Use cases
Inventory
Find every tool, owner, seat, and cost.
Savings
Catch waste, overlap, and renewals early.
Access
Onboard and offboard across your stack.
Context
Map how people, tools, spend, and agents connect.
For
Founders
Protect runway by seeing every tool and cost.
Engineering
Control AI usage, access, and provider spend.
Finance
Reconcile software spend and find waste.
Operations
Keep inventory, access, and renewals current.
Resources & company
Resources
Guides and practical software insights.
Manifesto
Why software operations need a new model.
Press
Company news and media resources.
Partners
Build and grow with ELI.
IntegrationsStacksTools
Talk to a humanDiscover my stack
IntegrationsStacksTools
Discover my stackTalk to a human

Company

  • Home
  • Manifesto
  • Talk to us
  • Partners

Help

  • Terms of service
  • Privacy policy
  • Docs

Product

  • Inventory
  • Savings
  • Access
  • Context

For teams

  • Founders
  • Engineering
  • Finance
  • Operations

Explore

  • Integrations
  • Tools
  • Stacks
  • Startup credits
  • Articles

Socials

  • LinkedIn
  • Instagram
  • TikTok
  • YouTube
Enterprise Layer Intelligence
Categories/DevOps & CI/CD/Cloudsmith
Cloudsmith

Cloudsmith

Founded 2016

Store, scan, and distribute packages and container images

Pricing model

Free Tier, Paid

You can use Cloudsmith to manage and secure your software packages, container images, and dependencies. It acts as a single central repository supporting over 30 package formats, including Docker, Maven, npm, and Python. The system scans artifacts on upload and continuously checks for malware, vulnerabilities, and license compliance violations. Teams can establish quarantine policies, control access with fine-grained tokens, proxy upstream registries to prevent outages, and distribute build packages globally through hundreds of points of presence with complete audit logging and tracking.

What Cloudsmith does

Scan software dependencies for security vulnerabilities and malwareQuarantine suspect packages automatically using custom rule setsProxy public registries such as npm, PyPI, and Maven CentralGenerate scoped read-only access tokens for software downloadsExport client access logs and metrics for compliance auditsSign release packages with cryptographic keys to verify originPromote verified packages from staging to production repositoriesUniversal repository supporting over 30 package formats and OCI container imagesContinuous vulnerability, malware, and license compliance scanning on all artifactsPolicy management engine using Open Policy Agent (OPA) Rego rulesProxying and caching of public upstream package registries to prevent outagesGlobal software delivery via edge caching across 600 points of presenceAutomated package quarantine and multi-stage promotion workflowsCryptographic artifact signing and verification

Pricing breakdown

Pricing model: Free tier, Paid

PlanList price
CoreFree
Pro$149 / mo
Free Open-SourceFree

Frequently asked

DockerDockerMavenMavenPythonPythonBuildkiteBuildkiteBitbucketBitbucket

Want a tailored answer?

See whether Cloudsmith fits your stack.

Techbible weighs Cloudsmith against what you already pay for, your team shape, and the work that's actually happening. Free to start.

Side by side

Compare Cloudsmith

Search the catalog or pick a similar tool to compare pricing, features, and fit.

Or pick from similar tools

More in DevOps & CI/CD

All tools →
Scaleway

Scaleway

Build, host, and manage cloud infrastructure, servers, and AI models across European data centers

Split

Split

Manage feature flags and experiment with gradual rollouts across production environments

Vercel

Vercel

Deploy and scale web applications and AI agents

1Panel

1Panel

Manage Linux servers, deploy local AI models, and host websites through a web dashboard

Akuity

Akuity

Deploy and manage Kubernetes applications using automated GitOps workflows and promotions

Alkira, Inc.

Alkira, Inc.

Connect and manage enterprise multi-cloud networks, security services, and remote sites on demand

AllSpice.io

AllSpice.io

Track hardware revisions, review schematics, and automate electrical engineering release workflows

Amazon ECS

Amazon ECS

Run, manage, and scale containerized applications across cloud servers and serverless compute

Cloudsmith, artifact repository, package management, container registry, Docker registry, software supply chain, vulnerability scanning, dependency firewall, npm registry, Maven repository, Python packages, package signing, upstream proxy, license compliance, OCI registry, DevOps