Cartography is an open source tool that maps your infrastructure

Run locally

View on GitHub

Created at

Used by

and many, many others.

Why Cartography?

Cartography lets you explore your infra in a visual way. It is very good at exposing otherwise hidden dependency relationships between your assets so that you may validate assumptions about security risks.Service owners can generate asset reports, Red Teamers can discover attack paths, and Blue Teamers can identify areas for security improvement. All can benefit from using the graph for manual exploration through a web frontend interface, or in an automated fashion by calling the APIs.Cartography was originally created by the security team at Lyft. You can read about its origin story here.

Discover assetsAutomatically discover all your cloud resources across providers and regions.

Map dependenciesVisualize relationships between services, resources, and infrastructure components.

Find security issuesIdentify risks and compliance issues through analysis and data enrichment.

Featured blogs and case studies

IAM Whatever you say IAM: using cartography to see who has access to whatMapping Moving Clouds: How to stay on top of your ephemeral environments with CartographyVulnerability Management at Lyft: Enforcing the CascadeCartography joins the CNCF

Conference talks

Cartography: automating security visibility and democratization (BSides 2019):Cartography: using graphs to improve and scale security decision making (CNCF Security Day 2020):Container vuln management with minimal burnout (BSidesSF2023):

We are a Cloud Native Computing Foundation Sandbox project.

Join Our CommunityView source, read our discussions, join our Slack

View on GitHub

2025 © Cartography Project Authors. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our Trademark Usage page.