{"data":{"slug":"cloudsmith","name":"Cloudsmith","tagline":"Universal registry platform with integrated security scanning for managing artifacts across your software supply chain","homepage":"https://cloudsmith.com","category":{"slug":"container-registries","name":"Container Registries"},"vendor":null,"score":{"composite":63,"confidence":0.52,"confidenceBand":"medium","breakdown":{"price_level":{"value":0,"weight":0.027,"present":false,"contribution":0},"reliability":{"value":50,"weight":0.054,"present":true,"contribution":2.7},"capabilities":{"value":100,"weight":0.039,"present":true,"contribution":3.9},"integrations":{"value":38,"weight":0.044,"present":true,"contribution":1.7},"security_posture":{"value":70,"weight":0.176,"present":true,"contribution":12.3},"pricing_transparency":{"value":0,"weight":0.041,"present":false,"contribution":0}},"computedAt":"2026-09-18T12:41:12.289Z","stale":false},"uri":"https://www.vioscale.ai/software/cloudsmith","aliases":["cloudsmith"],"status":"published","crawlStatus":"ok","indexStatus":"indexed","nextCrawlAt":"2026-10-02T12:41:12.378Z","categories":[{"slug":"container-registries","name":"Container Registries","isPrimary":true}],"facts":{"deployment":[{"attribute":"deployment.options","value":{"cloud":true},"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-18T12:38:37.361Z","confidence":0.6}}],"description":[{"attribute":"description.long","value":"A cloud-native platform for centralizing, securing, and distributing software artifacts in 30+ formats, featuring built-in vulnerability scanning, malware detection, and policy-based access controls.","provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-18T12:38:37.361Z","confidence":0.6}}],"pricing":[{"attribute":"pricing.model","value":"commercial","provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-08-03T12:58:43.445Z","confidence":0.6}}],"reliability":[{"attribute":"reliability.status_page","value":true,"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-03T22:10:59.790Z","confidence":0.6}}],"security":[{"attribute":"security.disclosure_policy","value":true,"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-08-13T18:18:24.423Z","confidence":0.6}},{"attribute":"security.iso27001","value":true,"provenance":{"source":"https://trust.cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-08-03T13:01:20.052Z","confidence":0.75}},{"attribute":"security.soc2","value":true,"provenance":{"source":"https://trust.cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-08-03T13:01:20.052Z","confidence":0.75}}],"features":[{"attribute":"features.capabilities","value":{"rbac":true,"web_ui":true,"hosting":"cloud","sbom_support":true,"image_signing":true,"oci_compliant":true,"private_repos":true,"artifact_types":"universal","cloud_iam_native":true,"pull_rate_limits":"tiered","high_availability":true,"pull_through_cache":true,"replication_mirroring":true,"vulnerability_scanning":true},"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-18T12:38:37.361Z","confidence":0.6}}],"integrations":[{"attribute":"integrations.count","value":20,"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-18T12:38:37.361Z","confidence":0.6}},{"attribute":"integrations.list","value":[{"name":"AWS CodeBuild"},{"name":"Aikido"},{"name":"Ansible"},{"name":"Argo CD"},{"name":"Azure AD SSO"},{"name":"Azure DevOps"},{"name":"Bitbucket Pipelines"},{"name":"Buildkite"},{"name":"Chainguard"},{"name":"Chef"},{"name":"CircleCI"},{"name":"Codefresh"},{"name":"Datadog"},{"name":"Dependabot"},{"name":"Drone CI"},{"name":"GitHub Actions"},{"name":"GitHub Secret Scanning"},{"name":"GitLab CI/CD"},{"name":"Google SSO"},{"name":"Harness"},{"name":"Jenkins"},{"name":"JumpCloud SSO"},{"name":"Kusari"},{"name":"Microsoft Teams"},{"name":"Octopus Deploy"},{"name":"Okta"},{"name":"OneLogin SSO"},{"name":"Ping Identity"},{"name":"Puppet"},{"name":"Roadie"},{"name":"Semaphore CI"},{"name":"Slack"},{"name":"Terraform Provider"},{"name":"Travis CI"},{"name":"VS Code Extension"},{"name":"Webhooks"},{"name":"Zapier"},{"name":"GridLight"}],"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-18T12:38:37.361Z","confidence":0.6}}],"market":[{"attribute":"market.availability","value":{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]},"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-03T22:10:59.790Z","confidence":0.75}}],"platform":[{"attribute":"platform.support","value":{"cli":true,"web":true},"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-18T12:38:37.361Z","confidence":0.6}}],"content":[{"attribute":"content.faq","value":[{"answer":"A cloud-hosted system that secures your software supply chain by scanning all artifacts for vulnerabilities and policy violations, blocking risky items, and providing comprehensive audit trails of what's deployed where. It is indexed under Container Registries.","source":"https://cloudsmith.com","question":"What is Cloudsmith?","confidence":0.6},{"answer":"Cloudsmith supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://cloudsmith.com","question":"What platforms does Cloudsmith support?","confidence":0.6},{"answer":"We have only confirmed a cloud / SaaS deployment for Cloudsmith, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.","source":"https://cloudsmith.com","question":"Can Cloudsmith be self-hosted?","confidence":0.6},{"answer":"We have confirmed 38 integrations for Cloudsmith, including AWS CodeBuild, Aikido, Ansible, Argo CD, Azure AD SSO, Azure DevOps, Bitbucket Pipelines and Buildkite, plus 30 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://cloudsmith.com","question":"What does Cloudsmith integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2 and ISO 27001 for Cloudsmith. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Cloudsmith not holding them. Always confirm compliance directly before you rely on it.","source":"https://trust.cloudsmith.com","question":"What security certifications does Cloudsmith have?","confidence":0.7}],"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-10T10:20:52.952Z","confidence":0.62}}]},"factList":[{"attribute":"deployment.options","value":{"cloud":true},"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-18T12:38:37.361Z","confidence":0.6}},{"attribute":"description.long","value":"A cloud-native platform for centralizing, securing, and distributing software artifacts in 30+ formats, featuring built-in vulnerability scanning, malware detection, and policy-based access controls.","provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-18T12:38:37.361Z","confidence":0.6}},{"attribute":"pricing.model","value":"commercial","provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-08-03T12:58:43.445Z","confidence":0.6}},{"attribute":"reliability.status_page","value":true,"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-03T22:10:59.790Z","confidence":0.6}},{"attribute":"security.disclosure_policy","value":true,"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-08-13T18:18:24.423Z","confidence":0.6}},{"attribute":"security.iso27001","value":true,"provenance":{"source":"https://trust.cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-08-03T13:01:20.052Z","confidence":0.75}},{"attribute":"security.soc2","value":true,"provenance":{"source":"https://trust.cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-08-03T13:01:20.052Z","confidence":0.75}},{"attribute":"features.capabilities","value":{"rbac":true,"web_ui":true,"hosting":"cloud","sbom_support":true,"image_signing":true,"oci_compliant":true,"private_repos":true,"artifact_types":"universal","cloud_iam_native":true,"pull_rate_limits":"tiered","high_availability":true,"pull_through_cache":true,"replication_mirroring":true,"vulnerability_scanning":true},"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-18T12:38:37.361Z","confidence":0.6}},{"attribute":"integrations.count","value":20,"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-18T12:38:37.361Z","confidence":0.6}},{"attribute":"market.availability","value":{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]},"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-03T22:10:59.790Z","confidence":0.75}},{"attribute":"platform.support","value":{"cli":true,"web":true},"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-18T12:38:37.361Z","confidence":0.6}},{"attribute":"content.faq","value":[{"answer":"A cloud-hosted system that secures your software supply chain by scanning all artifacts for vulnerabilities and policy violations, blocking risky items, and providing comprehensive audit trails of what's deployed where. It is indexed under Container Registries.","source":"https://cloudsmith.com","question":"What is Cloudsmith?","confidence":0.6},{"answer":"Cloudsmith supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://cloudsmith.com","question":"What platforms does Cloudsmith support?","confidence":0.6},{"answer":"We have only confirmed a cloud / SaaS deployment for Cloudsmith, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.","source":"https://cloudsmith.com","question":"Can Cloudsmith be self-hosted?","confidence":0.6},{"answer":"We have confirmed 38 integrations for Cloudsmith, including AWS CodeBuild, Aikido, Ansible, Argo CD, Azure AD SSO, Azure DevOps, Bitbucket Pipelines and Buildkite, plus 30 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://cloudsmith.com","question":"What does Cloudsmith integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2 and ISO 27001 for Cloudsmith. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Cloudsmith not holding them. Always confirm compliance directly before you rely on it.","source":"https://trust.cloudsmith.com","question":"What security certifications does Cloudsmith have?","confidence":0.7}],"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-10T10:20:52.952Z","confidence":0.62}},{"attribute":"integrations.list","value":[{"name":"AWS CodeBuild"},{"name":"Aikido"},{"name":"Ansible"},{"name":"Argo CD"},{"name":"Azure AD SSO"},{"name":"Azure DevOps"},{"name":"Bitbucket Pipelines"},{"name":"Buildkite"},{"name":"Chainguard"},{"name":"Chef"},{"name":"CircleCI"},{"name":"Codefresh"},{"name":"Datadog"},{"name":"Dependabot"},{"name":"Drone CI"},{"name":"GitHub Actions"},{"name":"GitHub Secret Scanning"},{"name":"GitLab CI/CD"},{"name":"Google SSO"},{"name":"Harness"},{"name":"Jenkins"},{"name":"JumpCloud SSO"},{"name":"Kusari"},{"name":"Microsoft Teams"},{"name":"Octopus Deploy"},{"name":"Okta"},{"name":"OneLogin SSO"},{"name":"Ping Identity"},{"name":"Puppet"},{"name":"Roadie"},{"name":"Semaphore CI"},{"name":"Slack"},{"name":"Terraform Provider"},{"name":"Travis CI"},{"name":"VS Code Extension"},{"name":"Webhooks"},{"name":"Zapier"},{"name":"GridLight"}],"provenance":{"source":"https://cloudsmith.com","sourceType":"vioscale-crawler","retrievedAt":"2026-09-18T12:38:37.361Z","confidence":0.6}}],"faq":[{"answer":"A cloud-hosted system that secures your software supply chain by scanning all artifacts for vulnerabilities and policy violations, blocking risky items, and providing comprehensive audit trails of what's deployed where. It is indexed under Container Registries.","source":"https://cloudsmith.com","question":"What is Cloudsmith?","confidence":0.6},{"answer":"Cloudsmith supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://cloudsmith.com","question":"What platforms does Cloudsmith support?","confidence":0.6},{"answer":"We have only confirmed a cloud / SaaS deployment for Cloudsmith, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.","source":"https://cloudsmith.com","question":"Can Cloudsmith be self-hosted?","confidence":0.6},{"answer":"We have confirmed 38 integrations for Cloudsmith, including AWS CodeBuild, Aikido, Ansible, Argo CD, Azure AD SSO, Azure DevOps, Bitbucket Pipelines and Buildkite, plus 30 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://cloudsmith.com","question":"What does Cloudsmith integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2 and ISO 27001 for Cloudsmith. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Cloudsmith not holding them. Always confirm compliance directly before you rely on it.","source":"https://trust.cloudsmith.com","question":"What security certifications does Cloudsmith have?","confidence":0.7}],"faqSource":"generated","market":{"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[],"primaryMarkets":[]},"integrations":[{"name":"AWS CodeBuild"},{"name":"Aikido"},{"name":"Ansible"},{"name":"Argo CD"},{"name":"Azure AD SSO"},{"name":"Azure DevOps"},{"name":"Bitbucket Pipelines"},{"name":"Buildkite"},{"name":"Chainguard"},{"name":"Chef"},{"name":"CircleCI"},{"name":"Codefresh"},{"name":"Datadog"},{"name":"Dependabot"},{"name":"Drone CI"},{"name":"GitHub Actions"},{"name":"GitHub Secret Scanning"},{"name":"GitLab CI/CD"},{"name":"Google SSO"},{"name":"Harness"},{"name":"Jenkins"},{"name":"JumpCloud SSO"},{"name":"Kusari"},{"name":"Microsoft Teams"},{"name":"Octopus Deploy"},{"name":"Okta"},{"name":"OneLogin SSO"},{"name":"Ping Identity"},{"name":"Puppet"},{"name":"Roadie"},{"name":"Semaphore CI"},{"name":"Slack"},{"name":"Terraform Provider"},{"name":"Travis CI"},{"name":"VS Code Extension"},{"name":"Webhooks"},{"name":"Zapier"},{"name":"GridLight"}],"claimed":false,"updatedAt":"2026-09-18T12:41:12.379Z","formats":{"json":"https://www.vioscale.ai/api/v1/software/cloudsmith","markdown":"https://www.vioscale.ai/software/cloudsmith.md","html":"https://www.vioscale.ai/software/cloudsmith"}},"meta":{"source":"https://www.vioscale.ai","license":"CC-BY-4.0","generatedAt":"2026-09-21T02:32:58.219Z","disclaimer":"Independent, evidence-based. Every fact carries provenance."}}