Opensource support is excellent. The new Cloudsmith website and updated CLI are full featured and easy to use. We use Cloudsmith for package management for all OpenCPN Plugins. It is very reliable and easy to use. Permits Organization setup and use of Teams. Cloudsmith has been a wonderful service for our OpenSource effort. Review collected by and hosted on G2.com.

Since we are using it for OpenCPN plugins, which have similar repositories, it would be helpful to adjust Retainage settings globally, which is just a minor inconvenience. However I have found that the new CLI allows me to clean up repos with scripts. Review collected by and hosted on G2.com.

Cloudsmith gives us one controlled front door for every package our engineers consume. We host our private packages and proxy/cache public upstreams through it, so builds don't break when a public registry has an outage, and we can see and govern exactly which open-source components enter our software. Vulnerability scanning and license policies turn supply-chain security from a manual review exercise into something enforced automatically at the registry. As the person accountable for both engineering and compliance, that combination is rare. Review collected by and hosted on G2.com.

Pricing scales with usage and storage, so it's worth planning retention and cleanup policies early rather than letting old artifacts accumulate. That said, the ROI versus running and securing our own registry infrastructure is clear. Review collected by and hosted on G2.com.

I use Cloudsmith for centralizing the storage, consumption, and distribution of internal and external artifacts at DPG Media. I appreciate that it offers a great balance between pricing and features without over-offering functionality. I really like their customer support because they are very approachable and helpful, just one click away within Slack. The UI is really intuitive, and they support a lot of package managers, which makes it very convenient. The initial setup was very easy thanks to the workshops and guidance from the team at Cloudsmith, making it a smooth sailing experience. Review collected by and hosted on G2.com.

A lot of 'solutions', usually for niche problems, are behind feature flags. So we often have to raise an issue before it gets fixed, but then it does usually get fixed quite quickly, even if there is no feature flag available for it yet. Also, authentication is a little buggy on the website. Review collected by and hosted on G2.com.

Cloudsmith's feature-set and their support are exemplary. They have been very fast to respond to suggestions and improvements we have requested, and are always quick to resolve any issues encountered. The new web-UI is very easy to use, and has helped our team be more efficient. I have very much valued the long-term relationship we have had with them. Review collected by and hosted on G2.com.

We could benefit from some more visibility of the redundancy and backups provided, especially when we place so much trust in storing valuable assets. Review collected by and hosted on G2.com.

Cloudsmith is a cloud native and fully managed solution for artifact management. I don't have to operate anything special on my end, it just works. It provides me with a single source of truth for all of my artifacts with a rich feature set supporting all of the formats I use and more. I love the security scanning and BOM it provides out of the box. Other solutions support this but none of them can scan my build artifacts inside of the final Docker container product; they all require an intermediary package for scanning. This made it simple to update my build processes to simply point to Cloudsmith with no additional setup. The support team is also fantastic and made onboarding a breeze. They took the time and attention to understand our needs, make actionable recommendations, and made us aware of early access and preview features we were very excited to try out such as the Enterprise Policy Management. Lastly, everything is completely configurable with IaC using Terraform, from retention rules to policies we implement. I can't ask for a better tool. We were able to onboard and see value from the feature set within weeks of signing a contract. Review collected by and hosted on G2.com.

One feature we would really like is the ability to get a complete picture of all vulnerabilities for all packages as a single dashboard so we can provide this to our stakeholders as a self-serve option to see high-level risk with the ability to drill down into the details for developers to understand and address. This is the only major gap we've identified. Review collected by and hosted on G2.com.

We adopted Cloudsmith as a modern, cloud‑native replacement for Artifactory to improve our software supply‑chain posture through mandatory authentication, fine‑grained access control, policy enforcement, and strong CI/CD integration. Our teams really value its broad support for package types (npm, NuGet, Docker, PyPI, raw binaries) and its ability to consolidate ingress mirroring, internal artifacts, and external distribution into a single platform, reducing fragmentation and bespoke solutions. The team at Cloudsmith has also been an incredible partner, working very closely with us on our migration as well as new features needed to meet our use cases. Review collected by and hosted on G2.com.

Moving from Artifactory with its file-system based organization of raw repos to Cloudsmith's label based organization can be tricky. Support for security scanning of AI models is not yet publicly available. Review collected by and hosted on G2.com.

I like that Cloudsmith offers excellent customer support, they are very hands-on, easy to get hold of and respond quickly. Good performance for everyone wherever they are located, which is great. Cloudsmith allows us to effectively manage our security posture, including defining policies for handling malicious packages, open source licensing and more. Review collected by and hosted on G2.com.

The UI refresh is nearing completion not complete quite yet, with some features only available in the older UI. It's just a few minor features that we still rely on, like the recycle bin. Review collected by and hosted on G2.com.

I highly appreciate Cloudsmith for its simplicity and comprehensive support for all artifact types, including Docker, PyPI, npm, and even raw files, which eliminates the need to juggle multiple registries and thereby reduces complexity and increases efficiency. The platform's cloud-native, fully managed nature functions as a centralized hub for securing, controlling, and distributing software assets globally. Moreover, Cloudsmith's built-in security features, such as automatic vulnerability scanning, license checks, and policy enforcement, impressively eliminate the need for additional tools, ensuring robust protection against supply-chain security risks. I am also highly satisfied with the universal format support provided by Cloudsmith, accommodating over 30 different formats, simplifying artifact management, and improving visibility by consolidating scattered artifacts into a single, easy-to-access repository. The CDN-backed delivery network augments this by ensuring speedy and reliable access to artifacts on a global scale. Overall, Cloudsmith addresses fragmented artifact management issues by offering an integrated solution that greatly enhances the modern software delivery and DevOps processes. Review collected by and hosted on G2.com.

I find the pricing model of Cloudsmith problematic. The pricing is based on bandwidth and storage, which can become expensive for teams with large artifacts or frequent downloads. Additionally, there’s a lack of personal experience with setup and usage due to the SaaS model, which may imply a non-intuitive onboarding process or lack of clarity in its native integrations. Review collected by and hosted on G2.com.

We use Cloudsmith for several purposes, including as an artifact repository and as a private Helm Chart repository. Integrating Cloudsmith with our pipelines has been very straightforward, and its Helm Chart repository feature allows us to securely and easily provide our charts to customers. We push and pull our built artifacts to Cloudsmith daily, and so far, we have not experienced any issues or downtime. Up until today, I have never had to interact with the customer support, because I didn't need to. Review collected by and hosted on G2.com.

Although the web UI is easy to use, I sometimes get the sense that something isn't quite right. I'm not a web designer, so I can't identify exactly what feels off. Review collected by and hosted on G2.com.

We've been using Cloudsmith to host our private Conan recipes and packages and it's been working great. We compared including JFrog but found Cloudsmith to be the most cost-effective for our needs. It was easy to integrate into our existing workflows and ubiquitous once setup. We had to reach out to support for an issue that arose from a particular use case we had for Cloudsmith and they were prompt to respond and have been keeping us updated through its resolution. Review collected by and hosted on G2.com.

We have been using it for about 8 months now and have not had any issues with Cloudsmith that would make us dislike it. Review collected by and hosted on G2.com.