Cloudsmith Raises $72M to Secure AI-Driven Software Supply Chains

BELFAST: Cloudsmith has raised $72 million in a Series C round to scale its artifact management platform for AI-driven software development. TCV led the round and also led the company’s Series B in May 2025. Insight Partners participated alongside other existing investors. Total funding now reaches $124 million.

Alan Carson and Lee Skillen founded Cloudsmith in 2016 after meeting at the New York Stock Exchange’s Belfast engineering operation. The platform manages, secures, and governs every software package that passes through an enterprise development pipeline, across more than 30 package formats and every major cloud environment.

CEO Glenn Weinstein joined from Twilio, where he led customer support, professional services, and developer network teams for nearly four years.

The funding reflects a structural shift in how software gets built. AI coding agents now generate code at a pace and volume that human reviewers cannot keep up with. Each new package introduces dependencies, potential vulnerabilities, and supply chain exposure.

Legacy artifact management tools were built for a slower, human-led world. Cloudsmith positions itself as the governance layer for a world where machines write most of the code.

Its platform acts as an intermediary between developers and public repositories. It scans packages for vulnerabilities, applies policy controls, and blocks rogue packages before they reach internal engineering teams. A new Model Registry treats machine learning models themselves as governed artifacts, applying the same provenance and security checks to AI models as to traditional code.

Fortune 500 and Global 2000 companies are replacing legacy tools with Cloudsmith as they adopt AI coding agents at scale. TCV’s decision to lead a second consecutive round reflects conviction that artifact management has become a front-line security concern, not a DevOps utility.