Cloudsmith Secures $72M Series C to Mitigate Security Risks of AI-Generated Code Proliferation

Executive Summary

• Cloudsmith closed a $72M Series C round led by TCV to address the exponential growth of AI-generated software volumes.
• The investment highlights the inadequacy of traditional human code review in the face of automated AI coding agents.
• Artifact management is being repositioned as the primary security control layer for maintaining the integrity of software supply chains.

Strategic Deep-Dive

Cloudsmith, a leader in cloud-native software supply chain security, has secured $72 million in Series C funding led by TCV, with significant participation from Insight Partners. This capital infusion arrives at a critical juncture where the traditional software development lifecycle (SDLC) is being disrupted by the advent of AI coding agents. The core thesis behind this investment is that AI-generated software is being produced at a volume and velocity that far exceeds the capacity of human security researchers and code reviewers.

As AI agents increasingly dictate the pace of software production, the risk of injecting unverified artifacts or vulnerabilities into the enterprise ecosystem has grown exponentially. Consequently, the industry is seeing a mandatory shift toward automated security verification.

Cloudsmith’s platform positions enterprise artifact management as the primary control plane for security. In an era where ‘Shift Left’ security is no longer optional, managing the provenance and integrity of every software component becomes the definitive line of defense. The platform aims to provide a single source of truth for all software artifacts, ensuring that every package—whether human-authored or AI-generated—is scanned, verified, and cataloged.

This funding will enable Cloudsmith to accelerate its roadmap for advanced SBOM (Software Bill of Materials) management and real-time threat detection within the artifact repository. By transforming the repository from a passive storage unit into an active security gateway, Cloudsmith is defining the new standard for digital trust in an AI-accelerated world.