4.5/5
G2 rating
44 reviews
Report
Should I Use Cloudsmith?
A fully-managed, enterprise-scale solution to control, secure, and distribute software packages and containers.
Depends
DependsBuy if you're a scaling platform or security team wanting managed multi-format registries without running Artifactory.
Solid managed JFrog alternative for scaling teams; pricey at usage scale — small teams should use GitHub Packages instead.
Confidence: Medium
$99–$149/mo
Paid plans from
directories disagree; Core tier is free
Yes
Free tier
Core plan, $0/month for individual developers
$72M Series C
Funding
Led by TCV and Insight Partners
Value for money
3
Usage costs outpace self-hosted rivals per independent guide
Ease of use
4
Fully managed; users report smooth year-long use
Feature depth
4
Universal formats plus scanning and policy management
Security posture
4
Deep scanning features; third-party verified; rival critique exists
Pros
Cons
Gotchas
Best for
- Platform teams shipping at enterprise scale
- Multi-format package and container distribution
- Supply chain security and compliance needs
- Teams avoiding self-hosted Artifactory ops
Not for
- Solo devs or tiny teams — free registries exist
- Anyone just needing a simple Docker registry
- Budget-sensitive teams storing large artifact volumes
- Guess: orgs requiring on-prem/self-hosted artifact storage
Companies that use it
- Kong13
- Diligent
- BHS Corrugated
- Thrivent
- DataHub
Pricing
Core
$0/month
- For individual developers
- Basic registry use
Teams
from $99–$149/month
- Team registries
- Entry price varies by source — confirm with sales
Velocity / Ultra
Not disclosed
- Enterprise scale
- Supply chain security features
Security
No known vulnerabilities found in the sources reviewed; a competitor blog criticizes its vulnerability reporting quality.
- JFrog critique: 'Superficial Application Security'JFrog, a direct competitor, published a post arguing Cloudsmith reports some non-CVE vulnerabilities and its security is superficial. Treat with bias caution — it is competitor content, not an independent audit.⁹
What users say
G2 users (4.5/5) and r/devops commenters recommend Cloudsmith as a managed JFrog alternative, with 538 companies detected using it.
“Take a look at Cloudsmith. We use ist for one yea”
“I like that Cloudsmith offers excelle...”
“Cloudsmith is the only viable and reliable solutio...”
Alternatives
Compare Cloudsmith with each alternative.
JFrog Artifactory
Market incumbent with broader enterprise deployment and format coverage.
Sonatype Nexus
Popular self-hosted repository manager with long track record.
GitLab Package Registry
Built into GitLab CI you may already pay for.
S3 plus your CI
Cheap DIY artifact storage if you don't need registry features.
Full analysis
Based on ~25 public sources; several review snippets were truncated in the evidence set.
Sources
- Cloudsmith Pricing | Artifact Management Planscloudsmith.comofficial
- Cloudsmith Docs — Common use casesdocs.cloudsmith.comofficial
review
review
- Cloudsmith AWS Marketplace reviewsaws.amazon.comreview
review
review
security
- Cloudsmith Security policy docsdocs.cloudsmith.comsecurity
- Cloudsmith Raises $72M Series Ccloudsmith.comnews
- Cloudsmith raises $23M Series B — TechCrunchtechcrunch.comnews
- Kong Keeps Internet Connected With Cloudsmithcloudsmith.comofficial
- Cloudsmith — Platform engineering tool listingplatformengineering.orgofficial
Rate this review
Anonymous. You can change your vote.
Loading votes…
Ask a follow-up
Ask if a use case fits. Answers stay inside this report and its sources.
Comments
One queue. No replies. Give a display name first. Limit: 7 comments per day.
No comments yet.