Cloudsmith
Control and security for your AI-driven software supply chain
Cloudsmith is a universal, cloud-native, enterprise-grade artifact management solution. It serves as the single source of truth for all software artifacts across 30+ formats.
| Best for | enterprise software teams |
| Website | cloudsmith.com |
Company facts
| Social profiles | LinkedIn, X, Facebook, YouTube, GitHub |
Facilities and features
- Published pricing
- Free trial
- API
- Integrations
- Single sign-on
What stands out
The product scans every package for malware, vulnerabilities, and license risks.
“Every package is scanned on upload and continuously after for malware, malicious packages, known vulnerabilities, and license risk, feeding clean signals into your policy engine.”Cloudsmith, own website
The product auto-scales and serves packages from 600 global points of presence.
“Respond to global demand effortlessly. We auto-scale, and serve packages from 600 points of presence worldwide.”Cloudsmith, own website
Strengths and trade-offs
- The product scans every package for malware, vulnerabilities, and license risks.
- The product auto-scales and serves packages from 600 global points of presence.
Appears in
How Cloudsmith ranks
#1 in Best software composition analysis tools
How the score is made up: Evidence on its own site 20; How complete its published information is 16; Fit to this ranking's criteria 40; Buying information on its own site 20.
“Package insights Extract license, dependency and quality metadata from packages to drive policies.”Cloudsmith, own website
Alternatives to Cloudsmith
 CheckmarxApplication security testing platform with bug detection | #2 in Best software composition analysis tools | 94.0 |
 Mend.ioUnified governance for software and AI security | #3 in Best software composition analysis tools | 94.0 |
 Snyk | #4 in Best software composition analysis tools | 94.0 |
 SocketSocket for supply chain attack prevention | #5 in Best software composition analysis tools | 92.0 |
 Dependency-TrackKnow exactly what is in your software | #6 in Best software composition analysis tools | 90.0 |
 Endor LabsCode without compromise for secure AI development | #7 in Best software composition analysis tools | 90.0 |
Questions about Cloudsmith
Who is Cloudsmith best for?
Cloudsmith is best for enterprise software teams.
Where does Cloudsmith rank?
Cloudsmith is ranked #1 in Best software composition analysis tools (Lister Score 96.0).
What are the best alternatives to Cloudsmith?
The closest alternatives on Lister are Checkmarx (#2 in Best software composition analysis tools), Mend.io (#3 in Best software composition analysis tools) and Snyk (#4 in Best software composition analysis tools).
Is this your company?
Claim Cloudsmith to suggest corrections to its listing (pricing, features, details) or ask about an enhanced profile. We review every claim before anything changes.