The enterprise artifact management market - which has belonged for a while to JFrog and Sonatype - is now 

Cloudsmith was built on the core principle that 

. So does simplicity in design and workflow. Partnerships matter, too. We’ve built a comprehensive platform that controls and secures every artifact as it’s built, scanned, signed, stored, and shipped across the software supply chain. We’ve tailored our product to the specific needs of large organizations, which support hundreds of software development teams, rely on a huge range of languages and formats, operate at massive scale, and need to ensure the provenance and integrity of artifacts entering their supply chain.

Our work is paying off. Today our product helps Fortune 500 and Global 2000 corporations, as well as independent software companies, build and distribute their software more securely and efficiently. Many of these customers migrated to Cloudsmith from the two primary legacy solutions on the market - JFrog’s Artifactory, and Sonatype’s Nexus. These customers came to us because they ran into challenges scaling to ever-increasing DevSecOps demands. They asked for a fully managed platform that just works, so they can focus on building software, not infrastructure, CDNs, or clusters. And they recognized Cloudsmith as a fresh, modern, developer-friendly, API-first experience. Cloudsmith is infrastructure you don’t have to think about.

A successful startup transitions into scale-up mode when it solves customer problems in new and innovative ways, and starts to win real market share. Cloudsmith has arrived here. We 

closed our Series B with TCV and Insight Partners

 earlier this year to fund our growth. We’re seeing incumbents take notice. We’re seeing analyst firms like Gartner and Forrester recognizing Cloudsmith as a new and legitimate candidate for enterprises with complex needs. JFrog CFO Ed Grabscheid confirmed our growing market share when he 

told investors at a Bank of America conference

 on June 5 that they see two main competitors: Sonatype and a “

very, very small startup that is a cloud-native tool… not even worth mentioning the name,

” I’m pretty sure he was talking about Cloudsmith.

We agree that large organizations are looking at three main options - JFrog, Sonatype, and Cloudsmith - for comprehensive artifact management. The artifact offerings from hyperscalers like Azure, AWS, and Google, as well as SDLC leaders like GitHub and GitLab, are limited to a handful of formats and use cases. They’re okay for small teams, but they’re not intended to scale across broad engineering organizations. We hear every day from JFrog and Sonatype customers who are curious if Cloudsmith is a viable alternative to their legacy vendor, and from platform engineering teams who recognize the benefits of a common internal set of universal artifact repositories.

I suppose it’s in the spirit of this head-to-head competition that 

 of our advanced security offerings. They didn’t reach out to us in advance, and appear to have based their findings on their use of a Cloudsmith self-service trial account. We would have been happy to help them make a more well-informed comparison! We think their conclusions are misleading or highly confused, and they got a lot flat-out wrong. Our solutions engineers love working with prospective Cloudsmith customers to showcase the actual capabilities of Cloudsmith, in a way that’s relevant to their company’s processes, scale, and needs.

There is one point in JFrog’s analysis of Cloudsmith that I found telling. They seem to fault our approach to artifact security scanning for relying on third-party industry vulnerability data. This outlook seems to align with JFrog’s general position on partnerships (that they’re bad for business). At that same Bank of America conference, JFrog’s CFO said that when it comes to security scanning, “

” cannot operate without having a proxy to JFrog for access to the binary artifacts, which is true. 

you could cut the oxygen off to these point solutions. We choose not to do that, but most customers see advantage to two things: consolidation, and to secure the most critical asset, which is your binary.

We just have a different philosophy. We don’t think customers want their artifact management vendor to be their only source of vulnerability data and security scanning. In other words, not all JFrog Artifactory customers want to depend solely on JFrog Xray. We know that for sure, because they’ve told us. So we’re working hard to ensure Cloudsmith works well with commercial and open source security tools like ClamAV, Trivy, and Grype, as well as data sources like EPSS and CVSS, and we regularly incorporate their data into the metadata that’s available inside Cloudsmith repositories and exposed to our Enterprise Policy Manager (EPM). In this way, Cloudsmith is the control plane and the data plane for the entire software supply chain, but we don’t think we should be the sole provider of security data. We will not - to quote JFrog - “cut the oxygen off” from our partners in the ecosystem. We feel similarly about CI/CD, runtime scanning, observability, and hardened images; solving software supply chain security works best as a team sport.

If you want to see why so many companies are turning to Cloudsmith, 

 about what a modern, scalable, cloud-native artifact platform could look like for your organization.

Glenn Weinstein

The Artifact Management Market Is Up For Grabs

Exploring AI and the future of the software supply chain

AI assistants will shape the future of the software supply chain, and today, we’re sharing a glimpse of a powerful idea in motion: 

 server that connects large language models (LLMs) like ChatGPT and Claude directly to your software supply chain using the emerging 

Imagine managing policies, surfacing security insights, or orchestrating package workflows with a simple natural language prompt. No dashboards, no scripting, just a simple question or instruction that delivers the right end result. If this sounds interesting, you should 

This isn’t a launched product (yet), but it’s a clear signal of where we think Cloudsmith is headed: toward 

 that make it easier to control your software supply chain.

is a standard way to make information available to LLMs. Similar to an API, MCP provides a documented, standardized way for a client to integrate services from external sources.

MCP enables AI assistants to query and interact with software supply chain data, so it creates a foundation for smarter workflows and more accessible control over artifact management.

In essence, adding MCP capabilities to Cloudsmith offers up an entirely new interface to your software supply chain, with AI agents and LLMs working together to achieve your goals. We're exited to see MCP becoming a flexible new point of integration between our customers' third-party services and Cloudsmith.

MCP server demo

Our MCP prototype leverages Cloudsmith’s API-first architecture to provide programmatic access to developers through their AI assistant. Through standardized MCP requests, you can ask questions about your software supply chain or take safe, controlled actions - like managing policies or promoting packages - directly within Cloudsmith. This opens up conversational workflows with the Cloudsmith platform.

For example, you might ask your AI assistant to identify what package is trending up in usage month over month or see all of the versions of a particular package in use across your workspace. In the future, your AI assistant will be able to review your organization’s compliance and security requirements and recommend or create a set of policies in Cloudsmith’s Enterprise Policy Manager based on that input.

Building this prototype was a good reminder of a few fundamentals. First, an API-first foundation makes it easier to experiment, so it’s good that Cloudsmith is built truly API-first. Second, the data running through platforms like Cloudsmith can offer valuable insights when it’s made accessible to clients in lots of different ways. We’re giving developers and AI assistants simpler ways to ask questions, take actions, and get things done.

There’s still plenty to figure out, but MCP is already making artifact management and software supply chain management more intuitive and straightforward, especially at enterprise scale.

 for select customers and partners. If you're exploring the intersection of DevOps, AI, and supply chain security, we’d love to work with you. 

Alison Sickelka

VP of Product

Prototyping an MCP Server

cloudsmith_series_b_V6

Today we announced Cloudsmith is officially a Series B company. This $23M fundraising round was led by 

, as well as most of our existing investors. What a vote of confidence in our team, our vision, and our market!

 in 2023 for two reasons: (1) artifact management and software supply chain security are mission-critical to enterprises, and (2) there’s an opportunity for serious disruption of JFrog and Sonatype, the two legacy players.

We now have a pile of evidence that proves this thesis. Over the past year, we’ve closed over 100% of our total pipeline at the start of each quarter. The demand is there. The average deal size is up 5x. We now boast an impressive roster of Fortune 500 and Global 2000 companies that have made the switch - on behalf of their hundreds of software teams and thousands of developers - to Cloudsmith’s cloud-native, massive-scale platform.

That kind of growth attracts investor attention. Software is the lifeblood of every company in every industry. Writing better, more secure software, and deploying it to production faster, is a massive competitive advantage. Having a bulletproof artifact management platform to power your software supply chain delivers that advantage. I’m grateful to our partners at TCV and Insight for believing in Cloudsmith as the company to provide that platform, and welcome 

Fundraising is an exciting, emotional roller coaster. It’s easy to get distracted. But we have serious work to do. It’s on us - the team here at Cloudsmith - to live up to our promises to our customers and the market. To deliver even deeper support for all popular formats across languages, operating system libraries, and containers. To provide a bridge between the CISO’s vision for security, and the VP Engineering’s need for developer efficiency. To scale up the Cloudsmith platform so we continue to be the fastest and most reliable solution on the market. To address a wider variety of deployment use cases. To make it easier to verify the provenance of artifacts that make it into your software supply chain.

 that we’d expand our customer success organization to deliver world-class onboarding services; we’d invest in engineering and innovation; and we’d expand our global footprint. We’ve done all of that and more. We’ll keep investing in our customers’ success. We want software developers to have a delightful experience selecting open-source packages. We want platform engineering teams to rely on Cloudsmith as a trusted partner in building software. We want cybersecurity professionals to lean on Cloudsmith as their key tool for implementing software usage policies.

Thank you to our investors, Cloudsmithers, and, most importantly, our customers for powering the Cloudsmith journey. Onward!

What Cloudsmith’s Series B Means for Our Customers

After a focused period of design and development, the new Cloudsmith web app is now available to all customers at 

. The new web app replaces the existing cloudsmith.io, which will be fully decommissioned in 2025.

The new web app is designed to give you a clearer picture of the software flowing into and out of your business:

When you sign in, you'll be presented with crucial information about the health of your Cloudsmith workspace

The new compliance dashboard shows you vulnerabilities and policy violations across your workspace in a unified view

We now aggregate and visualise usage information; the data you store and deliver via Cloudsmith, in a much clearer way

We've made dozens of improvements, small and large, to streamline the day to day administration of your Cloudsmith workspace.

The new web app is backed by significant improvements to our 

. We'll detail these upgrades in a separate post; we've added dozens of new endpoints, making it possible to interact with Cloudsmith programmatically like never before. Automate Everything is a core value of the 

, and we're excited to see what our customers build around our enhanced API.

The new web app is not yet a like-for-like replacement for cloudsmith.io. There are a number of known gaps in the new web app, including:

Discrepancies between usage reporting across the old and new web apps; especially for customers who make heavy use of Docker containers

Signing up or in to the new web app using GitHub or other social logins is not yet available

Client logs/download logs are not visible inside the app

Software licences used across your workspace are not yet being aggregated and visualised

Users can’t upload an avatar, or set an avatar/logo for a workspace

Selecting multiple packages and carrying out bulk actions is not available yet

Various styling and user experience improvements

We are working to fill these gaps while addressing feedback submitted during early access.

If you are not quite ready to stop using Cloudsmith.io, that's no problem. Both the new and legacy web applications will work in parallel for some time to come. We'll give you and your teams plenty of time to make the switch:

w/c December 2nd 2024: General availability of app.cloudsmith.com and notification to our customers

w/c December 2nd 2024: New customers will sign up and onboard through app.cloudsmith.com

w/c December 9th 2024: New features no longer being added to cloudsmith.io. Security and critical bug fixes will continue until the legacy web app reaches end of life

w/c February 17th 2025: Customers using our public repositories will be asked to link to the new web app. Public repositories being served by the legacy app will continue to work until Cloudsmith.io is switched off in June 2025. Package download endpoints will remain unchanged

w/c May 26th 2025: Brown out of Cloudsmith.io and final preparations ahead of switch off

w/c June 23rd 2025: End of life for Cloudsmith.io. The app will become inaccessible. We will redirect requests to cloudsmith.io to app.cloudsmith.com where appropriate

You can reference this blog article in communication to your Cloudsmith users. We’ve also prepared a short 

 slide deck that summarises the transition to the new app.

We're here to help our customers through the transition to app.cloudsmith.com. 

 with your questions and feedback. We will publish frequently asked questions about the transition to the new web app here on the Cloudsmith blog.

Paul May

Senior Director, Product & Customer Experience

Launching the new Cloudsmith Web App

This week, we announced that Cloudsmith has taken an impressive $11M in additional funding, hot on the heels of our $15M Series A two years ago. That's not just serious cash for a startup; it's a game-changer! The natural questions are: why did we take it, and what's our big-picture plan?

Here's the why: Cloudsmith isn't just a proven, enterprise-class artifact management platform; we're a market disruptor. We've consistently outperformed and replaced legacy products like JFrog's Artifactory and Sonatype's Nexus, becoming the go-to choice for large organizations with hundreds of developers. We're not just playing in the big leagues; we're setting the pace.

I've seen this movie before. A SaaS upstart challenges a market burdened by outdated, on-premise software. And SaaS inevitably wins out. It's not a matter of if but when. Companies don't switch off systems like JFrog on a whim, but when they realize it's time to refresh, they will look for something authentic, fresh, and modern. That's Cloudsmith.

We're driven by a sense of urgency to ensure Cloudsmith not just competes but dominates these market takeovers. This means offering a comprehensive, unmatched feature set and amplifying our presence with bold sales and marketing. We're not just waiting to be noticed; we're making sure we're the obvious choice, especially for customers upgrading from JFrog or Sonatype.

And here's the plan: we did a leadership exercise to craft a strategy to turbocharge our growth. It's about scaling up significantly in a few critical areas.

A powerhouse engineering team to enhance package format support, innovate, and develop next-gen products and features.

An aggressive marketing campaign to tell developers, DevOps teams, and CISOs why we're the superior choice over JFrog and Sonatype. We're not just part of the conversation; we're leading it.

An expanded customer success organization with tools for seamless migration and integration, reinforcing our commitment to our users and helping them to make the change.

We further cement our global footprint by expanding our tools, teams, and technologies in North America, Europe, and Asia.

Here at Cloudsmith, we've built something extraordinary. Our calling is to simplify the lives of software developers. We're passionate about making our customers' work and lives easier, more productive, and, frankly, more enjoyable with our platform. We're proud of our product; we're revolutionizing software artifact management and distribution.

We're immensely grateful for our investors' faith in us, especially in a challenging VC funding environment. Like our customers, they don't just believe in Cloudsmith; they're betting on our vision to redefine the industry. For everyone who's reading, I invite you to join us on this journey; share your ideas at 

You Took HOW Much Money?!?

 named me publicly as their new CEO. I’m joining 

, the co-founders of Cloudsmith, in building the world’s most powerful software supply chain platform.

The transition has actually been underway since I came to Cloudsmith’s HQ here in Belfast, Northern Ireland, on August 21. I’ve spent the past month meeting Cloudsmithers, our customers, and our investors. I’ve also 

, why he and Lee created the company, and what problems we’re solving for customers.

I’ve just spent the last four years as Chief Customer Officer at 

, where we served a network of millions of software developers with a broad set of communications APIs. Cloudsmith is also “by developers, for developers.” I first learned about version control systems and makefiles in the late 1990’s, but building and deploying software has become incredibly complex over the past few decades. Developers now need to master a deep stack of dependencies, and most of the bits we actually deploy are sourced from third-party libraries and other external artifacts.

Building and distributing software artifacts is core to the task of building software, and it warrants its own management control layer. Software organizations need a central approach for sourcing packages and containers from the likes of npm (JavaScript), pypi (Python), Maven Central (Java), and DockerHub (Docker), combining them with homegrown code, and distributing the resulting artifacts - which may themselves be packages or containers - to internal or external customers.

Using Cloudsmith as your software supply chain platform - controlling what comes in, and what goes out - gives you a place to plug in observability, security scanning, license checking, performance monitoring, and other value-added services to your CI/CD pipelines. And it allows you to distribute your software artifacts in a way that’s native to the developers that are consuming them - in their own CI/CD pipelines - and it lets you track and control that distribution.

This is actually not a new market. Competitors like JFrog’s Artifactory and Sonatype’s Nexus have provided artifact management for over a decade. But these legacy tools, which started out as on-premise and still today have a one-instance-per-customer model, were built for the pre-cloud generation. , Cloudsmith is the only player in the space that’s built from the ground up as a massive scale, multi-tenant Software as a Service (SaaS). This is a big reason I’ve chosen to join Cloudsmith. At 

, a startup I co-founded in 2006, we made a series of three bets that paid off in helping us build a great company - that Salesforce would displace Siebel in CRM, that Gmail would displace Exchange in corporate email, and that Workday would displace Peoplesoft in HRMS. In each case, despite serving customers increasingly poorly, the entrenched incumbent was the safe, de facto choice for most companies. But in each case, a new company built on the SaaS business model became the new standard - first slowly, then all at once, within a few years.

Cloudsmith is the next great SaaS platform that will displace seemingly comfortable incumbents that are built on yesterday’s outdated business model. We’re delivering global scale to our customers, and we’re innovating faster.

, along with a set of strong company values. I love that we are born and bred as a Northern Ireland company. I love that we are already serving an amazing set of software organizations like those at Shopify, VMware, StackOverflow, EnterpriseDB, Carta, and hundreds of others. I love that we are making the lives of software developers easier. I feel at home at Cloudsmith.

If your software organization is still running an on-premise (or “hosted”) legacy artifact management platform, or if you’re deploying production software that’s built by pulling directly from public software package indexes, or if you’re distributing your software in the form of packages to your customers’ software orgs, then 

. You’ll get a fully-featured trial edition to play with. If you REALLY want to talk to a salesperson, we have those too :) Or just contact me directly - I’d love to hear how it’s going.

A special thank you to two inspirational CEOs, 

 at Tercera, for showing me how to do the job right. I hope I can live up to their standards! And thank you to Alan, Lee, and all the Cloudsmithers for the warm welcome and the awesome onboarding thus far!

Hi.  I'm the new CEO  :)

I heard something recently, that resonated, about success. In a simple (but not easy) three-step plan; success happens when the following three things align:

A great example is, of course, Steve Jobs and Apple. The contrarian idea was that every single human would need a personal computer. He was proven right. And he executed expertly (with a few ups and downs obviously!)

“Innovation distinguishes between a leader and a follower.” - Steve Jobs

When we started Cloudsmith, our contrarian idea was that all software artifacts belong in the cloud. It’s the only place to democratize the accessibility of open-source software AND the software you build yourself. Back in 2016, there were some discussions about software bills of materials (SBOMs), package dependencies, and software security; but no one had yet popularised the notion of Software Supply Chain Management (SSCM).

Cloudsmith was one of the first companies to identify SSCM as a burgeoning problem and built a platform (and service) to solve this issue for customers and the wider ecosystem. It was a hard problem to solve.

We have been proved right; SSCM is now an accepted industry-wide discipline.

At the beginning of the year, as co-founder and CEO, I came to the conclusion that we needed a refresh in management. After positive discussions with the Board, we agreed to investigate the possibility of bringing in a strong go-to-market leader, based in our primary market, the US. We had a large list of other criteria but it had to include a history of success in growing startups and serving the software development community.

We got lucky. Again.

Fairly early on in the process, I was introduced to Glenn Weinstein, then the Chief Customer Officer at Twilio. We had an instant rapport, and a fun initial conversation relating his background to Cloudsmith.

About a week later, we scheduled interviews with three “round 2” candidates on the same day. I remember the feeling of relief when I realized the first call was with Glenn. It was an important moment. The feeling was really telling. He instantly jumped to the top of the list.

We spoke to some fantastic candidates all with excellent pedigree but Glenn always and consistently stood out.

A Computer Science graduate, a veteran of the US Navy, a co-founder of a startup that grew into a mature exited business, and a customer-focused C-Level executive at one of Silicon Valley’s best tech companies.

When we kicked off the process, Jason at Daversa Partners said if we did everything right, we could get someone hired in about 4 months.

do everything right but still managed to do it within 4 months.

Fortune favors the bold. We’ve been bold 

Glenn started on August 21st, and it's been an awesome whirlwind for us both. His people skills, his awareness, and his positive attitude have given the team a new growth mindset.

I look forward to many years working closely with him, to build Cloudsmith into the tech juggernaut we know it will be.

So to Glenn, I ask one thing; Go execute massively.

PS: Thank you to the following people for their support and advice throughout this process; Steve, Nicola, Jason, Sarah, Will, Danielle, and last but never least, Lee.

Alan Carson

Co-founder and Chief Strategy Officer

Welcoming new leadership at Cloudsmith - a note from Alan Carson

We can't say it enough. We have the best customers. We have an incredible support network in Belfast, Dublin, London and San Francisco. None of Cloudsmith's success in 2019 would have been achieved without 

Alan, Lee, Peter & the team at Cloudsmith.


By The Numbers (2019)

2024 was a year of incredible stories. At Cloudsmith, we had the privilege of being part of our customers' journeys as they reached significant milestones, driving growth, innovation, and strengthened trust across the globe. Our customers led the way, leveraging Cloudsmith’s capabilities to enhance their workflows, scale their operations, and secure their software supply chains. Let’s explore the amazing progress our community made together and the stories behind these achievements.

In 2024, our customers embraced the all-new WebApp, a major upgrade designed to make artifact management more intuitive and efficient. This enhanced user experience enabled teams to streamline their operations and focus on delivering value to their customers.

Throughout the year, more and more teams turned to Cloudsmith, resulting in a staggering 53% increase in packages delivered. Each delivery represented a project moving forward, a product getting closer to market, or a team achieving its goals. This growth was a testament to the trust our customers placed in Cloudsmith as their reliable partner in artifact management.

2024 was the year where our customers gained unprecedented control over their software supply chains. With the introduction of Broadcasts and Policy Management, teams were empowered to oversee their operations with greater clarity and precision. These features were catalysts that enabled our customers to work smarter and safer in an ever-evolving digital landscape.

This year, our customers met us at events like KubeCon, GitHub Universe, and SREcon. These weren’t just conferences - they were chances to learn, share, and grow together. Our customers brought their experiences and challenges to the table, and together, we explored new ways to innovate and push the industry forward.

For teams integrating Cloudsmith with tools like Azure DevOps and ArgoCD, 2024 was about making life easier. These integrations weren’t just about technology - they were about creating seamless workflows that allowed teams to focus on their goals, knowing their tools would support them every step of the way.

Throughout the year, our customers’ success was our top priority. With a 96.8% customer support satisfaction rating, every interaction aimed to empower users and solve challenges swiftly. Behind each support ticket resolved was a team able to move forward with confidence, knowing Cloudsmith had their back.

We measure success not only through metrics but also by the impact we've had on our customers' businesses. Here’s what a few of them had to say about their experiences with Cloudsmith in 2024:

“Cloudsmith has significantly simplified our artifact management. By using Cloudsmith, we can easily store and share artifacts across the organization, while also ensuring the security and compliance of every release. It’s been a true partner in our growth.”– Sandy McNeely, Director of DevOps, PagerDuty

“Cloudsmith’s solution has made a noticeable difference in our workflow. We’ve streamlined the way we manage and distribute software artifacts, and the speed and reliability have been key in helping us meet our goals.”– Tom Dillon, Senior VP of Engineering, Diligent

“Using Cloudsmith allowed us to ensure our products were shipped more securely and efficiently. The ability to have fine-grained control over our software supply chain means we can focus on building innovative solutions while Cloudsmith handles the infrastructure.”– Chris Sutherland, CEO & Founder, Humanising Autonomy

“Cloudsmith has been integral in supporting our continuous delivery pipeline. The easy integration and flexibility it offers have significantly enhanced the speed at which we can release new features and improvements.”– Matt 

As we move into 2025, we’re excited to keep building alongside our customers. Their stories drive us to innovate, improve, and support them even better. To all the teams we work with - thank you for an amazing 2024.

Want to see what’s next? Join us on our journey in 2025 by exploring our latest updates and features or by booking a 

Maia Livingstone

Campaign Manager

Cloudsmith 2024: By the Numbers

What a year it’s been at Cloudsmith. As we look back on 2024, it’s hard not to feel a sense of pride - and even a little awe - at how far we’ve come. From a scrappy startup to a trusted partner for some of the biggest names in the world, this year has been a turning point, both for our company and the people who make it special.

In this video, our CEO, Glenn Weinstein, reflects on the highs, the challenges, and the moments that defined this year for us. Here’s a little glimpse into what made 2024 unforgettable.

Coffee with Cloudsmith 2024

Growing Up Without Losing Who We Are 🌱🏢

We’ve doubled our count of Cloudsmithers in 2024! It’s exciting, of course, but also a little bittersweet. It’s harder to fit everyone into a room these days - we’d need a really big room! - and keeping up with all the new names can be a challenge. But growth means something important: we’re helping more people, solving bigger problems, and making a real difference for our customers.

Our mission hasn’t changed - to make developers’ lives easier. What’s shifted is our focus. Over the past 18 months, we’ve zeroed in on enterprises, especially those with massive teams using countless tools, languages, and formats. Cloudsmith’s strength is bringing all that chaos together in one place, making it simpler, faster, and more secure to build great software.

A Team That Feels Like Family 👩‍💻👨‍💻❤️

One of the things that sets Cloudsmith apart is the people. Early on, we were all generalists - pitching in wherever we were needed. But this year, we’ve started to mature, hiring specialists with deep expertise who can push us to the next level.

And while our roots are firmly in Belfast, where Cloudsmith began, we’ve expanded to Dublin, London, other locations around Ireland and the UK, as well as India and the United States, too. Belfast, though, holds something special - it’s become home for many of us, including our New York-born CEO, Glenn Weinstein.

Glenn, who splits his time between the U.S. and Belfast, shares in the video how much he’s come to love the city. “There’s something about walking the streets of Belfast, grabbing dinner, or just soaking up the atmosphere that makes you feel welcome,” he says. “As someone from New York, I never imagined Belfast would feel like home, but it truly does.”

Even though we’re a remote-first team, we believe in the magic of in-person connection. That’s why we bring everyone together three times a year for offsites in Belfast. Those few days - full of laughs, ideas, and even a pint or two - are what fuel the trust and camaraderie that make Cloudsmith such a unique place to work.

For our Engineering team, 2024 has been a year of transformation. What used to be a single team now includes specialized squads like Bytebusters, Sentinel, Platform, and Kronos. These groups allow us to go deeper into what we’re building, whether it’s improving security, expanding formats, or creating a sleek new web app that’s already winning over customers.

Looking ahead to 2025, the roadmap is ambitious - and that’s putting it mildly. From digital signatures to advanced policy management tools, we’re diving headfirst into solving some of the biggest challenges in the software supply chain. It’s a big task, but one we’re excited to tackle.

If there’s one thing that’s really hit home this year, it’s this: our customers don’t just need great software - they need a partner. As we’ve worked with Global 2000 and Fortune 500 companies, we’ve realized that onboarding isn’t just about flipping a switch. It’s about walking alongside them, helping them adapt, and making sure every team - whether it’s five people or 500 - feels supported.

This has been a game-changer for us. We’re not just delivering a product; we’re building relationships. And those relationships? They’re built on trust, understanding, and a commitment to helping our customers succeed.

As we close out 2024, we feel like we’re just getting started. Yes, we’ve grown. Yes, we’ve achieved incredible things. But our dreams are bigger than ever. Glenn Weinstein puts it perfectly: “Cloudsmith isn’t just a feature or a niche. We’re building something foundational, something that will change how enterprises everywhere manage their software supply chains.”

We believe Cloudsmith can be a cornerstone for enterprises - a platform that simplifies, secures, and transforms how software is built. We’re still on the journey, still learning, still growing. And we’re so grateful to everyone who’s been part of it - our team, our customers, and our community.

Watch the video above to hear more from Glenn Weinstein about this incredible year and what’s ahead. And if you’re curious about how Cloudsmith can help your team, we’d love to show you.

Here’s to 2025 and everything it holds. Let’s build it together. 💪✨

A Year to Remember: Cloudsmith’s Journey Through 2024  🚀🌍

As I wrap up my second week as the CMO of Cloudsmith, I'm already struck by the incredible talent and passion that pulses through our team. Last week at the 

, this impression was not only confirmed—but amplified—as Cloudsmith clinched not one, not two, but three prestigious awards: Business Personality of the Year, Scale-Up of the Year, and Small Tech Company of the Year (highly commended).

Spearheaded by MCS Group, the Digital DNA Awards serve as a celebration of excellence and innovation within Northern Ireland's tech sector. They honor the trailblazers, both individuals and organizations, who are driving digital transformation forward and reshaping the landscape of technology.

Acknowledgement always feels great, but evidence-based awards like these are also an important reminder and reassurance for our customers, partners, investors, and peers that Cloudsmith is shaking things up in tech in a meaningful way. They signify that we're delivering on our ambitions and promises to you; that you can trust our commitment to quality and improvement; and that we have the vision, structure, leadership, and support necessary to continue on this exciting upward trajectory.

Scale-Up of the Year: Driving Innovation Forward

Cloudsmith's recognition as the Scale-Up of the Year is more than just an accolade—it's a testament to our unwavering commitment to pioneering new ideas and achieving the highest standards. With a recent $11 million (£8.8 million) Series A2 investment round fueling our expansion, this award underscores our rapid growth and success in scaling operations while prioritizing quality and customer satisfaction. For our valued customers and partners, this means even greater access to cutting-edge DevSecOps tools and solutions tailored to your evolving needs.

Business Personality of the Year: Leadership Excellence

A heartfelt congratulations to our CEO, Glenn Weinstein, for being honored as the Business Personality of the Year! Hailing from the bustling streets of New York City, Glenn stepped into the leadership role at Cloudsmith in mid-2023 and swiftly made Belfast his second home. His embrace of the local culture and tech community, coupled with his relentless drive, exemplifies the spirit of innovation and collaboration that defines Cloudsmith as a trusted partner in the industry.

Small Tech Company of the Year: Recognizing Impact

We're thrilled to receive commendations as the Small Tech Company of the Year! An award for the companies that are disrupting their market or industry, this recognition underscores our significant contributions to Northern Ireland's tech ecosystem and beyond. But what does this mean for our customers and partners? It means access to best-in-class artifact storage, management, and distribution solutions that streamline the software supply chain and accelerate product delivery. It means empowering organizations worldwide to innovate faster, collaborate seamlessly, and stay ahead in today's dynamic digital landscape.

I am truly honored to be part of the Cloudsmith family and to contribute to the flourishing digital ecosystem of Northern Ireland. Our journey of innovation and excellence continues, fueled by the remarkable talent and dedication of our team, customers and partners.

Lee Skillen

Chief Technology Officer

Cloudsmith Shines Bright at Digital DNA Awards

Securing Excellence: A Personal Perspective from Victor Suarez, IT Operations Manager

As the IT Operations Manager at Cloudsmith, it gives me immense pleasure to share the exciting news that we have successfully completed our surveillance audit for ISO 27001:2013. This global standard for Information Security Management Systems (ISMS) has been a cornerstone of our commitment to security, and I'm thrilled to provide a personal perspective on this achievement.

The road to ISO 27001:2013 recertification was not just a routine audit; it was a journey fueled by our collective dedication to elevating our security standards. Embarking on what we fondly called the "Year of Security" in 2021, the entire Cloudsmith team worked tirelessly to ensure that our security practices aligned with the highest international standards.

ISO 27001:2013 is not just a certification; it's a testament to our commitment to you, our valued customers. It signifies that we have implemented a comprehensive framework that goes beyond IT, covering every aspect of our organisation - people, processes, and controls. Your data's security is our top priority, and this recertification is the proof of our unwavering dedication to ensuring its integrity and privacy.

In essence, ISO 27001:2013 is the gold standard, and obtaining certification is not just a validation of our existing practices but an acknowledgment of our continuous efforts to enhance our security posture. It's about instilling confidence in you, our customers, that when we say we take security seriously, we mean it.

I want to express my gratitude to the entire Cloudsmith team for their hard work and commitment throughout this journey. Achieving ISO 27001:2013 is a collective triumph, and I am proud to be a part of a team that values security excellence.

As we step into the future, rest assured that Cloudsmith remains steadfast in its pursuit of security excellence. We are not merely meeting standards; we are setting new benchmarks to ensure that your trust in us is always well-placed.

I'm genuinely excited about what this achievement represents - a fortified commitment to security, a collaborative effort, and a promise to continue exceeding your expectations. Thank you for entrusting us with your data security, and we look forward to delivering even greater security excellence in the years to come.

Cloudsmith Blog