Discover how they unified software delivery by replacing fragmented, self-managed repositories with Cloudsmith’s fully managed platform, featuring native package support, built-in artifact scanning, and effortless cross-team collaboration.
BHS Corrugated Maschinen- und Anlagenbau GmbH is the leading solution provider in the corrugated industry, with more than 3,500 employees at its headquarters in Weiherhammer, Germany, and in more than 20 countries worldwide.
Its 200+ developers support a diverse range of initiatives, from factory automation and embedded systems to internal tooling and CI/CD pipelines. This requires secure, scalable, and collaborative infrastructure for efficient software delivery.
CHALLENGE
BHS Corrugated relied on a self-hosted GitHub Enterprise Server to store and manage artifacts. However, this setup used isolated, per-repository structures, which made it difficult for internal teams to collaborate and nearly impossible for customer plants to access the software they needed.
The GitHub Enterprise server, self-hosted by BHS Corrugated wasn’t a complete artifact management solution. Volker Weinberger, BHS Corrugated’s Team Lead DevOps noted it lacked centralized storage, secure sharing, and the high availability offered by a fully managed, cloud-native platform like Cloudsmith.
The main problem with our previous GitHub solution is that there was no real sharing of artifacts. The artifacts were stored in a per-repository structure so there was no sharing between developers and teams.
There was no solution for artifact scanning, which is one of the biggest reasons we moved to Cloudsmith.
Development teams at BHS Corrugated used a wide variety of tools and languages, including Unity, Docker, and Python. Without native package support and a unified platform, they had to rely on multiple tools and workarounds, leading to slow builds and a fragmented developer experience.
Fragmentation extended beyond teams and package types. GitHub siloed repositories by project, leading to poor usability and slower builds.
SOLUTION
While BHS Corrugated evaluated JFrog and Sonatype, they wanted a more modern and effective solution.
Everybody should be aware that there is a third solution for artifact management and Cloudsmith is worth taking a look at because they do a lot of things differently but in my opinion they do most of these things better.
BHS Corrugated decided to move to Cloudsmith's fully managed, cloud-native artifact management platform. The migration was smooth, supported by detailed documentation, training sessions, and hands-on support from Cloudsmith engineers.
We don’t have to think about how to operate the platform. It’s fully managed. Now we focus on managing artifacts and security policies, not infrastructure.
Since migrating, the platform supports over 200 developers with minimal operational overhead, thanks to its fully managed, cloud-based infrastructure. The team has already begun leveraging advanced Cloudsmith features to automate security workflows and optimize artifact lifecycle management, driving faster, safer software delivery.
Cloudsmith provided native support for all package formats used at BHS Corrugated, including Unity, Docker, and Python. This eliminated the need for multiple tools and enabled consistent, streamlined workflows.
“All package types we use at BHS Corrugated were completely natively supported by Cloudsmith, especially Unity. Cloudsmith also had the best artifact management possibilities like cleaning up artifacts and configuring the platform via Terraform.” Volker Weinberger, Team Lead DevOps, BHS Corrugated
Cloudsmith’s centralized repository model provides a single source of truth accessible worldwide, enabling seamless sharing and controlled pushing of artifacts across teams and environments.
Cloudsmith is a central place for storing and sharing artifacts, and it's a managed solution that’s accessible from everywhere. Cloudsmith [also] supports all package types we need at BHS Corrugated, natively, and provides a modern way of managing artifacts, for example, you have one repository for all package types and a modern UI.
With Cloudsmith, BHS Corrugated now has integrated vulnerability scanning, license compliance, and policy enforcement. Developers can block downloads if vulnerabilities or license violations are detected, improving supply chain security.
“It’s already an advantage having these features available. Developers can react quickly if vulnerabilities are found in scan results.” Volker Weinberger, Team Lead DevOps, BHS Corrugated
It’s already an advantage having these features available. Developers can react quickly if vulnerabilities are found in scan results.
Cloudsmith enables BHS Corrugated to securely store and share artifacts from a central, globally accessible location. This has improved collaboration across teams and made it easier for remote customer sites to access the packages they need.
It's much easier to connect our customer plants to Cloudsmith than to connect to our previous self-hosted solution. This is the advantage of cloud-native, and when it comes to scalability, we don’t have to take care of it which is also an advantage.
Cloudsmith’s modern interface, multi-format repositories, and support for tools like Terraform have improved build performance and made it easier to manage artifacts across the organization.
Additionally, BHS Corrugated highlighted the responsiveness and technical knowledge of the Cloudsmith team as part of the improved Developer Experience. Unlike other vendors, they receive direct communication with Cloudsmith engineers who provide practical, hands-on help.
With competitors, you are a number. At Cloudsmith, you talk to real people who take your problems seriously.
RESULTS
By migrating from a fragmented, self-hosted infrastructure to Cloudsmith’s fully managed, cloud-native platform, BHS Corrugated transformed its software delivery at global scale. The move enabled the company’s 200+ developers to consolidate artifact management, enforce security policies, and eliminate infrastructure overhead, freeing them to focus on building software. With native support for all package types (including Unity and Docker), built-in vulnerability scanning, and seamless artifact sharing across teams and customer sites, BHS Corrugated now delivers software faster, more securely, and with far greater efficiency.
Font Awesome’s business relies on the distribution of private packages to customers in a timely, reliable fashion. That wasn’t a use case supported by conventional package management platforms, and attempting to build a solution in-house was causing ongoing issues around uptime and performance.
Like any other company making software at scale, the goal for Carta is delivering great software as efficiently as possible. Cloudsmith helps make that happen. Carta uses Cloudsmith to handle all aspects of package management across the business. That means that Carta engineers have access to a single private repository of software assets, no matter where they are or what language or format they are working in.
The New England Center for Children® (NECC®) is a globally recognized autism education center and research institute. NECC’s educational software system, Autism Curriculum Encyclopedia® (ACE®), is designed to support evidence-based learning for individuals with autism. They migrated to Cloudsmith to ensure they had a cloud-native solution that integrated seamlessly into their DevOps pipeline. Read about how they eliminated downtime, scaled effortlessly, and freed up their team to focus on an increased number of micro-services.
From JFrog Cloud to Cloudsmith: How ConstructConnect strengthened security and simplified software delivery.
Discover how the leading consumer and industrial electronics organization is leveraging Cloudsmith’s Enterprise Policy Manager for better package visibility and governance.
Discover how Diligent transformed its software delivery process with Cloudsmith’s universal package management platform. By centralizing security, automating workflows, and enhancing compliance, Diligent achieved significant efficiency gains and scalable operations. With real-time insights and reduced manual tasks, their teams can now focus on innovation