Cloudsmith is a cloud native and fully managed solution for artifact management. I don't have to operate anything special on my end, it just works. It provides me with a single source of truth for all of my artifacts with a rich feature set supporting all of the formats I use and more. I love the security scanning and BOM it provides out of the box. Other solutions support this but none of them can scan my build artifacts inside of the final Docker container product; they all require an intermediary package for scanning. This made it simple to update my build processes to simply point to Cloudsmith with no additional setup. The support team is also fantastic and made onboarding a breeze. They took the time and attention to understand our needs, make actionable recommendations, and made us aware of early access and preview features we were very excited to try out such as the Enterprise Policy Management. Lastly, everything is completely configurable with IaC using Terraform, from retention rules to policies we implement. I can't ask for a better tool. We were able to onboard and see value from the feature set within weeks of signing a contract.

I use Cloudsmith for centralizing the storage, consumption, and distribution of internal and external artifacts at DPG Media. I appreciate that it offers a great balance between pricing and features without over-offering functionality. I really like their customer support because they are very approachable and helpful, just one click away within Slack. The UI is really intuitive, and they support a lot of package managers, which makes it very convenient. The initial setup was very easy thanks to the workshops and guidance from the team at Cloudsmith, making it a smooth sailing experience.

We adopted Cloudsmith as a modern, cloud‑native replacement for Artifactory to improve our software supply‑chain posture through mandatory authentication, fine‑grained access control, policy enforcement, and strong CI/CD integration. Our teams really value its broad support for package types (npm, NuGet, Docker, PyPI, raw binaries) and its ability to consolidate ingress mirroring, internal artifacts, and external distribution into a single platform, reducing fragmentation and bespoke solutions. The team at Cloudsmith has also been an incredible partner, working very closely with us on our migration as well as new features needed to meet our use cases.