Open-core, fully managed cloud security graph (CNAPP) built on Cartography that maps cloud, SaaS, and on-prem assets into one queryable security graph.
SubImage is a fully managed CNAPP built on Cartography (originally built at Lyft) that continuously discovers and maps cloud, SaaS, and on-prem assets into a single living security graph, connecting read-only to AWS, GCP, Azure, Okta, and GitHub. The platform surfaces CVEs, misconfigurations, and transitive access risks using AI-tailored rules and IAM traffic visibility, with every finding queryable via natural language or integrated with SIEM, SOAR, and ticketing systems. It is agentless, fully managed, and requires no agents or installs. Security teams get an open, reproducible foundation without vendor lock-in. SubImage is a product of SubImage.
For people
For agents
Nothing listed yet.