Cloudsmith raises $72M Series C as AI coding agents reshape the software supply chain
What’s the deal? Cloudsmith, the Belfast-based artifact management platform, has raised $72M in a Series C led by TCV, with participation from Insight Partners. Both investors backed the $23M Series B in March 2025, making this a renewed conviction just 13 months later. Total raised now stands at roughly $125M.
Founded in 2016 in Belfast by Lee SkillenDealroom has a profile for this one. Try Dealroom → (chief technology officer) and Alan CarsonDealroom has a profile for this one. Try Dealroom → (now chief strategy officer), the company brought in Glenn WeinsteinDealroom has a profile for this one. Try Dealroom →, formerly of Twilio, as chief executive.
Why now? AI coding agents are generating software at a volume and velocity that human code review can no longer keep pace with. Every package, binary, container, and dependency produced in a build pipeline is an “artifact” — and the number enterprises must manage, track, and secure is growing faster than any manual process can handle.
Cloudsmith’s product is a cloud-native private registry that lets enterprises host internal packages, mirror public registries (PyPI, Docker Hub, Maven, npm), and apply security scanning, policy enforcement, and access controls to everything that enters or leaves their pipelines. It also recently launched an ML Model Registry to bring the same governance to AI models and datasets.
The company reported nearly 150% year-over-year growth at the time of its Series B, with roughly 75% of revenue coming from US customers despite being headquartered in Belfast. The Series C — 3x the size of the prior round — signals continued expansion in both customer base and average contract size.
What could go wrong? The incumbents are well-entrenched. JFrog Artifactory and Sonatype Nexus dominate the artifact management market, and both are actively building AI-era features of their own. Cloudsmith’s pitch — that legacy tools were designed for hand-crafted software and cannot scale to agentic development — is compelling but unproven at enterprise scale.
The supply chain security space is also crowding with well-funded startups and big-tech initiatives. Winning against incumbents already embedded in enterprise DevOps workflows is a distribution challenge as much as a product one.
The signal: The AI coding boom is creating an entirely new category of infrastructure demand. As enterprises deploy agents that generate code autonomously, the software supply chain becomes both the primary delivery mechanism and the primary attack surface. Cloudsmith is betting that artifact management — historically a back-office DevOps concern — is about to become a board-level security priority.
Weinstein framed it directly: “AI agents generate so much software, so fast, it’s nearly impossible for humans to carefully review it all.” At $72M, this is one of Northern Ireland’s largest ever startup raises.
Sources:
The Next Web
Silicon Republic
Tech.eu
Tech Funding News
Cloudsmith
FinSMEs
Image credit:
Cloudsmith
J.V.
