Craftifact
Craftifact: A security-focused repository with SBOM analysis, policy controls, and self-hosting. Ranked #16 of 63 in Artifact Repository Software by our editors (6.1/10); pricing: From €99/mo; best for teams prioritizing SBOM-backed artifact security.
At a glance
- Editor score6.1 / 10
- PricingFrom €99/mo
- Best forTeams prioritizing SBOM-backed artifact security
- Free planNo
- Paid from€99/mo
- Self-hosted deploymentYes
- Facts checked22 Sep 2026
Where it wins
- SBOM generation with dependency, vulnerability, license, and secret findings
- Hosted, proxy, and group repositories across five package formats
- Fine-grained access controls, policy gates, cleanup, backup, and restore
Where it doesn't
- No free plan, with paid plans starting at €99 per month
- Rule-based cleanup is not included in the Starter plan
- Go package support is provided in beta
Our verdict on Craftifact
Craftifact is an operated European artifact repository for software teams that need package storage alongside software supply-chain visibility. It supports hosted, proxy, and group repositories for Maven, npm, Python, OCI/Docker, and Go packages in beta. Teams can upload, download, manage metadata, and delete artifacts through the web interface and API, while self-hosted deployment is available separately through an early-access, request-based offering. Its audience is business customers that want repository infrastructure without operating the repository stack themselves.
Security and governance are central to the product. Craftifact links CycloneDX SBOMs and can generate SBOMs for supported formats, then provides dependency and vulnerability findings from SBOM-backed data. License signals, exposed-secret findings, suppressions, policy gates, cooldown gates, and Fast-track decisions support review workflows. RBAC, groups, robot accounts, and scoped tokens provide access control, while CI/CD and audit-support APIs connect repository activity with delivery and governance processes. OIDC identity providers, SoluForge IdP, S3-compatible storage, and Sonatype Nexus import are listed integrations.
Pricing is monthly and paid-only. Starter costs €99 per month and includes 40 GB of base artifact volume plus hosted, proxy, and group repositories, but not rule-based cleanup. Pro costs €199 per month, raises base volume to 80 GB, and adds rule-based cleanup plus one-hour backups with 30-day retention. Teams costs €399 per month, includes 160 GB of base artifact volume, and adds shared workflows for multiple teams alongside the Pro backup terms. Enterprise uses contact-based pricing for custom procurement and operating requirements. Craftifact suits teams that value SBOM-backed controls and repository governance; teams seeking a free repository option should choose an alternative.
Craftifact pricing
All 4 Craftifact plans and prices →
Craftifact fact sheet
| Free plan | No |
|---|---|
| Paid from | €99/mo |
| Included storage | 40 GB |
| Supported formats | 5 |
| Container artifacts | Yes |
| Upstream proxying | Yes |
| Access control | Role-based |
| Retention rules | Yes |
| Self-hosted deployment | Yes |
| Deployment | Cloud, Self-hosted |
| Platforms | Web |
| Compliance & security | GDPR, 2FA |
| Support | Email, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 2 integrations: S3-compatible storage, Sonatype Nexus |
| Pricing | From €99/mo (source) |
| Website | craftifact.com |
| Facts checked | 22 Sep 2026 |
Craftifact integrations
Craftifact lists 2 integrations on its own site.
- S3-compatible storage
- Sonatype Nexus
Alternatives to Craftifact
- JFrog ArtifactoryA broad artifact platform for enterprises managing packages, containers, releases, and AI/ML assets.9.8
- Sonatype Nexus RepositoryA mature repository platform with broad format support and flexible deployment choices.9.0
- Google Artifact RegistryA Google Cloud-native artifact repository with broad format support and usage-based pricing.8.3
See all Craftifact alternatives →
Used Craftifact? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Craftifact for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Craftifact is listed in our Artifact Repository Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/craftifact/"><img src="https://www.itechguides.com/best/badge/craftifact.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Sep 2026
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.
Last updated · How we research and update