About Cloudsmith
Cloudsmith sells a fully managed artifact management platform to software teams at large companies. Artifacts are the packages, containers and AI models that developers build software from. Cloudsmith keeps them in one cloud repository that supports more than 30 formats, including npm, Python, Maven and Docker. It scans each artifact for malware, vulnerabilities and license problems, blocks anything that breaks a customer's policies, and delivers software to developers and customers from 600 network locations worldwide.
Alan Carson and Lee Skillen founded Cloudsmith in Belfast, Northern Ireland, in 2016. Carson is now chief strategy officer and Skillen is CTO. Glenn Weinstein, formerly Twilio's chief customer officer, became CEO in 2023. Its customers include Thrivent, Carta, PagerDuty, Font Awesome, Diligent and RabbitMQ. In 2025, 75% of Cloudsmith's revenue came from U.S. customers. It had 130 employees in April 2026, most of them in Belfast, according to the BBC.
Funding Rounds (SEC Form D)
| First sale | Filed with SEC | Amount sold | Investors | Avg. check | Terms | Filing |
|---|---|---|---|---|---|---|
| Apr 14, 2026 | May 18, 2026 | $49,999,992fully sold | 8 | $6.2M | EquityRule 506(b) | Form D ↗ |
| Jan 31, 2025 | Mar 28, 2025 | $19,997,813fully sold | 11 | $1.8M | EquityRule 506(b) | Form D ↗ |
| Total, two offerings | $69,997,805 | |||||
First sale is the date the first investor in the offering committed to invest. Companies must file Form D within 15 days of that date, so filing dates run later.
Rounds announced by Cloudsmith
What the company said publicly about its funding. Announced amounts can differ from Form D figures: an announcement can combine several closings, and some money is raised without a Form D.
| Announced | Round | Amount | Investors | Source |
|---|---|---|---|---|
| Apr 23, 2026 | Series C | $72M | TCV (lead), Insight Partners | cloudsmith.com ↗ Press release ↗ TCV ↗ |
| Mar 3, 2025 | Series B | $23M | TCV (lead), Insight Partners, MMC, Frontline, Techstart, Sorenson, Tapestry, Shasta | cloudsmith.com ↗ Frontline Ventures ↗ |
| Nov 28, 2023 | Series A2 | $11M | MMC Ventures (lead) | cloudsmith.com ↗ MMC Ventures ↗ |
| Sep 21, 2021 | Series A | $15M | Tiger Global (lead), Shasta, Sorenson, Amaranthine, Leadout Capital, Frontline, MMC, Techstart, Scott Johnston, Sarah Friar, Yvonne Wassenaar, Shane Curran, Matt Klein, Yun-Fang Juan, Cian O'Maidin, Babak Hamadani, Kit Merker | cloudsmith.com ↗ |
| Nov 13, 2019 | Seed | £2.1M | Frontline Ventures (lead), MMC Ventures, Techstart Ventures | MMC Ventures ↗ EU-Startups ↗ |
Why Investors Backed Cloudsmith
Investors backed Cloudsmith because it sits where outside code enters a company's software. AI coding agents now add packages faster than people can review them, so that entry point needs automatic checks. Cloudsmith runs those checks in a cloud registry, and many customers moved to it from JFrog and Sonatype. TCV led its Series B in 2025 and its $72 million Series C in April 2026.
The problem it targets
In 2025, over 90% of a typical enterprise application came from open-source and third-party code. Attackers know this. In March 2025, the tj-actions/changed-files compromise hit more than 23,000 code repositories. In April 2026, attackers pushed malicious releases of Axios, an npm package with about 100 million weekly downloads. Regulation adds pressure, too. From September 2026, the EU Cyber Resilience Act requires sellers to report exploited flaws within 24 hours, Diginomica reported.
What the product does
Cloudsmith keeps every package, container and model a company uses in one cloud repository. It also proxies and caches public registries such as npm and PyPI, which shields teams from outages there. Cloudsmith scans each package on upload and checks it again as new threats appear. Customers write policies in OPA Rego to block or quarantine risky packages. For example, a cooldown policy holds back new releases until they reach a minimum age. Cloudsmith runs as one shared, multi-tenant cloud service. Its CEO wrote in 2023 that JFrog's and Sonatype's tools still ran one instance per customer.
Progress so far
Cloudsmith's annual recurring revenue grew 103% year-over-year. That followed growth of nearly 150% in 2024. In 2025, package deliveries rose 352% and headcount rose 92%. Some customers came from the incumbents. For example, ConstructConnect and an unnamed electronics company both switched from JFrog. PagerDuty gets 50% cost savings with Cloudsmith.
Who backs it
Frontline Ventures led the £2.1 million seed round in 2019, with MMC Ventures and Techstart Ventures. Tiger Global led the $15 million Series A in 2021, and MMC led an $11 million Series A2 in 2023. TCV then led both later rounds, and Insight Partners joined each time. Cloudsmith has raised $124 million in total. TCV partner Morgan Gerlak joined the board with the Series B, Frontline wrote. MMC co-founder Bruce Macfarlane is also a director. Gerlak says TCV sees Cloudsmith as "defining artifact management for the AI era."
How the market is moving
The main incumbent is growing, and it is moving to the cloud. On August 6, 2026, JFrog reported second-quarter revenue of $163.8 million, up 29% from a year earlier. Its cloud revenue rose 53% to $87.5 million. JFrog's CEO said AI is accelerating the volume of software artifacts flowing into production. Vendors are also teaming up on security. In September 2026, Cloudsmith joined Athena, a Chainguard-led coalition whose members include JPMorgan Chase, Cisco and Docker. Cloudsmith also cites Gartner research that 44% of organizations plan to significantly increase spending on supply chain cybersecurity.
We wrote this summary from public statements by Cloudsmith and its investors. It is not investment advice.
Cloudsmith in the News
- Survey: Lack of Confidence in Software Supply Chain Security Runs High
- Cloudsmith adds cooldown policies for software supply chain
- NI economy: Belfast company Cloudsmith receives £50m investment
- Cloudsmith Raises $72 Million in Series C Funding
- Software artifact management startup Cloudsmith raises $72M
- Cloudsmith warns - most teams won't meet the EU Cyber Resilience Act's software supply chain deadline
- Cloudsmith Brings Threat Intelligence to Software Artifacts
Leadership Team
Executive officers and directors listed on Cloudsmith's Form D filed May 18, 2026.
Sources
- SECCloudsmith Inc. filing history
- Companycloudsmith.com, about page
- Companycloudsmith.com, contact page (registered address)
- Companytrust.cloudsmith.com, Trust Center (Cloudsmith Inc)
- Companycloudsmith.com, customers page
- Companycloudsmith.com, Series C page
- Companycloudsmith.com, CEO blog: We built Cloudsmith for this moment (2026-04-23)
- Companycloudsmith.com, Hi. I'm the new CEO (2023-09-21)
- Companycareers.cloudsmith.com, Lee Skillen bio
- Companycloudsmith.com, Cloudsmith 2025: By the Numbers (2025-12-19)
- Companycloudsmith.com, The Artifact Management Market Is Up For Grabs (2025-06-26)
- Companycloudsmith.com, CFO and General Counsel press release (2026-06-02)
- Companycloudsmith.com, Athena coalition press release (2026-09-28)
- Investortcv.com, Morgan Gerlak bio
- Investormmc.vc, Cloudsmith portfolio page
- Investormmc.vc, Bruce Macfarlane bio
- PressJFrog, Q2 2026 results release (2026-08-06)
