How Cloudsmith is Securing the AI-Powered Software Supply Chain

Cloudsmith, a cloud-native artifact management platform, led by Glenn Weinstein, Lee Skillen, Alan Carson, and the team, has raised a $72M Series C financing led by TCV and with participation from Insight Partners, along with investments from other existing investors. The additional funding positions Cloudsmith for significant growth as it aims to power the next phase of AI-driven software development.

The investment supports rapid growth at Cloudsmith, as enterprises shift to cloud-native infrastructure for AI-driven development and replace legacy tools.

The funding will accelerate product development and go-to-market expansion.

“Cloudsmith is built for how software is developed today, by AI agents,” said Glenn Weinstein. “As AI generates code at scale, human review alone is no longer sufficient. The platform provides the scale and ecosystem visibility needed to secure modern software supply chains, with backing from TCV and Insight Partners supporting its expansion.”

The decision by TCV and Insight Partners to reinvest reflects confidence in Cloudsmith’s leadership, product strength, and position as a category-defining software infrastructure platform.

“Having led both the Series B and Series C, TCV is proud to deepen its partnership with Cloudsmith,” said Morgan Gerlak, Partner at TCV. “As AI reshapes the software supply chain, the platform is well positioned to become a critical layer for enterprise compliance, control, and security at a global scale.”

“In an era defined by AI-driven development, securing the software supply chain is critical,” said Thomas Krane, Managing Director at Insight Partners. “Cloudsmith is well-positioned as a cloud-native platform to provide the scale and reliability enterprises need, while mitigating emerging risks with an AI-ready approach.”

The investment comes as AI-driven development expands software supply chains and threat surfaces, making security a board-level priority.

Enterprises must manage growing dependencies while ensuring AI-generated code is secure by design.

Cloudsmith is designed for this shift, providing the scale and visibility to govern software packages across every stage, enabling teams to move quickly without sacrificing security or control.