Jump to content

Draft:Cloudsmith

From Wikipedia, the free encyclopedia
Cloudsmith
TypePrivate
IndustrySoftware, Cloud computing
Founded2016
FoundersAlan Carson, Lee Skillen
Headquarters,
United Kingdom
Key peopleGlenn Weinstein (CEO)
Websitecloudsmith.com

Cloudsmith is a software company based in Belfast, Northern Ireland. It develops a cloud-native artifact management and software supply chain platform that development teams use to store, version, and distribute software packages in formats including Docker, npm, Maven, PyPI, NuGet, and Helm.[1] The company was founded in 2016 by Alan Carson and Lee Skillen.[2]

Glenn Weinstein was appointed chief executive in 2023.[3] Cloudsmith has raised several rounds of venture capital, most recently a Series C round in April 2026.[4][5]

Cloudsmith's security guidance has been cited in technology press coverage of software supply-chain attacks.[6][7]

History

[edit]

Cloudsmith was founded in 2016 in Belfast by Alan Carson and Lee Skillen, software developers at the New York Stock Exchange.[2] They started the company as a platform for managing software artifacts such as packages, containers, and other binary files used to build software.

The company was funded by a pre-seed investment from Techstart Ventures in Belfast. In November 2019 the company raised a £2.1 million seed round led by Frontline Ventures.[8]

In September 2021 Cloudsmith raised a $15 million Series A led by Tiger Global. Sarah Friar, then chief executive of Nextdoor, was an angel investor. Alan Carson was the chief executive at the time.[2]

Glenn Weinstein, formerly chief customer officer at Twilio, was named CEO in 2023.[3] That November the company raised an $11 million Series A follow-on, led by MMC Ventures.[3]

Cloudsmith raised a $23 million Series B in March 2025, led by TCV and Insight Partners.[9] This was followed in April 2026 by a $72 million Series C, also led by TCV and Insight Partners, which BBC News reported as the largest venture capital deal by a Northern Ireland technology company.[4][5][10]

In June 2026, a credential-stealing malware campaign known as Miasma compromised dozens of Microsoft open-source repositories on GitHub. The campaign was flagged by the malware-analysis site OpenSourceMalware; Cloudsmith published an analysis of it that was cited in coverage by TechCrunch and Ars Technica.[6][7]

Product

[edit]

Cloudsmith offers a cloud-native platform for managing software artifacts. Features include storing and distributing packages, software supply-chain security, generating software bills of materials (SBOMs), and applying policies that block vulnerable or malicious packages from being deployed.[1]

Cloudsmith's position in the artifact management market was assessed in a market note by IDC and an "On the Radar" report by Omdia.[11][12] The Futurum Group and HyperFRAME Research have also published commentary on the company's relevance in the wider artifact management market.[13][14]

At KubeCon + CloudNativeCon Europe 2026, Cloudsmith provided guidance related to the European Union Cyber Resilience Act.[15][16]

References

[edit]
  1. 1 2 "Cloud Native Artifact Management". Cloudsmith. Retrieved 4 August 2026.
  2. 1 2 3 Taylor, Charlie (21 September 2021). "Belfast-based software company Cloudsmith raises $15m". The Irish Times.
  3. 1 2 3 "Belfast's Cloudsmith raises €10m in new funding round". The Irish Times. 28 November 2023.
  4. 1 2 "Cloudsmith Raises $72M for Software Supply-Chain Security". BankInfoSecurity. April 2026. Retrieved 4 August 2026.
  5. 1 2 "Cloudsmith Raises $72M Series C Led by TCV and Insight Partners" (Press release). Cloudsmith. 23 April 2026.
  6. 1 2 Whittaker, Zack (8 June 2026). "Microsoft's open source tools were hacked to steal passwords of AI developers". TechCrunch.
  7. 1 2 Goodin, Dan (8 June 2026). "For the 2nd time in weeks, Microsoft packages laced with credential stealer". Ars Technica.
  8. ↑ "Belfast start-up Cloudsmith secures massive £2.1m seed investment". Sync NI. 14 November 2019.
  9. ↑ "Cloudsmith secures $23M for its artifact management platform". SiliconANGLE. 3 March 2025. Retrieved 4 August 2026.
  10. ↑ Campbell, John (23 April 2026). "Deal takes Belfast software firm close to $1bn valuation". BBC News.
  11. ↑ "Cloudsmith's Cloud-Native Artifact Management Vision Positions It for Wide Market Adoption". IDC (Market Note). Retrieved 4 August 2026.
  12. ↑ "On the Radar: Cloudsmith provides the connecting layer that makes DevOps more effective and efficient". Omdia. 1 May 2024. Retrieved 4 August 2026.
  13. ↑ "Cloudsmith Accelerates with Enhanced Security and Fuels Growth". Futurum Group. 18 July 2024. Retrieved 4 August 2026.
  14. ↑ "Cloud Native Artifact Management: Is the Cost Really Hidden?". HyperFRAME Research. 17 November 2025. Retrieved 4 August 2026.
  15. ↑ "Cloudsmith warns — most teams won't meet the EU Cyber Resilience Act's software supply chain deadline". Diginomica. 15 April 2026. Retrieved 4 August 2026.
  16. ↑ "CIOs are put to the test as security regulations across borders recalibrate". CIO. 14 May 2026.