Cloudsmith, an artifact management platform, has raised £53 million in a Series C round led by TCV, with participation from Insight Partners. The funding will be used to accelerate product development and expand go-to-market capabilities.
It provides a cloud-native platform that enables engineering teams to manage, secure, and govern software packages across formats and environments. Enterprises are replacing legacy tools with its platform as they seek infrastructure that can keep pace with the speed and scale of AI-generated software, while those adopting AI coding agents use it to provide guardrails and governance across software supply chains.
Software development is increasingly shaped by AI, with code being generated, assembled, and deployed at a scale that is difficult for humans to manually review. As a result, software supply chains are growing in size and complexity, spanning open source libraries, internal packages, and third-party dependencies, while introducing new security risks and regulatory pressures. Cloudsmith positions artifact management as a critical control point, enabling teams to govern how software components are stored, moved, and used across the development lifecycle.
The investment follows a period of strong year-over-year growth, with increasing numbers of existing customers, including Fortune 500 and Global 2000 companies, upgrading to the platform. As AI-driven development increases the volume of software artifacts, enterprises face an expanding threat surface, with attacks targeting dependencies and package ecosystems becoming more frequent and impactful. Cloudsmith’s platform provides the scale and visibility needed to manage these risks while maintaining development speed.
CEO, Glenn Weinstein claims that AI agents are changing how software is created, generating code at a pace that makes manual review increasingly impractical, and that the platform is designed to provide the control and visibility required to secure modern software supply chains. TCV and Insight Partners said their continued investment reflects conviction in Cloudsmith’s position as infrastructure for compliance, control, and security in AI-driven software development.
Cloudsmith is the only platform built for the way software is being developed today - by AI agents. We're never going back to hand-crafted software. AI agents generate so much software, so fast, it's nearly impossible for humans to carefully review it all. Cloudsmith has the scale, and the broad view across the open-source ecosystem, to protect enterprises against the new kinds of threats that AI-driven development introduces. TCV and Insight Partners both recognise this profound shift, and their backing is helping Cloudsmith scale up for the massive wave of adoption of AI agents across enterprise software teams.
Having led Cloudsmith’s Series B and now its Series C, TCV is proud to deepen our partnership with a company we see as defining artifact management for the AI era. As AI shapes the software supply chain, we believe Cloudsmith is uniquely positioned to become a platform enterprises rely on for compliance, control, and security at global scale.
In an era increasingly defined by AI-driven development, securing the software supply chain is critical. As a cloud-native offering, Cloudsmith is well-positioned to do this - providing the scale and reliability needed to help power enterprise and AI-driven builds and mitigate emerging risks. We believe in Cloudsmith’s vision to secure the software supply chain by serving as a curated, AI-ready solution for enterprises of all sizes.
