Cloudsmith

Spec sheet

What it does

Cloudsmith is a fully managed, cloud-native artifact management platform serving as a single source of truth for software artifacts.Read 28 Sep 2026 · docs.cloudsmith.com

Intended users

Cloudsmith is designed for organizations moving from on-premises registries, securing software supply chains, adopting AI artifacts, improving developer workflows or distributing software globally.Read 28 Sep 2026 · docs.cloudsmith.com

Deployment

cloudRead 22 Sep 2026 · cloudsmith.com

Integrations

Listed integrations include GitHub Actions, GitLab CI/CD, Jenkins, Azure DevOps, CircleCI, Buildkite, Argo CD, Terraform, Slack, Microsoft Teams, Datadog, Aikido, Zapier and VS Code.Read 28 Sep 2026 · docs.cloudsmith.com

Compliance

iso27001, sso saml, two factorRead 22 Sep 2026 · cloudsmith.com

Headquarters

Belfast, United KingdomRead 23 Sep 2026 · cloudsmith.com

Access governance

Cloudsmith provides team-based controls, service accounts, OpenID Connect, SAML SSO, SAML groups, SCIM and API-key policies.Read 28 Sep 2026 · cloudsmith.com

API limits

The documented baseline API limit is 5,400 requests per hour for authenticated Core users and 50,000 requests per five minutes for Pro, Ultra and Enterprise users.Read 28 Sep 2026 · docs.cloudsmith.com

Artifact management

Its container registry is Docker-compatible and OCI-compliant, repositories can hold multiple formats, and public upstream registries can be proxied and cached.Read 28 Sep 2026 · cloudsmith.com

CLI platforms

The standalone Cloudsmith CLI is available for Linux, macOS and Windows, and can also be installed as a Python package, Homebrew package or Docker image.Read 28 Sep 2026 · docs.cloudsmith.com

Company size fit

solo, small, mid market, enterpriseRead 22 Sep 2026 · cloudsmith.com

Developer interfaces

Cloudsmith offers a CLI, REST API, OpenAPI bindings for Go/Java/Python/Ruby, webhooks and a VS Code extension.Read 28 Sep 2026 · cloudsmith.com

Global delivery

Cloudsmith says its package delivery network serves packages from 600 points of presence worldwide with edge caching and regional fault tolerance.Read 28 Sep 2026 · cloudsmith.com

Policy controls

Security features include continuous risk detection, built-in CVE/license/malicious-package policies, OPA/Rego policy as code and configurable cooldown policies.Read 28 Sep 2026 · cloudsmith.com

Security assurance

Cloudsmith reports independent verification against ASVS 4.0 Level 2 and ISO 27001:2022 certification, with encryption in transit and at rest.Read 28 Sep 2026 · docs.cloudsmith.com

Supply-chain checks

Cloudsmith checks packages, containers and ML models for known vulnerabilities, malware and license violations, blocks items that fail policy, and logs what shipped where.Read 28 Sep 2026 · cloudsmith.com

Support channels

email, docsRead 22 Sep 2026 · cloudsmith.com

Support tiers

The pricing table lists no support tier for Core and Pro, Priority support for Ultra, and Enterprise support for Enterprise.Read 28 Sep 2026 · cloudsmith.com

Supported artifacts

Cloudsmith supports 30+ package formats plus raw files of any type, including Docker, Python, Maven, npm, Helm and ML models.Read 28 Sep 2026 · cloudsmith.com

Plans and prices

Every Cloudsmith plan and price →

Where Specifiction places it

• Artifact repository software#3 of 648.9