A fully-managed, enterprise-scale solution to control, secure, and distribute software packages and containers. - cloudsmith.com
· 1 month ago
Buy if you're a scaling platform or security team wanting managed multi-format registries without running Artifactory. Skip if you're small, budget-sensitive, or only need a basic container registry.
Confidence
Medium. Based on ~25 public sources; several review snippets were truncated in the evidence set.
Ratings
Value for money
Ease of use
Feature depth
Support qualityOnly vendor marketing found, no independent evidence
Security posture
Pricing
$0/month
Core
ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Teamsfrom $99–$149/month
Velocity / UltraCustom/enterprise
Best for
→Platform teams shipping at enterprise scale
→Multi-format package and container distribution
→Supply chain security and compliance needs
→Teams avoiding self-hosted Artifactory ops
Not for
×Solo devs or tiny teams — free registries exist
×Anyone just needing a simple Docker registry
×Budget-sensitive teams storing large artifact volumes
Same usage costs $561.50/month per independent guide — model your volume before committing
medium
Entry price listed as both $99 and $149/month — get a real quote first
medium
Fully cloud-native — teams needing on-prem artifact storage must look elsewhere
Pros and cons
Pros
+Fully managed SaaS — no repository server to run or patch
+Packages and containers supported universally in one platform
+Built-in vulnerability scanning and policy management
+Repeatedly recommended on r/devops as a JFrog Artifactory alternative
+Rated 4.5/5 on G2 across 44 reviews
Cons
−Usage costs escalate — independent guide cites $561.50/month example
−Direct competitor JFrog published a critique of its security reporting
−Advertised starting price conflicts across directories ($99 vs $149/month)
−Small public review base (44 G2 reviews) versus entrenched rivals
Sources & method
- 14 sources - No known vulnerabilities found in the sources reviewed; a competitor blog criticizes its vulnerability reporting quality.
official x4review x6security x2news x2
JFrog critique: 'Superficial Application Security', JFrog, a direct competitor, published a post arguing Cloudsmith reports some non-CVE vulnerabilities and its security is superficial. Treat with bias caution — it is competitor content, not an independent audit.
Key stats
Value for money: 3/5
Rating
$0/month
Starting price
14
Sources
Analyzed
Value for money: 3/5. Usage costs outpace self-hosted rivals per independent guide
Ease of use: 4/5. Fully managed; users report smooth year-long use
Feature depth: 4/5. Universal formats plus scanning and policy management
Support quality. Only vendor marketing found, no independent evidence
$99–$149/mo Paid plans from directories disagree; Core tier is free
Yes Free tier Core plan, $0/month for individual developers
$72M Series C Funding Led by TCV and Insight Partners
Pricing
Core
$0/month
For individual developers
Basic registry use
Teams
from $99–$149/month
Team registries
Entry price varies by source — confirm with sales
Velocity / Ultra
Not disclosed
Enterprise scale
Supply chain security features
Security
No known vulnerabilities found in the sources reviewed; a competitor blog criticizes its vulnerability reporting quality.
JFrog critique: 'Superficial Application Security'JFrog, a direct competitor, published a post arguing Cloudsmith reports some non-CVE vulnerabilities and its security is superficial. Treat with bias caution — it is competitor content, not an independent audit.⁹
What users say
G2 users (4.5/5) and r/devops commenters recommend Cloudsmith as a managed JFrog alternative, with 538 companies detected using it.
“Take a look at Cloudsmith. We use ist for one yea”
No known public vulnerabilities found in the sources reviewed; a competitor blog criticizes its vulnerability reporting quality.
JFrog critique: 'Superficial Application Security'. JFrog, a direct competitor, published a post arguing Cloudsmith reports some non-CVE vulnerabilities and its security is superficial. Treat with bias caution — it is competitor content, not an independent audit.9
What to use instead
JFrog Artifactory: Market incumbent with broader enterprise deployment and format coverage. https://jfrog.com
Sonatype Nexus: Popular self-hosted repository manager with long track record. https://www.g2.com
GitLab Package Registry: Built into GitLab CI you may already pay for. https://www.gartner.com
S3 plus your CI: Cheap DIY artifact storage if you don't need registry features. https://www.reddit.com/r/aws/comments/1j5wfye/s3_as_an_artifact_repository_for_cicd/
Comments
One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.
No comments yet.