Better together
Sierra + Cloudsmith
The world's biggest brands trust Sierra's agents with their customers. Cloudsmith gives Sierra one trusted source for every package, container and AI model behind those agents. Every artifact is checked by policy as code before it reaches a developer, a pipeline, or a customer's cloud.
Why it matters
Attackers are targeting the open source AI stack Sierra builds on
Every Sierra agent is built on open source packages: model provider SDKs, LLM gateways, guardrail frameworks, and the hundreds of dependencies that come with them. In 2026, attackers went after exactly those packages.
LiteLLM, March 2026
Attackers published two poisoned versions of LiteLLM, an LLM gateway with about 3.4 million downloads a day. The malware harvested AWS, GCP and Azure tokens, SSH keys and Kubernetes credentials. The malicious versions were live for about three hours and were downloaded over 119,000 times in that period, according to a PyPi investigation.
Mistral AI and Guardrails AI, May 2026
A single campaign pushed more than 400 malicious package versions to npm and PyPI. Targets included the official Mistral AI SDKs and the Guardrails AI validation framework. A cooldown policy keeps new versions out of your builds during those first critical hours.
Axios, March 2026
Attackers took over a maintainer's account and shipped a remote access trojan in one of npm's most-used packages. Publishing straight to npm allowed them to go around the project's CI/CD protections. Axios is often a transitive dependency in other packages, meaning many organizations may not have even been aware they were using it.
What this means for Sierra
A window of a few hours can do damage
Any developer laptop or CI job that installs a poisoned version during the short window that a poisoned package is available can hand over cloud and Kubernetes credentials. Teams need to be able to control what comes in from public registries before any dependencies are installed.
Your customers inherit your dependencies
Sierra's agents serve major customers handling sensitive information, and increasingly run in customers' own clouds. A compromised package in Sierra's build becomes a problem for every one of them.
Customer security reviews will ask for this
Regulated buyers want SBOMs, proof of package controls, and an audit trail. The EU's Digital Operational Resilience Act (DORA) sets the bar higher again, and similar legislation is coming in other territories. Companies need to act now to put the right safeguards in place.
Scanning tells you what is already inside. Cloudsmith lets Sierra control what gets in.
AI is speeding everything up. In Cloudsmith's 2026 Artifact Management Report, 93% of the 505 engineering, security and platform leaders surveyed said they were using AI to accelerate development.
Why Cloudsmith
Cloudsmith secures the next phase of Sierra's growth
Sierra closed a $950M Series E in May and has around 58 open roles. Customers include GAP, SoFi, Rocket Mortgage and Sutter Health. As the team grows, more code comes from open source dependencies and AI coding assistants. Every one of those packages ends up in software that regulated enterprises trust with their customers. Cloudsmith helps Sierra's engineering org:
Govern every artifact from a single set of repositories
Bring packages, containers and AI models together in one trusted source. Run one set of policies, keep one audit trail and stop worrying about blind spots between registries.
Block risky packages before they reach a build
Write policies in OPA Rego to quarantine malicious, vulnerable or badly licensed packages as they come in from public upstreams. Developers keep pulling as normal, and only compliant versions reach them.
Answer customer security reviews with evidence
Generate SBOMs automatically and keep a full log of what was pulled, when and by whom. Hand regulated customers the proof they ask for, and keep pace with the EU's Digital Operational Resilience Act (DORA).
Scale access as fast as Sierra hires
Use OpenID Connect (OIDC) and Terraform to onboard new engineers and teams in code. Every new hire gets the right access on day one, and security keeps full control.
Switch to Cloudsmith
A complete software supply chain solution for Sierra
Our analysis suggests Sierra's teams may be running more than one artifact registry. Fast-growing engineering orgs in that position often run into the issues below.
Your current solutionSeparate registries, separate rules. Teams on Nexus and Artifactory each have their own setup, policies and access lists, so security has to stitch together the full picture.
With CloudsmithOne trusted source. A single set of repositories covers all 30+ formats, with one set of policies and one audit trail across every team.
Your current solutionSecurity as an add-on. Scanning and policy come as extra products, with their own licences and seat fees.
With CloudsmithPolicy as code built in. First-class support for OPA and Rego is part of the platform, with no add-ons to buy.
Your current solutionManual user management. Access requests and team setup are handled ticket by ticket, which slows hiring and adds risk.
With CloudsmithSelf-service onboarding. OIDC and Terraform automate access for new engineers and teams, so Sierra moves toward a self-service model.
Your current solutionServers to run and patch. Self-hosted registries need tuning, upgrades and redundancy work from your infrastructure team.
With CloudsmithFully managed and cloud-native. Cloudsmith runs the platform and its global Package Delivery Network, so your infrastructure team can focus on Sierra's product.
Supply chain security
Build powerful policies to control exactly what gets to production.
Build policies in OPA Rego syntax to control what packages get to your teams and pipelines, and what packages are blocked.
- Use OPA Rego syntax to define software policies
- Block or quarantine packages that fail policies
- Use policy logs to report on compliance
Supply chain security for the AI-era
Your patch window has gone from days to hours
Cloudsmith is a secure repository for all packages, containers, and assets, making it straightforward to enforce consistent security policies across all package types.
- One policy for every package type.
- SBOM generation for your supply chain.
- Store AI models next to your packages and containers, under the same policies.
- A true single source of truth for all your software
Global distribution
Boost productivity and get software to customers fast using our global package distribution network.
- Fully managed architecture
- Globally-distributed content delivery
- Highly-available
- Ship Sierra's platform securely into customers' own cloud environments.
