Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Cloudsmith review

Freemium#8 of 63 in Artifact Repository Software

A cloud-native repository for secure, multi-format package delivery and software supply chains.

7.9/10Editor score
Visit Cloudsmith
Cloudsmith7.9 Visit Cloudsmith

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Cloudsmith is a fully managed, cloud-native platform for storing, securing, controlling, and distributing software artifacts. It is designed for development teams and organizations managing dependencies, build outputs, containers, raw files, and software distribution. Repositories support 34 documented formats, including container and OCI artifacts, with private and public repository options, multi-format repositories, and a global package delivery network. The web and API interfaces fit teams that need repository management alongside automated delivery workflows.

The plan structure covers a free entry point and progressively broader organizational controls. Core costs $0 per month and includes 500 MB of artifact data, 1 GB of package delivery, 30+ formats, private and public repositories, and multi-format repositories. Pro costs $149 per month on monthly billing and raises the allowances to 5 GB of artifact data and 25 GB of package delivery, while adding upstream proxying and caching, a container registry, and retention rules. A 14-day premium-feature trial is available. Ultra adds custom artifact data and delivery, team-based controls, SAML single sign-on, and SCIM. Enterprise adds bespoke allowances, custom domains, custom storage regions, and custom support and contract terms.

Cloudsmith’s strongest fit is for cloud-native teams that want repository functions and supply-chain controls in one managed service. Package signing, Sigstore Cosign support, entitlement tokens, fine-grained repository access, retention rules, vulnerability and license detection, malicious-package detection, audit logs, and client logs address both delivery and governance needs. Integrations include GitHub Actions, Jenkins, Terraform, CircleCI, Azure DevOps, GitLab CI/CD, Bitbucket Pipelines, Docker Hub, Renovate, and VS Code. Teams requiring self-hosting should choose another option, while smaller projects may find Core’s storage and delivery allowances restrictive. Organizations needing SSO, SCIM, custom regions, or tailored commercial terms should evaluate Ultra or Enterprise.

Cloudsmith pros and cons

  • Where it wins
    • Supports 34 package and artifact formats, including OCI containers
    • Adds proxy caching, retention rules, signing, and fine-grained access
    • Includes vulnerability, license, malicious-package detection, and audit logs
  • Where it doesn't
    • Cloud-only deployment; there is no self-hosted option
    • Core limits storage to 500 MB and delivery to 1 GB
    • Ultra and Enterprise require custom pricing and contract terms

Cloudsmith fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update