4 Sources
4 Sources
[1]
Belfast's Cloudsmith raises $72M Series C led by TCV
TCV led the Series B one year ago and now doubles down on the Series C. Insight Partners also returns. The thesis: AI coding agents are generating software so fast and at such volume that human code review is no longer sufficient, and enterprise artifact management must function as the primary control and security layer. Cloudsmith, the Belfast-based artifact management platform, has raised $72 million in a Series C round led by TCV, with participation from Insight Partners and other existing investors. Both TCV and Insight Partners had backed the company's $23 million Series B in March 2025, meaning the Series C represents a renewed conviction less than thirteen months later. The round will fund product development and go-to-market expansion. The company was founded in Belfast in 2016 by Lee Skillen (CTO) and Alan Carson (now Chief Strategy Officer); Glenn Weinstein, formerly Chief Customer Officer at Twilio, joined as CEO when Carson stepped into the strategy role. The investment thesis rests on a specific and increasingly high-stakes problem in enterprise software development. An "artifact" in Cloudsmith's context is any software package, binary file, compiled application, or dependency produced or consumed during the development process, the libraries, containers, and components that go into production software. As AI coding agents generate code at unprecedented volume and velocity, the number of artifacts a given enterprise must manage, track, and secure is growing faster than any human review process can handle. The threat surface is also expanding: open-source dependencies can be compromised after ingestion (as in supply chain attacks), AI-generated code can introduce novel vulnerability patterns, and regulators are increasingly demanding that enterprises demonstrate that their software is "secure by design." Cloudsmith's product is a cloud-native private registry and artifact management platform. Enterprises use it to host and distribute their own internal software packages, to mirror public registries (PyPI, Docker Hub, Maven, npm, and others) in a controlled private environment, and to apply security scanning, policy enforcement, and access controls to every package that enters or leaves their build pipelines. The pitch against incumbent platforms, primarily JFrog Artifactory and Sonatype Nexus, is that those tools were designed for the era of hand-crafted software and cannot scale to the AI-agentic development model. Cloudsmith's most recent product additions include an ML Model Registry (bringing the same governance it applies to code packages to ML models and datasets) and an Enterprise Policy Manager for policy-as-code enforcement across the supply chain. CEO Glenn Weinstein framed the series C as a response to a structural shift in how software is made. "AI agents generate so much software, so fast, it's nearly impossible for humans to carefully review it all," he said. " Cloudsmith has the scale, and the broad view across the open-source ecosystem, to protect enterprises against the new kinds of threats that AI-driven development introduces." Morgan Gerlak, Partner at TCV, said the firm sees Cloudsmith as "defining artifact management for the AI era" and a platform enterprises will rely on for "compliance, control, and security at global scale." Thomas Krane, Managing Director at Insight Partners, cited the need to "secure the software supply chain" as AI-driven development becomes the norm. Cloudsmith's customer base is predominantly US-based, approximately 75% of revenue at the time of the Series B, despite the company being headquartered in Belfast, one of the most prominent tech success stories from Northern Ireland's startup ecosystem. The Series B press release noted nearly 150% year-over-year growth, with Fortune 500 and Global 2000 companies actively switching from legacy platforms. The Series C, which is three times the size of the Series B, signals that both the customer base and the average contract size have continued to expand in the intervening year. Total raised prior to the Series C stood at approximately $52.5 million across seed, Series A ($26M in two tranches: $15M in 2021, $11M in 2023), and Series B.
[2]
Belfast's Cloudsmith eyes 'massive growth' with $72m raise
The company raised $23m last year to expand its workforce. Belfast software company Cloudsmith has made a $72m Series C raise led by the investment firm TCV. The raise, Cloudsmith said, would position the company for "massive growth" as it eyes the AI-generated software market. The funds will help accelerate product development and expand its go-to-market capabilities. Insight Partners and other existing investors also supported the round. The latest funding comes just a year after the company raised $23m in a Series B to expand its workforce across departments and invest in AI R&D. TVC also led this round. Founded in 2016 by Lee Skillen and Alan Carson, Cloudsmith helps businesses manage software on the cloud, and is used by companies that need control, security and scalability in their software supply chain. The company made two Series A raises - $15m in 2021 and $11m in 2023. The new investment follows a period of strong year-over-year growth, Cloudsmith said, as companies seek modern infrastructure to keep pace with the speed and scale of AI-generated software. Businesses also rely on software companies such as Cloudsmith to provide guardrails and governance when adopting AI-coding agents. The investment comes at a time when AI coding is seeing unprecedented uptake by enterprises, which brings with it an ever expanding threat surface. Enterprises need to manage an growing software supply chain, while facing regulatory pressures and their own security requirements to ensure their AI-generated software is secure by design. "AI agents generate so much software, so fast, it's nearly impossible for humans to carefully review it all," said Glenn Weinstein, the CEO of Cloudsmith. Weinstein said Cloudsmith has the capacity to protect enterprises against the new kinds of threats that AI-driven development introduces. "TCV and Insight Partners both recognise this profound shift, and their backing is helping Cloudsmith scale up for the massive wave of adoption of AI agents across enterprise software teams." Thomas Krane, the managing director at Insight Partners added: "In an era increasingly defined by AI-driven development, securing the software supply chain is critical. "As a cloud-native offering, Cloudsmith is well positioned to do this - providing the scale and reliability needed to help power enterprise and AI-driven builds and mitigate emerging risks." Don't miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic's digest of need-to-know sci-tech news.
[3]
Cloudsmith Raises $72 Million to Secure AI-Driven Software Development | PYMNTS.com
By completing this form, you agree to receive marketing communications from PYMNTS and to the sharing of your information with our sponsor, if applicable, in accordance with our Privacy Policy and Terms and Conditions. The company will use the new funding to accelerate its product development and expand its go-to-market capabilities, according to the release. This round came just over a year after a March 2025 Series B round in which Cloudsmith raised $23 million. Cloudsmith has found growing demand for its cloud-native platform as enterprises seek to replace their legacy tools with infrastructure that can keep up with the speed and scale of AI-generated software and provide the guardrails and governance required for AI coding agents, the company said in the Thursday press release. Because AI coding agents generate code at unprecedented velocity and volume, enterprises need a platform that can manage the artifacts and dependencies they produce. Cloudsmith's platform enables engineering teams to govern every package, at every stage, so they can maintain security and control while moving fast, per the release. "AI agents generate so much software, so fast, it's nearly impossible for humans to carefully review it all," Cloudsmith CEO Glenn Weinstein said in the release. "Cloudsmith has the scale, and the broad view across the open-source ecosystem, to protect enterprises against the new kinds of threats that AI-driven development introduces." Morgan Gerlak, partner at TCV, which led the round, said in the release that Cloudsmith is "a company we see as defining artifact management for the AI era." "As AI shapes the software supply chain, we believe Cloudsmith is uniquely positioned to become a platform enterprises rely on for compliance, control and security at global scale," Gerlak said. Cloudsmith announced in November 2025 that it added a Model Context Protocol (MCP) Server that brings its platform's capabilities directly into the developer's AI-powered workflows. In March, the company said it expanded its security capabilities to position its unified data and enforcement plane as "the critical defense against the evolving software supply chain threat landscape." PYMNTS reported in June 2025 that AI coding assistants enable businesses to slash their technology development expenses while maintaining competitive digital capabilities.
[4]
Cloudsmith raises $72M in Series C funding led by TCV By Investing.com
Investing.com -- Cloudsmith secured $72 million in Series C funding led by TCV, with participation from Insight Partners. The funding round aims to support the company's efforts in controlling and securing the AI-powered software supply chain. The investment will enable Cloudsmith to expand its capabilities in managing software supply chain security as artificial intelligence continues to reshape software development processes. TCV served as the lead investor in the funding round, while existing investor Insight Partners also participated. Cloudsmith specializes in software supply chain management and security solutions. The company's platform addresses the growing need for organizations to maintain control over their software dependencies and distribution channels in an increasingly AI-driven development environment. The Series C funding marks a significant milestone for the company as it scales its operations to meet rising demand for software supply chain security tools. The capital will support Cloudsmith's growth initiatives as organizations face mounting challenges in securing their software development and deployment pipelines. This article was generated with the support of AI and reviewed by an editor. For more information see our T&C.
Share
Share
Copy Link
Belfast-based Cloudsmith raised $72 million in Series C funding led by TCV, with Insight Partners participating. The investment comes just 13 months after its $23 million Series B, as enterprises struggle to manage the unprecedented volume of software generated by AI coding agents. The company's artifact management platform is positioning itself as the critical security layer when human review can no longer keep pace.
Cloudsmith, the Belfast-based artifact management platform, has secured $72 million in Series C funding led by TCV, with participation from Insight Partners and other existing investors
1
. The round arrives just 13 months after the company's $23 million Series B in March 2025, which was also led by TCV2
. This rapid follow-on investment, three times the size of the previous round, signals renewed conviction from both firms in Cloudsmith's approach to managing the software supply chain amid the explosion of AI-driven development.Founded in 2016 by Lee Skillen and Alan Carson, Cloudsmith has raised approximately $124.5 million to date across seed, two Series A tranches totaling $26 million in 2021 and 2023, and now two back-to-back institutional rounds
1
. Glenn Weinstein, formerly Chief Customer Officer at Twilio, joined as CEO when Carson transitioned to Chief Strategy Officer. The company's customer base is predominantly US-based, representing approximately 75% of revenue, despite being headquartered in Belfast1
.
Source: Silicon Republic
The investment thesis centers on a structural shift in how enterprises build software. AI coding agents now generate code at such velocity and volume that human review processes can no longer adequately assess security and compliance risks
3
. "AI agents generate so much software, so fast, it's nearly impossible for humans to carefully review it all," said Weinstein2
. This creates an expanding threat surface where open-source dependencies can be compromised after ingestion, AI-generated code can introduce novel vulnerability patterns, and regulators increasingly demand that enterprises demonstrate their software is secure by design1
.Artifacts—the software packages, binary files, compiled applications, and dependencies produced during development—are multiplying faster than traditional governance methods can track. Cloudsmith's platform enables engineering teams to govern every package at every stage, maintaining security and control while moving at the speed AI development demands
3
.Cloudsmith operates as a cloud-native private registry and artifact management platform that allows enterprises to host and distribute internal software packages, mirror public registries like PyPI, Docker Hub, Maven, and npm in controlled environments, and apply security scanning, policy enforcement, and access controls across build pipelines
1
. The company positions itself against incumbents JFrog Artifactory and Sonatype Nexus, arguing those tools were designed for hand-crafted software and cannot scale to the AI-agentic development model1
.Recent product additions include an ML Model Registry that applies the same governance to machine learning models and datasets as it does to code packages, and an Enterprise Policy Manager for policy-as-code enforcement across the software supply chain
1
. In November 2025, Cloudsmith added a Model Context Protocol Server that integrates its capabilities directly into AI-powered developer workflows3
.Related Stories
The company reported nearly 150% year-over-year growth at the time of its Series B, with Fortune 500 and Global 2000 companies actively switching from legacy platforms
1
. Morgan Gerlak, Partner at TCV, described Cloudsmith as "defining artifact management for the AI era" and positioned it as a platform enterprises will rely on for "enterprise compliance and control, and security at global scale"3
. Thomas Krane, Managing Director at Insight Partners, emphasized that "securing the software supply chain is critical" as AI-driven development becomes the norm2
.The Series C funding will accelerate product development and expand go-to-market capabilities
4
. Cloudsmith positions itself to address mounting challenges enterprises face in securing software development and deployment pipelines, particularly as businesses seek modern infrastructure to keep pace with the speed and scalability demands of secure AI-generated software2
. Weinstein emphasized that Cloudsmith has "the scale, and the broad view across the open-source ecosystem, to protect enterprises against the new kinds of threats that AI-driven development introduces"1
. The company's ability to manage dependencies at scale will determine whether enterprises can maintain governance while adopting AI coding agents across their software teams2
.Summarized by
Navi
[1]
[2]
31 May 2025•Business and Economy

21 Feb 2025•Business and Economy

30 Apr 2025•Business and Economy

1
Technology

2
Science and Research

3
Technology
