Archive — US — techcrunch
Cloudsmith raises $23M to improve software supply chain security
Cloudsmith, a Northern Irish startup, raised $23M in Series B funding to enhance software supply chain security. The platform helps manage software artifacts, providing a private registry, scanning for vulnerabilities, and ensuring reliable builds, thereby addressing the challenges of using open-source components. The funding will support hiring and R&D, particularly for AI applications in software package management.
Key points
- Cloudsmith raised $23M to improve software supply chain security.
- 81% of codebases have vulnerabilities, making software supply chains insecure.
- Cloudsmith offers a cloud-native 'artifact management platform' as an alternative to legacy solutions.
- It ensures access to software packages by creating mirrors for reliability during builds.
- Cloudsmith scans for vulnerabilities and licensing issues in open-source packages.
- The funding will drive growth, hiring, and AI-based solutions for better package management.
Why it matters
- The rise of software supply chain vulnerabilities has increased interest in security solutions.
- Current IT trends emphasize security in software development as attacks like Log4Shell have heightened awareness.
- The move towards AI applications in software management aligns with broader industry trends focusing on automation and security.
With fresh funding and a strategic focus on large enterprises, Cloudsmith aims to transform software supply chain security, addressing significant current challenges in the industry while enhancing its market position.