artifact-management
(4)
Alan Carson and the art of changing course
A missing software tool sent Alan Carson and Lee Skillen down a different road. The Cloudsmith co-founder has been revising the plan ever since, with Belfast firmly on the map.
Cloudsmith
Cloudsmith is a Belfast-founded, cloud-native artifact management platform that gives engineering teams a single place to store, secure, and distribute software packages and containers across 30+ formats. It acts as a private, fully managed registry with built-in supply chain controls - vulnerability and malware scanning, policy enforcement, quarantine, and global distribution - increasingly positioned around governing the flood of code produced by AI coding agents.
Glenn Weinstein
Glenn Weinstein is the CEO of Cloudsmith, the cloud-native software supply chain platform headquartered in Belfast, Northern Ireland. A U.S. Naval Academy graduate and former naval flight officer who learned to code on a Commodore 64, he co-founded the cloud consultancy Appirio (sold to Wipro for $500M) and spent four years as Chief Customer Officer at Twilio before relocating from New York to Belfast in 2023 to lead Cloudsmith. Under his leadership Cloudsmith raised a $72M Series C in April 2026, positioning the company to secure software supply chains in the age of AI coding agents.
Sonatype
Sonatype is the software supply chain management company behind Nexus Repository and the maintainer of Maven Central, the world's largest repository of open source Java components. Founded in 2008 by core contributors to Apache Maven, it helps developers and enterprises find, manage, and secure the open source code that powers modern software - blocking malicious packages, enforcing policy, and generating software bills of materials (SBOMs) across the development lifecycle.