Alternatives to Cloudsmith

Compare Cloudsmith alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Cloudsmith in 2024. Compare features, ratings, user reviews, pricing, and more from Cloudsmith competitors and alternatives in order to make an informed decision for your business.

  • 1
    Ambassador

    Ambassador

    Ambassador Labs

    Ambassador Edge Stack is a Kubernetes-native API Gateway that delivers the scalability, security, and simplicity for some of the world's largest Kubernetes installations. Edge Stack makes securing microservices easy with a comprehensive set of security functionality, including automatic TLS, authentication, rate limiting, WAF integration, and fine-grained access control. The API Gateway contains a modern Kubernetes ingress controller that supports a broad range of protocols including gRPC and gRPC-Web, supports TLS termination, and provides traffic management controls for resource availability. Why use Ambassador Edge Stack API Gateway? - Accelerate Scalability: Manage high traffic volumes and distribute incoming requests across multiple backend services, ensuring reliable application performance. - Enhanced Security: Protect your APIs from unauthorized access and malicious attacks with robust security features. - Improve Productivity & Developer Experience
    Compare vs. Cloudsmith View Software
    Visit Website
  • 2
    Ionic

    Ionic

    Drifty

    The Ionic Platform allows you to bring your apps to market faster with an integrated app platform built on the leading cross-platform mobile SDK. Build, secure, and deliver new mobile apps—and transform existing ones—across iOS, Android, and Web platforms from a single codebase. Full scalability—Grow from prototype to production to enterprise-scale, without having to think about capacity, reliability, or performance. Better apps, everywhere—Slash your development time and costs with a platform that lets you write once and deploy anywhere—iOS, Android, and Web. The core of the Ionic development experience is Ionic Capacitor, a cross platform native runtime that runs equally well on native iOS and Android mobile devices, as well as any web browser. The big difference is that, unlike traditional native development or cross-platform approaches, the UI of a Capacitor app runs primarily in the browser.
  • 3
    Fairwinds Insights

    Fairwinds Insights

    Fairwinds Ops

    Protect and optimize your mission-critical Kubernetes applications. Fairwinds Insights is a Kubernetes configuration validation platform that proactively monitors your Kubernetes and container configurations and recommends improvements. The software combines trusted open source tools, toolchain integrations, and SRE expertise based on hundreds of successful Kubernetes deployments. Balancing the velocity of engineering with the reactionary pace of security can result in messy Kubernetes configurations and unnecessary risk. Trial-and-error efforts to adjust CPU and memory settings eats into engineering time and can result in over-provisioning data center capacity or cloud compute. Traditional monitoring tools are critical, but don’t provide everything needed to proactively identify changes to maintain reliable Kubernetes workloads.
  • 4
    Zulu Enterprise

    Zulu Enterprise

    Azul Systems

    Azul Zulu is a 100% open source, fully standards-compliant Java Development Kit (JDK) and runtime platform with flexible pricing and support plans, no proprietary licenses or field of use restrictions, timely security updates, and the industry’s best support from Azul’s globally-distributed support team. The level of support is extremely important to many customers, as one survey respondent, a VP of Global Information Security, explained: “One of the big benefits of Zulu is its strong support and the optionality of the level of support you want to receive. Customers perceive Azul as really trying to work with them to find the best solution that fits their business needs.”
    Starting Price: Up to 5 Desktops $112.5 USD/year
  • 5
    Harbor

    Harbor

    Harbor

    CNCF Harbor is an open-source project that enhances container registry capabilities with a focus on security and compliance. It builds upon basic registry functionality by offering features such as vulnerability scanning to identify known security weaknesses in images, role-based access control for granular image access management, image signing to ensure authenticity and prevent tampering, and replication for efficient syncing of images across multiple other registries. Harbor strengthens the security of the image management process. It can be particularly beneficial for organizations that prioritize security and compliance in their containerized environments. However, users should be aware that setting up and maintaining Harbor can require additional effort and expertise compared to simpler container registries. 
  • 6
    Nexus Repository Pro
    Manage binaries and build artifacts across your software supply chain. Single source of truth for all of your components, binaries, and build artifacts. Efficiently distribute parts and containers to developers. Deployed at more than 100,000 organizations globally. Store and distribute Maven/Java, npm, NuGet, Helm, Docker, P2, OBR, APT, GO, R, Conan components and more. Manage components from dev through delivery: binaries, containers, assemblies, and finished goods. Advanced support for the Java Virtual Machine (JVM) ecosystem, including Gradle, Ant, Maven, and Ivy. Compatible with popular tools like Eclipse, IntelliJ, Hudson, Jenkins, Puppet, Chef, Docker, and more. Deliver innovation 24x7x365 with high availability. A single source of truth for components used across your entire software development lifecycle including QA, staging, and operations. Easily integrate with existing user and access provisioning systems including LDAP, Atlassian Crowd, and more.
  • 7
    JFrog Platform
    Fully automated DevOps platform for distributing trusted software releases from code to production. Onboard DevOps projects with users, resources and permissions for faster deployment frequency. Fearlessly update with proactive identification of open source vulnerabilities and license compliance violations. Achieve zero downtime across your DevOps pipeline with High Availability and active/active clustering for your enterprise. Control your DevOps environment with out-of-the-box native and ecosystem integrations. Enterprise ready with choice of on-prem, cloud, multi-cloud or hybrid deployments that scale as you grow. Ensure speed, reliability and security of IoT software updates and device management at scale. Create new DevOps projects in minutes and easily onboard team members, resources and storage quotas to get coding faster.
    Starting Price: $98 per month
  • 8
    Nexus Repository OSS
    Give your teams a single source of truth for every component they use. Optimize build performance and reliability by caching proxies of remote repositories. Deliver universal coverage for all major package types and formats. Install on an unlimited amount of servers for an unlimited amount of users. Store and distribute Maven/Java, npm, NuGet, Helm, Docker, P2, OBR, APT, GO, R, Conan components and more. Manage components from dev through delivery, binaries, containers, assemblies, and finished goods. Awesome support for the Java Virtual Machine (JVM) ecosystem, including Gradle, Ant, Maven, and Ivy. Streamline productivity by sharing components internally. Gain insight into component security, license, and quality issues. Build off-line with remote package availability. Integrate with industry-leading build tools. Nexus Repository Pro capabilities for your binaries and build artifacts across the entire software supply chain.
  • 9
    MyGet

    MyGet

    MyGet

    The Secure Universal Package Manager. Continuously govern and audit all packages in your DevOps lifecycle. Thousands of teams worldwide trust MyGet with their package management and governance. Accelerate your software team with cloud package management, robust security controls and easy continuous integration build services. MyGet is a Universal Package Manager that integrates with your existing source code ecosystem and enables end-to-end package management. Centralized package management delivers consistency and governance to your DevOps workflow. MyGet real-time software license detection tracks your teams’ package usage and detects dependencies across all of your packages. Customized usage policies ensure your teams are only using approved packages while reporting vulnerabilities and outdated packages early in your software build and release cycles.
    Starting Price: $15 per month
  • 10
    GitLab

    GitLab

    GitLab

    GitLab is a complete DevOps platform. With GitLab, you get a complete CI/CD toolchain out-of-the-box. One interface. One conversation. One permission model. GitLab is a complete DevOps platform, delivered as a single application, fundamentally changing the way Development, Security, and Ops teams collaborate. GitLab helps teams accelerate software delivery from weeks to minutes, reduce development costs, and reduce the risk of application vulnerabilities while increasing developer productivity. Source code management enables coordination, sharing and collaboration across the entire software development team. Track and merge branches, audit changes and enable concurrent work, to accelerate software delivery. Review code, discuss changes, share knowledge, and identify defects in code among distributed teams via asynchronous review and commenting. Automate, track and report code reviews.
    Leader badge
    Starting Price: $29 per user per month
  • 11
    ActiveState

    ActiveState

    ActiveState

    Protect your software supply chain with the ActiveState Platform. The only turn-key software supply chain that automates and secures importing, building & consuming open source. Available now for Python, Perl & Tcl. Our secure supply chain starts with modern package management that’s 100% compatible with the packages you use, highly-automated, and includes key enterprise features. Automated builds from source code, including linked C libraries. Per-package and per-version vulnerability flagging ensures you can automatically build/rebuild secure environments. A complete Bill of Materials (BOM) including provenance, licensing & all dependencies, including transient, OS & shared dependencies. Built-in virtual environments simplify development, debugging, testing and multi-project work. Web UI, API & CLI for Windows/Linux, with full macOS support soon. Spend less time wrestling with packages, dependencies, and vulnerabilities and more time focused on doing what you do best, coding!
    Starting Price: $167 per month
  • 12
    JFrog Artifactory
    The Industry Standard Universal Binary Repository Manager. Supports all major package types (over 27 and growing) such as Maven, npm, Python, NuGet, Gradle, Go, and Helm including Kubernetes and Docker as well as integration with leading CI servers and DevOps tools that you already use. Additional functionalities include: - High Availability that scales to infinity with active/active clustering of your DevOps environment and scales as business grows - On-Prem, Cloud, Hybrid, or Multi-Cloud Solution - De Facto Kubernetes Registry managing application packages, operating system’s component dependencies, open source libraries, Docker containers, and Helm charts with full visibility of all dependencies. Compatible with a growing list of Kubernetes cluster providers.
  • 13
    Rails Assets

    Rails Assets

    Rails Assets

    Rails Assets is the frictionless proxy between Bundler and Bower. It automatically converts the packaged components into gems that are easily droppable into your asset pipeline and stay up to date. First, make sure you use bundler >= 1.8.4. Add Rails Assets as a new gem source, then reference any Bower components that you need as gems. In development, if you have issues with SSL certificates and security is not a priority, you can use the alternate endpoint instead. During bundle install, if Bundler requests a package like this, Rails Assets’ daemon automatically will fetch the component from Bower’s registry, analyze its manifest file, bower.json, repackage the component as a valid Ruby gem and serve it to your application. Dependencies are handled the same way recursively. Gems created by Rails Assets work great with any Sprockets-based application. It works with Sinatra too!
    Starting Price: Free
  • 14
    CloudRepo

    CloudRepo

    CloudRepo

    CloudRepo provides fully managed, cloud-based, private repositories. With CloudRepo, developers store and access Public and Private, Maven, and Python repositories in the cloud. CloudRepo stores your maven repositories across multiple physical servers reducing the probability of data loss & maven repository downtime due to hardware failure. We help reduce time and resources spent running unsecured & vulnerable maven repositories, which allows everyone to focus on developing more. Your team has completed all this developing to ultimately distribute your repositories. Use the Software Distribution feature to make sure your repositories get in the right hands.
    Starting Price: $79 per month
  • 15
    Helix TeamHub
    Your code repository software is where you store your source code. This might be a Mercurial, Git, or SVN repository. Helix TeamHub can host your source code repository, whether it’s Mercurial, Git, or SVN. You can add multiple repositories in one project — or create a separate project for each repository. Helix TeamHub can host more than your code repositories. You can manage and maintain all of your software assets in one spot. This includes build artifacts (Maven, Ivy) and Docker container registries. It also includes private file sharing through WebDAV repositories for your other binary files. You can use Helix TeamHub on its own or alongside Helix Core to maintain a single source of truth across development teams via Helix4Git. For example, you can keep large binary files in Helix Core, then combine those files with Git assets from Helix TeamHub in a hybrid workspace to achieve high build performance.
    Starting Price: $1.05/month
  • 16
    Perforce Helix Core
    Perforce version control — Helix Core — tracks and manages changes to your source code, digital assets, and large binary files. But it does so much more than that. Helix Core helps development teams move faster, even as they develop more complex products. And it provides a single source of truth across development. Contributors can sync their work into Helix Core from the tools they’re already using. Plus, Helix Core can handle everything. 10s of thousands of users. 10s of millions of daily transactions, 100s of terabytes of data. And 10,000+ concurrent commits. It can even deliver files quickly to remote users without the WAN wait. And it can be used on-premises or in the cloud. Spend less time dealing with tools and processes — and more time delivering value. Helix Core ensures that everyone is efficient. You'll get fast feedback, flexibility, and automation for faster builds. Stop wasting your developers’ time with manual workflows — and let them get back to coding.
  • 17
    IBM Rational Synergy
    A task-based, software configuration management solution that brings together global, distributed development teams on a unified platform. IBM® Rational® Synergy is a task-based, software configuration management (SCM) solution that brings together global, distributed development teams on a unified platform. It provides capabilities that help software and systems development teams work and collaborate faster and easier. IBM Rational Synergy helps software delivery teams manage the complexity of global collaboration and boosts overall productivity. Software changes and tasks are synchronized in real-time, so dispersed teams can collaborate in a cohesive fashion over the global delivery framework. High-performance WAN access allows distributed teams to carry out operations at LAN-like speeds, reducing the overhead of having multiple servers. The single SCM repository manages all artifacts related to software development, including source code, documents, and more.
  • 18
    packagecloud

    packagecloud

    packagecloud

    Fast, reliable, and secure software starts here. A unified, developer-friendly interface for all of your artifacts written in any language, delivered to any infrastructure. Ship securely and quickly knowing your packages are handled by packagecloud. Consistent package repositories, at enterprise scale and startup speed. A single API and CLI for every environment and package type. Works seamlessly and harmoniously with the systems you already use. Manage all of your packages and deploy to any environment, from one beautiful interface, on-premise or in the cloud. Packagecloud supports the most popular package types, from Java to Python to Ruby and Node, and more. Built for teams with collaboration and access control features. Packagecloud just works. Upload any supported package type via a single, consistent API and deploy with ease. We run thousands of tests to ensure correct and consistent behavior even in the face of bugs in the packaging systems themselves.
    Starting Price: $150 per month
  • 19
    Advanced Installer

    Advanced Installer

    Advanced Installer

    Advanced Installer is a Windows installer authoring tool for installing, updating, and configuring your products safely, securely, and reliably. Businesses around the globe, large and small, save hundreds of hours and thousands of dollars by taking advantage of the expert knowledge built into Advanced Installer. User-friendly, completely GUI driven, with no scripts to learn, no databases to edit, and no XML to write. Save time to market. Develop with wizards, import existing IDE projects, and integrate them into automated build tools and source control systems. Hundreds of powerful features are ready to use with just a few mouse clicks. Tons of functionality is configurable for your installers. Fewer incidents due to improper installers. Enjoy reliable installers crafted with great attention to detail. Included updater, launcher, bootstrapper, trialware, serial validation, dialog editor, additional languages, and countless others.
    Starting Price: $499 one-time payment
  • 20
    Codeberg

    Codeberg

    Codeberg

    Codeberg is a collaboration platform and git hosting for free and open source software, content and projects. Independent and powered by your donations and contributions - consider joining the non-profit association Codeberg e. V. to further support our mission and receive your vote! All services run on servers under our control, no dependencies on external services and no third party cookies, no tracking. While all successful software tools that enabled this development were contributed by the Free and Open Source Software community, commercial for-profit platforms dominate the hosting of the results of our collaborative work. This has led to the paradox that literally millions of volunteers create, collect, and maintain invaluable knowledge, documentation, and software, to feed closed platforms driven by commercial interests, whose program is neither visible nor controllable from outside.
  • 21
    Gemfury

    Gemfury

    Gemfury

    Gemfury is a hosted repository for your public and private packages, where they are safe and within reach. Install them to any machine in minutes without worrying about running and securing your own repository server. Gemfury works with RubyGems, Python packages, npm modules, and all compatible frameworks and services. Authenticated Repo-URL keeps your private packages safe and secure during deployment. All management and deployment is done over SSL. Do everything you need with just a few terminal commands. We are hackers and love the command line; this one is our favorite. Gemfury is designed for teams. Share your account with coworkers and let them easily access your packages. Gemfury works with RubyGems, Python packages, npm modules, and all compatible frameworks and services. Install and use your code anywhere. Seamless integration and secure installation. Collaborate with your team.
    Starting Price: $9 per month
  • 22
    Chocolatey

    Chocolatey

    Chocolatey

    Chocolatey has the largest online registry of Windows packages. Chocolatey packages encapsulate everything required to manage a particular piece of software into one deployment artifact by wrapping installers, executables, zips, and/or scripts into a compiled package file. Package submissions go through a rigorous moderation review process, including automatic virus scanning. The community repository has a strict policy on malicious and pirated software. Many organizations face the ongoing challenge of deploying and supporting various versions of software. Chocolatey allows organizations to automate and simplify the management of their complex Windows environments. Our customers have experienced a massive reduction in effort, improved speed of deployment, high reliability, and comprehensive reporting. Reduce complexity, save yourself time, and get up to speed on the latest technologies and approaches.
    Starting Price: $96 per year
  • 23
    Yarn

    Yarn

    Yarn

    Yarn is a package manager which doubles down as project manager. Whether you work on one-shot projects or large monorepos, as a hobbyist or an enterprise user, we've got you covered. Split your project into sub-components kept within a single repository. Yarn guarantees that an install that works now will continue to work the same way in the future. Yarn cannot solve all your problems, but it can be the foundation for others to do it. We believe in challenging the status quo. What should the ideal developer experience be like? Yarn is an independent open-source project tied to no company. Your support makes us thrive. Yarn already knows everything there is to know about your dependency tree, it even installs it on the disk for you. So, why is it up to Node to find where your packages are? Instead, it should be the package manager's job to inform the interpreter about the location of the packages on the disk and manage any dependencies between packages and even versions of packages.
    Starting Price: Free
  • 24
    Bower

    Bower

    Bower

    Web sites are made of lots of things, frameworks, libraries, assets, and utilities. Bower manages all these things for you. Keeping track of all these packages and making sure they are up to date (or set to the specific versions you need) is tricky. Bower to the rescue! Bower can manage components that contain HTML, CSS, JavaScript, fonts, or even image files. Bower doesn’t concatenate or minify code or do anything else, it just installs the right versions of the packages you need and their dependencies. To get started, Bower works by fetching and installing packages from all over, taking care of hunting, finding, downloading, and saving the stuff you’re looking for. Bower keeps track of these packages in a manifest file, bower.json. How you use packages is up to you. Bower provides hooks to facilitate using packages in your tools and workflows. Bower is optimized for the front-end. If multiple packages depend on a package, jQuery, for example, Bower will download jQuery just once.
    Starting Price: Free
  • 25
    Azure Artifacts
    Add fully integrated package management to your continuous integration/continuous delivery (CI/CD) pipelines with a single click. Create and share Maven, npm, NuGet, and Python package feeds from public and private sources with teams of any size. Create and share Maven, npm, NuGet, and Python package feeds from public and private sources. Easily share code across small teams and large enterprises. Get universal artifact management for Maven, npm, NuGet, and Python. Share packages, and use built-in CI/CD, versioning, and testing. Share code effortlessly by storing Maven, npm, NuGet, and Python packages together. And there's no need to store binaries in Git, simply store them using Universal Packages. Keep every public source package you use, including packages from npmjs and nuget.org, safe in your feed where only you can delete it, and where it's backed by the enterprise-grade Azure SLA.
    Starting Price: $6 per user per month
  • 26
    InstallAnywhere
    Don’t risk an installation error and poor customer experience. InstallAnywhere is the leading multi-platform solution for developers creating installers for physical, virtual, and cloud environments. InstallAnywhere makes it easy for developers to create professional installation software that performs the same, no matter what the platform. You’ll be able to create reliable installations for on-premises platforms like Windows, Linux, Apple, Solaris, AIX, HP-UX, and IBM, and then deploy them physically, virtually, or to the cloud (you can even package it up into a Docker container) all from a single project file. Whether for standalone instances or integrated into your current systems, with InstallAnywhere, you’ll be able to adapt to industry changes quickly, get to market faster and deliver an engaging customer experience. Reduce software development time and go to market faster. Impress end-users with customized installations. Simplify Virtualization and cloud-based deployments.
    Starting Price: $7,423 per 3 years
  • 27
    GitHub Packages
    With GitHub Packages, you can safely publish and consume packages within your organization or with the entire world. Use industry and community-standard package managers with native tooling commands. Then authenticate and publish directly to GitHub. Understand and safely install package contents. Get packages directly from the community on GitHub, and use only what’s been approved for your organization. Store your packages in the same secure environment as your source code, all protected by your GitHub credentials. With a full API and webhooks support, you can extend your workflows to work with GitHub Packages. GitHub Packages is built with the latest edge caching via a global CDN to deliver great performance, no matter where your builds run. Use Actions to automatically publish new package versions to GitHub Packages. Run your CI/CD with Actions, and install packages and images hosted on GitHub Packages or your preferred registry of record.
    Starting Price: $0.25 per GB
  • 28
    npm

    npm

    npm

    We're npm, Inc., the company behind Node package manager, the npm Registry, and npm CLI. We offer those to the community for free, but our day job is building and selling useful tools for developers like you. Get started today for free, or step up to npm Pro to enjoy a premium JavaScript development experience, with features like private packages. Bring the best of open source to you, your team, and your company. Relied upon by more than 11 million developers worldwide, npm is committed to making JavaScript development elegant, productive, and safe. The free npm Registry has become the center of JavaScript code sharing, and with more than one million packages, the largest software registry in the world. Our other tools and services take the Registry, and the work you do around it, to the next level. At npm, Inc., we're proud to dedicate teams of full-time employees to operating the npm Registry, enhancing the CLI, improving JavaScript security, and other projects.
    Starting Price: $7 per month
  • 29
    Unleash

    Unleash

    Bricks Software AS

    Unleash is an open-source feature management software, built with large enterprises in mind. It's private, secure, scalable, and ready for the most complex setups out-of-the-box. Move from all-or-nothing releases to safe and frequent deployments Instead of perfecting a merge and fixing bugs when a set of features go live, you can release individual changes to your users, then immediately roll them back if something goes wrong. Scale your software and infrastructure at your own pace Reduce the complexity of feature flag management and tracking through a simple, user-friendly dashboard. Keep your user data to yourself. Full stop. Unleash offers private instances as part of its SaaS package. With assets like its proxy and Edge offerings, SaaS Unleash user data remains entirely with the customer. Significantly cut costs and reduce the drain on resources Reduce a significant amount of administrative costs, technical debt and helps you focus on the feature flags' benefits.
  • 30
    Xygeni

    Xygeni

    Xygeni Security

    Secure your Software Development and Delivery! Xygeni specializes in Application Security Posture Management (ASPM), using deep contextual insights to effectively prioritize and manage security risks while minimizing noise and overwhelming alerts. Our innovative technologies automatically detect malicious code in real-time upon new and updated components publication, immediately notifying customers and quarantining affected components to prevent potential breaches. With extensive coverage spanning the entire Software Supply Chain—including Open Source components, CI/CD processes and infrastructure, Anomaly detection, Secret leakage, Infrastructure as Code (IaC), and Container security—Xygeni ensures robust protection for your software applications. Trust Xygeni Security to protect your operations and empower your team to build and deliver with integrity and security.
  • 31
    Weave Cloud

    Weave Cloud

    Weaveworks

    Weave Cloud is an automation and management platform for development and DevOps teams. Built-in GitOps workflows are the foundation for improved development velocity through continuous delivery and increased reliability through observability. Weave Cloud minimizes the complexity of operating Kubernetes clusters with automated continuous delivery pipelines, observability, and Prometheus monitoring. Our developer-centric approach to operations allows developers and operators to ship faster with version-controlled continuous delivery. Run efficiently with full-stack observability through workload dashboards and alerts. Diagnose application performance issues in real-time with troubleshooting dashboards. Operate confidently using developer tools you love and understand. With built-in GitOps workflows, development and DevOps teams can build automated pipelines. It works by using Git as a single source of truth for declarative infrastructure and applications.
  • 32
    Clarive

    Clarive

    Clarive Software

    Start your DevOps Journey, make application delivery easy with a simple, powerful and unified workflow. The road to continuous delivery starts here. Clarive is the first tool to deliver an integrated experience to both Dev and Ops. Define and schedule your milestones, quality gates and releases to match your product goals and ideas. Package source code or any artifact into changesets that support any review, test or deployment workflow. Follow your release progress through stages and environments while collaborating and iterating on kanban boards and topics. Automate release pipelines to provision infrastructure, resolve dependencies and deploy components. Ideal for Dev teams that want to get started with lean delivery and the right workflow. Replace redundant tools and save time and money. Ideal for Ops teams looking to centralize all delivery processes, coordinate silos and resolve application dependencies.
    Starting Price: €2 per user per month
  • 33
    Phylum

    Phylum

    Phylum

    Phylum defends applications at the perimeter of the open-source ecosystem and the tools used to build software. Its automated analysis engine scans third-party code as soon as it’s published into the open-source ecosystem to vet software packages, identify risks, inform users and block attacks. Think of Phylum like a firewall for open-source code. Phylum’s database of open-source software supply chain risks is the most comprehensive and scalable offering available, and can be deployed throughout the development lifecycle depending on an organization’s infrastructure and appsec program maturity: in front of artifact repository managers, directly with package managers or in CI/CD pipelines. The Phylum policy library allows users to toggle on the blocking of critical vulnerabilities, attacks like typosquats, obfuscated code and dependency confusion, copyleft licenses, and more. Users can also leverage OPA to create custom policies.
  • 34
    Bytesafe

    Bytesafe

    Bitfront

    Increase your open source security posture with automated best practices, with a unified workflow for security and developer teams. The cloud-native security platform reduces risk and protects revenue, without slowing down developers. The dependency firewall quarantines malicious open source before reaching developers and infrastructure, protecting data, assets, and company reputation. Our policy engine evaluates threat signals such as known vulnerabilities, license information, and customer-defined rules. Having insight into what open-source components are used in applications is crucial to avoid exploitable vulnerabilities. Software Composition Analysis (SCA) and dashboard reporting give stakeholders a holistic overview with immediate insights into the current situation. Discover when new open-source licenses are introduced in the codebase. Automatically track license compliance issues and restrict problematic or unlicensed packages.
    Starting Price: €1100 per month
  • 35
    Argon

    Argon

    ArgonSec

    The first unified security solution protecting the integrity of your software throughout the entire DevOps CI CD pipeline. Track all events and actions across your software supply chain with unparalleled clarity, get actionable information and make decisions faster. Bolster your security posture by enforcing security best practices at all stages of the software delivery process with real-time alerts and auto-remediation. Ensure source code integrity with automated validity checks on each release, so you can be sure the code you committed is the source code deployed. Argon continuously monitors your DevOps infrastructure to identify security risks, code leaks, misconfigurations, and anomalies, and provide insights about the posture of your CI CD pipeline.
  • 36
    eemaan Deployment Manager
    Package and deploy software & configuration updates in seconds. Follow a 5-step wizard to package Genesys software and configuration into a portable package ready to be shared with colleagues, all from the comfort of a powerful dashboard. Deploy any shared package in a few clicks. Select the location, the package, the Genesys Application you want to update, optionally customize the deployment, and just click 'Go'. The whole process of downloading software, and updating the Genesys configuration is carried out automatically. The deployment didn't go to plan? Not to worry, just one click, and the old software and configuration are restored. The best is always saved for last. The deployment process comes with an automatic Runbook generator. In the blink of an eye, a step-by-step runbook is generated for the approval process, and for that, just in case something goes the wrong backup plan.
  • 37
    Packagist

    Packagist

    Packagist

    Packagist is the main composer repository. It aggregates public PHP packages installable with Composer. Put a file named composer.json at the root of your project, containing your project dependencies. Packagist is the default Composer package repository. It lets you find packages and lets Composer know where to get the code from. You can use Composer to manage your project or libraries' dependencies. First of all, you must pick a package name. This is a very important step since it can not change and it should be unique enough to avoid conflicts in the future. The package name consists of a vendor name and a project name joined by a/. The vendor name exists to prevent naming conflicts. The composer.json file should reside at the top of your package's git/svn/ repository and is the way you describe your package to both packagist and composer. New versions of your package are automatically fetched from tags you create in your VCS repository.
  • 38
    InstallAware

    InstallAware

    InstallAware

    Your setups are immune to corrupted Windows Installer stacks on target systems (which would cause your setups to fail through no fault of your own), and best of all, you get to switch between native code and Windows Installer setup engines at runtime, as often as you need! When you use the native code setup engine, InstantInstall Acceleration delivers setups that install an order of magnitude faster compared to all other Windows installers. InstallAware Developer is a powerful software installation solution for Windows Installer that enables MSIcode scripting for rapid setup development without the high cost and steep learning curve of other setup solutions. InstallAware effortlessly bridges Win32, Win64, and .NET apps to the Windows Store, creating a Universal Windows app from a customizable template and helping your end-users download your apps directly from the Windows Store.
    Starting Price: $1,254.92 one-time payment
  • 39
    Aleo

    Aleo

    Aleo

    Modular and compliant. The ultimate toolkit for building private applications is finally here. World-class infrastructure built for you and your team. From IDE to blockchain and everything in between. Develop with Leo. Write your app using our programming language, with ease. Iterate blazingly fast. Use our platform to compile and test, frustration-free. Deploy to the blockchain. Launch your shiny new app in less time than ever. Discover what we're building for developers like you. Write applications in a breeze with packages from our community on Aleo Package Manager. For the first time, make no compromise between convenience and user privacy. Deploy and share your application on Aleo easily for life. Aleo has put together a solid compiler team to build a very ambitious circuit compiler language. The core aim of this endeavor is to allow developers to make use of zero-knowledge proofs in their applications in as simple a manner as possible.
  • 40
    ProGet

    ProGet

    inedo

    Scan for vulnerabilities and control who can access different feeds and actions, all within minutes of download and fast install. ProGet is self-managed and is available in a powerful free version that can be upgraded as needed. ProGet helps you package applications and components so you can ensure your software is built only once, and then deployed consistently across environments. This means everyone can be certain that what goes to production is exactly what was built and tested. Third-party packages (such as NuGet, npm, PowerShell, and Chocolatey) and Docker containers are also supported, allowing you to enforce quality standards, monitor for open-source licenses, and scan for vulnerabilities across all packages, much earlier in the development cycle. With high availability, load-balancing, and multi-site replication, ProGet can centralize your organization’s software applications and components to provide uniform access to developers and servers.
    Starting Price: $9,995 per year
  • 41
    Apptimized Workspace
    Discover, package and test your apps in your browser. Cloud-based application packaging environment, created for application packaging professionals by application packaging professionals. The scalable, low-cost alternative to traditional thick client discovery & packaging tools. Flexible and easy-to-use environment to serve all your software packaging needs. Access everything needed to analyze, document, package, remediate and test Microsoft Win32 applications. Without the need for infrastructure or VPN, a low monthly subscription with nothing to install, maintain or configure. Apptimized Workspace is a comprehensive and instantly available packaging environment in the cloud that takes your packaging process and all related areas to a new efficiency level. Do more with Apptimized Workspace than with any existing toolset, straight out of the box.
  • 42
    InstallShield
    Create native MSIX packages, build clean installs, and build installations in the cloud with InstallShield from Revenera. Consistent and reliable installs. Every time. With InstallShield, you’ll adapt to industry changes quickly, get to market faster and deliver an engaging customer experience. Revenera InstallShield (formerly Flexera InstallShield) is the fastest easiest way to build Windows installers and MSIX packages and create installations directly within Microsoft Visual Studio. Configure install conditions to specifically target Windows 11 and Windows Server 2022. Install files to native ARM locations on Windows 10 running on ARM machines. Easily move your build infrastructure to the cloud by connecting to Revenera’s Cloud License Server. Build one-click installers that are more modern than ever and refreshingly simple. Configure pre-requisites to install third-party packages from Microsoft’s Windows Package Manager.
    Starting Price: $4,498 per 3 years
  • 43
    DeployHub

    DeployHub

    DeployHub

    DeployHub's mission is to empower organizations to achieve business agility through a managed approach to the microservice supply chain using a unified catalog of services and their usage. Unique to the DeployHub offering is its ability to version services along with their consuming applications providing the visibility of service impact before a deployment. DeployHub provides a clear view of your microservices supply chain and how it changes over time across hundreds of clusters. DeployHub integrates with your CI/CD pipeline. You can start using our free version at deployhub.com. DeployHub is based on the Ortelius.io open source project.
  • 44
    JFrog Xray
    DevSecOps Next Generation – Securing Your Binaries. Identify security vulnerabilities and license violations early in the development process and block builds with security issues from deployment. Automated and continuous governance and auditing of software artifacts and dependencies throughout the software development lifecycle from code to production. Additional functionalities include: - Deep recursive scanning of components drilling down to analyze all artifacts and dependencies and creating a graph of relationships between software components. - On-Prem, Cloud, Hybrid, or Multi-Cloud Solution - Impact analysis of how an issue in one component affects all dependent components with a display chain of impacts in a component dependency graph. - JFrog’s vulnerabilities database, continuously updated with new component vulnerability data, includes VulnDB, the industry’s most comprehensive security vulnerability database.
  • 45
    Rancher

    Rancher

    Rancher Labs

    From datacenter to cloud to edge, Rancher lets you deliver Kubernetes-as-a-Service. Rancher is a complete software stack for teams adopting containers. It addresses the operational and security challenges of managing multiple Kubernetes clusters, while providing DevOps teams with integrated tools for running containerized workloads. From datacenter to cloud to edge, Rancher's open source software lets you run Kubernetes everywhere. Compare Rancher with other leading Kubernetes management platforms in how they deliver. You don’t need to figure Kubernetes out all on your own. Rancher is open source software, with an enormous community of users. Rancher Labs builds software that helps enterprises deliver Kubernetes-as-a-Service across any infrastructure. When running Kubernetes workloads in mission-critical environments, our community knows that they can turn to us for world-class support.
  • 46
    Ozone

    Ozone

    Ozone

    Ozone platform helps enterprises to ship modern applications quickly, securely and reliably. Ozone removes the unwanted headache of managing too many DevOps tools and makes it super easy for anyone to deploy applications on Kubernetes clusters. Just integrate all your existing DevOps tools and automate your application delivery process end-to-end. Accelerate deployments with automated pipeline workflows and on demand infrastructure management with zero downtime. Prevent business losses by enforcing governance and compliance policy for app deployments at scale. Single pane of glass where engineering, DevOps and Security teams can collaborate on application releases in realtime.
  • 47
    Opsera

    Opsera

    Opsera

    You choose your tools, we take care of the rest. Put together the perfect CI/CD stack that fits your organization’s goals with zero vendor lock-in. ‍Eliminate manual scripts and stop building toolchain automation. Free your engineers to focus on your core business. Pipeline workflows follow a declarative model so you focus on what is required — not how it’s accomplished — including: software builds, security scans, unit testing, and deployments. With Blueprints, diagnose any failures from within Opsera using a console output of every step of your pipeline execution. Comprehensive software delivery analytics across your CI/CD process in a unified view — including Lead Time, Change Failure Rate, Deployment Frequency, and Time to Restore. ‍Contextualized logs for faster resolution and improved auditing and compliance.
  • 48
    Nexus Lifecycle
    Continuously secure your entire software supply chain. With a Chrome browser extension, developers know if an open source component is vulnerable when selecting from public repositories. With integration to the most popular IDEs, developers can select the best components based on real-time intelligence and move to an approved version with one click. Nexus Lifecycle integrates with Eclipse, IntelliJ, and Visual Studio. Nexus Lifecycle integrates with GitHub, GitLab, and Atlassian Bitbucket to automatically generate pull requests for components that violate open source policies. Developers can easily see what versions they should use in order to fix violations — no more guessing what version to upgrade to. Development teams can trust that the PR is accurate because only Nexus Lifecycle has the precision and accuracy from Nexus Intelligence to eliminate the noise found in other automated dependency management solutions.
  • 49
    CloudBees

    CloudBees

    CloudBees

    CloudBees is a complete software delivery platform. Self-service scalable, repeatable, compliant workflows help developers innovate faster. See how we help you release faster better safer software. Manage, release, and measure features at scale. Visibility should be more than a singular pipeline. Orchestrate your software delivery business end to end. Learn why 'meta' orchestration is a game-changer. Measure, analyze, and communicate how software delivery impacts business performance. Get answers about software delivery analytics. Ensure assets are always compliant at every stage, including in production, and automatically know what risks must be addressed. Stop rewriting scripts, fixing bugs, and waiting for builds. Serve yourself with fast, secure workflows, and feature management. Automatically enforce governance, security, and compliance without hindering flexibility. You're confident and developers are happier. Treat software delivery as a business. Proactively manage risk.
  • 50
    Bitbucket

    Bitbucket

    Atlassian

    Bitbucket is more than just Git code management. Bitbucket gives teams one place to plan projects, collaborate on code, test, and deploy. Free for small teams under 5 and priced to scale with Standard ($3/user/mo) or Premium ($6/user/mo) plans. Keep your projects organized by creating Bitbucket branches right from Jira issues or Trello cards. Build, test and deploy with integrated CI/CD. Benefit from configuration as code and fast feedback loops. Approve code review more efficiently with pull requests. Create a merge checklist with designated approvers and hold discussions right in the source code with inline comments. Bitbucket Pipelines with Deployments lets you build, test and deploy with integrated CI/CD. Benefit from configuration as code and fast feedback loops. Know your code is secure in the Cloud with IP whitelisting and required 2-step verification. Restrict access to certain users, and control their actions with branch permissions and merge checks for quality code.
    Leader badge
    Starting Price: $15 per month