Security is paramount at Cloudsmith, and we take pride in taking every precaution to secure the service. All communication and storage is encrypted in-transit and at-rest (with 256-bit or hardware-based encryption). Checksums and GPG signatures are provided to detect tampering. For increased trust you can also provide your own GPG key for signing.
Access Entitlements (Advanced)
Like basic entitlements, advanced entitlements allow you to control who has read-only access to your repositories, to download packages and assets. However, you can also limit what access an entitlement has by search, or you can limit how long a token is valid for by time. As a vendor, you can power your license-based distribution with tokens that are dynamically created via the API, based on your customer needs.
Got Slack? Cloudsmith utilises Slack for all of its internal team communication. With the inter-Slack workspace, we will give you a dedicated channel between our Slack instance and yours, for the ultimate in contact with our team. We'll be on-hand to provide support when you need us, as if we were a part of your organisation.