Packagecloud
packagecloud.io
What it is
Packagecloud stores and distributes software packages through an automated service, available in the cloud or on-premises. It supports formats including npm, APT/Debian, Maven, Yum/RPM, RubyGems, and Python packages; Alpine, Helm, and Docker repositories are also listed. Users can manage packages through a graphical interface, command-line tools, or an API, with access control and collaboration features. Listed CI integrations include CircleCI, Travis CI, Jenkins, Buildkite, and GitHub Actions, while build-tool integrations include Maven, Leiningen, Gradle, and SBT. On-premises deployments can run behind a corporate firewall or inside a perimeter network. Packagecloud says its websites and microservices use SSL/TLS encryption, and that it is SOC 2 compliant. Audit and penetration test reports are available to customers on request under a signed NDA. It also says it complies with HIPAA standards and can sign a Business Associate Agreement. The free plan includes 10 GB bandwidth and 2 GB storage. Paid plans start with Starter at $89 a month, and paid plans have 14-day trials. Bandwidth and storage overage charges may apply on paid plans.
Spec sheet
- What it does
- Packagecloud is a hosted service for storing, managing and distributing software packages and artifacts.Read 15 Oct 2026 · packagecloud.io
- Product
- Packagecloud stores and distributes software packages through a secure, automated service.Read 2 Oct 2026 · packagecloud.io
- Deployment
- The About page says Packagecloud is available in the cloud and on-premises, including behind a corporate firewall or inside a perimeter network.Read 2 Oct 2026 · packagecloud.io
- Trial
- The pricing FAQ says paid plans have 14-day trials.Read 2 Oct 2026 · packagecloud.io
- API
- The public REST API is version 1, uses HTTPS, and authenticates most requests with an API token supplied as the basic-auth username.Read 15 Oct 2026 · packagecloud.io
- Integrations
- Listed CI integrations include CircleCI, Travis CI, Jenkins, Buildkite, and GitHub Actions; build tool integrations include Maven, Leiningen, Gradle, and SBT.Read 2 Oct 2026 · packagecloud.io
- Compliance
- The security page says Packagecloud is SOC 2 compliant and undergoes an annual third-party penetration test.Read 15 Oct 2026 · packagecloud.io
- Support
- The site lists support by email at [email protected] and says Enterprise+ customers should contact [email protected].Read 2 Oct 2026 · packagecloud.io
- Founded
- LinkedIn lists the company as founded in 2014.Read 15 Oct 2026 · linkedin.com
- Access and tooling
- The service provides a graphical interface, command line tools, access control, collaboration features, and an API.Read 2 Oct 2026 · packagecloud.io
- Access controls
- The home page says access-control and collaboration features are built in for individuals and teams.Read 15 Oct 2026 · packagecloud.io
- API scope
- The API documentation covers automation for Debian, RPM, RubyGems and Python packages.Read 15 Oct 2026 · packagecloud.io
- Availability claim
- Packagecloud claims 99.99% availability since its 2014 inception.Read 15 Oct 2026 · packagecloud.io
- Build-tool integrations
- Listed build-tool integrations are Maven, Leiningen, Gradle and SBT.Read 15 Oct 2026 · packagecloud.io
- CI integrations
- Listed CI integrations are CircleCI, Travis CI, Jenkins, Buildkite and GitHub Actions.Read 15 Oct 2026 · packagecloud.io
- CLI
- The official package_cloud Ruby gem uploads Node.js, Debian, RPM, RubyGem, Python and Java packages and version 0.3.12 is documented.Read 15 Oct 2026 · blog.packagecloud.io
- CLI licence
- The package_cloud CLI gem is released under the MIT license.Read 15 Oct 2026 · blog.packagecloud.io
- Company headquarters
- LinkedIn lists headquarters in San Francisco, California.Read 15 Oct 2026 · linkedin.com
- Company size
- LinkedIn lists Packagecloud as a privately held software-development company with 2–10 employees.Read 15 Oct 2026 · linkedin.com
- Company status
- The homepage identifies Packagecloud as a Buildkite company.Read 2 Oct 2026 · packagecloud.io
- Documentation depth
- The documentation includes package-format procedures, repository installation, distribution/version tables, CI examples, API reference and troubleshooting guidance.Read 15 Oct 2026 · packagecloud.io
- HIPAA
- Packagecloud says it complies with HIPAA standards for protecting personal health information and can sign a Business Associate Agreement.Read 2 Oct 2026 · packagecloud.io
- Infrastructure security
- Infrastructure runs in AWS data centers and uses firewalls, role-based access control and key-based SSH authentication.Read 15 Oct 2026 · packagecloud.io
- Installation methods
- Repository installation can use generated Bash scripts, a Chef cookbook, a Puppet module, manual instructions or the package_cloud client.Read 15 Oct 2026 · assets-production.packagecloud.io
- Limit: authentication
- A G2 reviewer complained that two-factor authentication was unavailable for their account.Read 15 Oct 2026 · g2.com
- Limit: missing build templates
- Capterra reviewers requested starter templates for compiling RPM and DEB packages.Read 15 Oct 2026 · capterra.com
- Limit: pricing fit
- A Capterra reviewer described the newer pricing tiers as not fitting their needs perfectly.Read 15 Oct 2026 · capterra.com
- Limit: repository refresh
- A G2 reviewer reported that repositories can sometimes take time to refresh.Read 15 Oct 2026 · g2.com
- Limit: retention controls
- A G2 reviewer wanted web-interface package pruning or a retention policy and used the API instead.Read 15 Oct 2026 · g2.com
- Limit: user management
- A G2 reviewer said collaborators must be added individually and that unrestricted usernames make user identification difficult.Read 15 Oct 2026 · g2.com
- More registries
- The homepage also lists Alpine, Helm, and Docker repositories.Read 2 Oct 2026 · packagecloud.io
- News: free-plan privacy change
- On May 10, 2023, Packagecloud announced that free-plan users had to upgrade to retain private repositories.Read 15 Oct 2026 · blog.packagecloud.io
- News: SOC 2
- On January 27, 2023, Packagecloud announced completion of a SOC 2 Type 1 audit.Read 15 Oct 2026 · blog.packagecloud.io
- Overages
- The pricing FAQ says paid plans have bandwidth and storage overage charges and lets account holders set a maximum overage amount before account disablement.Read 2 Oct 2026 · packagecloud.io
- Package formats
- Documentation lists RPM, DEB, Debian source packages, Java packages, Python distributions, RubyGems, Node.js, Alpine packages and generic files as supported.Read 15 Oct 2026 · packagecloud.io
- Package signing
- Users can sign packages with GPG before upload; Packagecloud says it does not modify uploaded data.Read 15 Oct 2026 · packagecloud.io
- Payment security
- Packagecloud says Stripe processing plus end-to-end TLS provides PCI Data Security Standards compliance.Read 15 Oct 2026 · packagecloud.io
- Praise: ease and support
- G2’s review summary says users repeatedly praise ease of use, documentation, CI/CD integration and customer support.Read 15 Oct 2026 · g2.com
- Praise: package coverage
- Capterra reviewers praise simple setup without self-hosting, broad Debian/RPM support, clear documentation and responsive support.Read 15 Oct 2026 · capterra.com
- Praise: reliability
- A G2 enterprise reviewer reported at least ten years of seamless operation without outages, security issues or data loss.Read 15 Oct 2026 · g2.com
- Rating on Capterra
- 5.0 out of 5 from 7 reviews.Read 15 Oct 2026 · capterra.com
- Rating on G2
- 4.7 out of 5 from 30 reviews.Read 15 Oct 2026 · g2.com
- Rating on GetApp
- 5.0 out of 5 from 7 reviews.Read 15 Oct 2026 · getapp.com
- Rating on TrustRadius
- TrustRadius lists Packagecloud as a cloud and on-premise package-management service and shows a $150-per-month starting price, but the opened page does not display an overall star rating or review count.Read 15 Oct 2026 · trustradius.com
- Reliability
- Packagecloud states it has had 99.99% availability since its inception in 2014.Read 2 Oct 2026 · packagecloud.io
- Repository types
- The product provides npm, Debian, Maven, RPM, RubyGem, Python and Helm repository services.Read 15 Oct 2026 · packagecloud.io
- Self-hosting
- The company says Packagecloud is available in the cloud and on-premises, including behind a corporate firewall.Read 15 Oct 2026 · packagecloud.io
- Supported-system caveat
- Documentation warns that repository scripts can fail when an operating-system version is unsupported or automatic detection fails, and allows forcing os and dist values.Read 15 Oct 2026 · packagecloud.io
- Transport security
- The service is HTTPS-only and serves public and private repository metadata and files over HTTPS.Read 15 Oct 2026 · packagecloud.io
- Unified repositories
- A single repository can contain multiple supported package types and packages for multiple Linux distributions.Read 15 Oct 2026 · packagecloud.io
- User interface
- Packagecloud offers a graphical web interface alongside command-line tools.Read 15 Oct 2026 · packagecloud.io
Plans and prices
Strong points and limits
Strong points
- Supports nine package formats
- Offers cloud and on-premises deployment
- Includes an API and command-line tools
- Lists CI and build-tool integrations
- Free plan includes 10 GB bandwidth
Limits
- Paid plans may incur bandwidth overage charges
- Paid plans may incur storage overage charges
- Enterprise+ pricing is a custom offer
Who it suits
Packagecloud suits teams that need to store and distribute software packages across supported formats, whether in the cloud or on-premises. Its API, command-line tools, and CI integrations may fit development workflows that need package access and distribution.
Packagecloud in depth
Read the full write-up
Packagecloud is a service for storing and distributing software packages across multiple formats, with cloud and on-premises deployment options. It is a strong fit for development teams that want package publishing connected to CI workflows or need to run a repository inside their network. Its broad format support is balanced by storage and bandwidth quotas, with overage charges on paid plans.
Overview
Packagecloud combines package storage and distribution with a graphical interface, command-line tools and an API. Fine-grained access control and collaboration features support teams sharing release work, while container artifacts and upstream proxy support extend its role beyond hosting packages for download. It is identified as a Buildkite company.
Packagecloud states that it has maintained 99.99% availability since its 2014 inception. Its websites and microservices use SSL/TLS encryption. The company says it is SOC 2 compliant and will share audit and penetration-test reports with customers on request under a signed NDA. It also says it complies with HIPAA standards for personal health information and can sign a Business Associate Agreement.
Key features
Supported package ecosystems include npm, APT/Debian, Maven, Yum/RPM, RubyGems and Python; Packagecloud also lists Alpine, Helm and Docker repositories. That breadth can consolidate distribution across teams using different formats. Listed CI integrations include CircleCI, Travis CI, Jenkins, Buildkite and GitHub Actions, while Maven, Leiningen, Gradle and SBT connect build workflows. Unlimited CI/CD minutes apply across the listed plans, but they do not remove the separate bandwidth and storage limits.
Cloud and on-premises deployment are both available, including installation behind a corporate firewall or inside a perimeter network. That is valuable for organizations with infrastructure or network-boundary requirements; teams seeking only a hosted repository may not need that flexibility. Fine-grained access control helps manage shared access, but there are no retention rules.
Pricing
Packagecloud uses a freemium model, with paid plans starting at $89/mo and a 14-day trial for paid plans. All listed plans include unlimited CI/CD minutes, so the practical distinctions are bandwidth and storage:
Free: free, with 10 GB bandwidth and 2 GB storage. It is a sensible way to try the service or handle modest package traffic, but those caps constrain larger repositories and distribution needs.
Starter: $89 a month, billed per month, with 20 GB bandwidth and 5 GB storage. This suits smaller teams that have outgrown the free allowance, though the limited storage and delivery quota leave little headroom for heavier use.
Pro: $150 a month, billed per month, with 50 GB bandwidth and 15 GB storage. The larger allowances better fit teams distributing more packages or serving more downloads.
Enterprise: $699 a month, billed per month, with 250 GB bandwidth and 150 GB storage. It is the clearest fit among fixed-price plans for substantial package volumes, at a considerable step up in monthly cost.
Enterprise+: custom pricing, with custom bandwidth and storage and unlimited CI/CD minutes. It is for organizations that need tailored capacity rather than a fixed quota.
Paid plans can incur storage and bandwidth overage charges. Account holders can set a maximum overage amount, after which the account is disabled; that cap offers a way to control exposure, but teams should still estimate usage before choosing a tier.
Platforms
Packagecloud supports API, Linux, macOS, self-hosted, web and Windows. The platform range and on-premises option make it applicable across varied development environments, while actual package-format needs should guide whether its registry breadth is useful to a given team.
Who it's for
Packagecloud is best suited to software teams publishing packages from established CI and build pipelines, especially when they work across multiple package formats or need on-premises deployment. Its free allowance is a low-commitment starting point; teams with sustained distribution needs should compare the paid quotas against expected storage and bandwidth. It is a weaker fit for buyers who need generous delivery on a low fixed price or package retention rules.
Pros and cons
Pros: Broad package-format support and integrations with major CI and build tools help centralize package distribution across workflows.
Pros: Cloud and on-premises deployment accommodate teams with different infrastructure boundaries.
Pros: Every plan includes unlimited CI/CD minutes, and paid plans have a 14-day trial.
Cons: Bandwidth and storage are capped on fixed-price plans, and paid-plan overages can add cost.
Cons: The Free plan’s 10 GB bandwidth and 2 GB storage are restrictive for larger repositories or busy distribution.
Cons: Retention rules are not available.
Alternatives
Consider artifact repository software if you want to compare the wider category. Cloudsmith is another freemium option with a free open-source plan offering 50 GB artifact data and 200 GB package delivery, which may suit eligible open-source projects seeking higher stated free allowances. Sonatype Nexus Repository is worth considering if its free Community Edition’s full ecosystem support, CI/CD integration and external PostgreSQL option better match your requirements.
Inedo ProGet offers a free edition with unlimited feeds for private packages and Docker, making it an alternative to examine if feed count is the priority and limited security and compliance features are acceptable. Buildkite is another freemium option; its free plan is capped at five users, 10 concurrent jobs and 2,000 Linux vCPU minutes per month. Ravenstash has a free plan with 1 GB storage, unlimited data transfer, one artifact repository, 5,000 artifact reads per month and one person, a different balance of storage and delivery limits.
RepoFlow offers a free cloud plan with 10GB storage, 10GB monthly bandwidth, 100 published packages, one workspace and unlimited users. Cachix is an alternative with a Starter plan at custom pricing, 50 GiB storage and unlimited bandwidth. JFrog Artifactory has a Pro plan at $50 a month, with actual monthly price scaling with consumption; consider it if that consumption-based structure is preferable to Packagecloud’s fixed bandwidth and storage tiers.
Verdict
Choose Packagecloud if your team needs multi-format package distribution tied to CI workflows, especially when on-premises deployment matters. Its main advantage is the combination of broad integrations, deployment choice and unlimited CI/CD minutes; its chief drawback is that storage and delivery remain quota-bound, with overages on paid plans. Teams expecting heavy traffic should compare those allowances closely or look elsewhere for a better fit.
Verdict
Packagecloud offers several ways to manage package distribution, with a free tier and on-premises deployment available. Review storage and bandwidth allowances and possible overages when comparing paid plans.
Where Specifiction places it
- Artifact repository software#5 of 648.9