsistent. A work-around is to assign the latest label in our build tooling **What problems is Cloudsmith solving and how is that benefiting you?** We are able to distribute software to third parties and host deployment artifacts that we use for our own services. This frees us from having to host our own solution. ### 41. The best packages repository in the cloud. **Rating:** 5.0/5.0 stars **Reviewed by:** Michal N. | Software Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** May 06, 2021 **What do you like best about Cloudsmith?** Support. When I encoutered an issue it was resolved in minutes. **What do you dislike about Cloudsmith?** Repositories page should present them as a list, not as tiles. **What problems is Cloudsmith solving and how is that benefiting you?** I do not have to care about maintaining my own service for storing packages and providing them to customers. ## Cloudsmith Discussions - [What is Cloudsmith used for?](https://www.g2.com/discussions/what-is-cloudsmith-used-for) - 1 comment - [View Cloudsmith pricing details and edition comparison](https://www.g2.com/products/cloudsmith/reviews?section=pricing&secure%5Bexpires_at%5D=2026-05-17+07%3A55%3A45+-0500&secure%5Bsession_id%5D=2d668754-daab-4257-b18f-313addae3fef&secure%5Btoken%5D=ed36657f1900d3d578f1516713fe40b963a3c7c5684b3734e57ed2d13b60082f&format=llm_user) ## Cloudsmith Integrations - [Argo CD](https://www.g2.com/products/argo-cd/reviews) - [AWS CodeBuild](https://www.g2.com/products/aws-codebuild/reviews) - [Azure Active Directory Domain Services](https://www.g2.com/products/azure-active-directory-domain-services/reviews) - [Bitbucket](https://www.g2.com/products/bitbucket/reviews) - [Buildkite](https://www.g2.com/products/buildkite/reviews) - [Chainguard](https://www.g2.com/products/chainguard/reviews) - [CircleCI](https://www.g2.com/products/circleci/reviews) - [Codefresh](https://www.g2.com/products/octopus-deploy-codefresh/reviews) - [Conan.io](https://www.g2.com/products/conan-io/reviews) - [Datadog](https://www.g2.com/products/datadog/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [Google](https://www.g2.com/products/google-google/reviews) - [Harness](https://www.g2.com/products/harness-giving-harness/reviews) - [Jenkins](https://www.g2.com/products/jenkins/reviews) - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews) - [Microsoft Azure DevOps](https://www.g2.com/products/microsoft-azure-devops/reviews) - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews) - [Octopus Deploy](https://www.g2.com/products/octopus-deploy/reviews) - [Okta](https://www.g2.com/products/okta/reviews) - [OneLogin](https://www.g2.com/products/onelogin/reviews) - [Progress Chef](https://www.g2.com/products/progress-chef/reviews) - [Puppet Enterprise](https://www.g2.com/products/puppet-enterprise/reviews) - [Red Hat Ansible Automation Platform](https://www.g2.com/products/red-hat-ansible-automation-platform/reviews) - [Roadie](https://www.g2.com/products/roadie/reviews) - [Semaphore](https://www.g2.com/products/semaphore/reviews) - [Slack](https://www.g2.com/products/slack/reviews) - [Travis CI](https://www.g2.com/products/travis-ci/reviews) - [Zapier](https://www.g2.com/products/zapier/reviews) ## Cloudsmith Features **Functionality** - Package Management - Integration - Code Analysis - Vulnerability Checks **Management** - Configuration Management - Access Control - Orchestration **Security** - Tampering - Malicious Code - Verification - Security Risks **Management** - Package Access Control - Package Tracking - Automation - Rollback **Functionality** - Automation - Integrations - Extensibility **Tracking** - Bill of Materials - Audit Trails - Monitoring **Processes** - Pipeline Control - Workflow Visualization - Continuous Deployment ## Top Cloudsmith Alternatives - [JFrog](https://www.g2.com/products/jfrog-2024-03-28/reviews) - 4.2/5.0 (114 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - 4.5/5.0 (874 reviews) - [GitHub](https://www.g2.com/products/github/reviews) - 4.7/5.0 (2,280 reviews)