Cartography: Open Source Infrastructure Mapping Tool

Created at

Used by

and many, many others.

We are a Cloud Native Computing Foundation Sandbox project.

Why Cartography?

Cartography lets you explore your infra in a visual way. It is very good at exposing otherwise hidden dependency relationships between your assets so that you may validate assumptions about security risks.Service owners can generate asset reports, Red Teamers can discover attack paths, and Blue Teamers can identify areas for security improvement. All can benefit from using the graph for manual exploration through a web frontend interface, or in an automated fashion by calling the APIs.Cartography was originally created by the security team at Lyft. You can read about its origin story here.

Discover assetsAutomatically discover all your cloud resources across providers and regions.

Map dependenciesVisualize relationships between services, resources, and infrastructure components.

Find security issuesIdentify risks and compliance issues through analysis and data enrichment.

Featured blogs and case studies

IAM Whatever you say IAM: using cartography to see who has access to whatMapping Moving Clouds: How to stay on top of your ephemeral environments with CartographyVulnerability Management at Lyft: Enforcing the CascadeCartography joins the CNCF

Conference talks

Cartography: automating security visibility and democratization (BSides 2019):Cartography: using graphs to improve and scale security decision making (CNCF Security Day 2020):Container vuln management with minimal burnout (BSidesSF2023):

Join Our Community

View source, read our discussions, join our Slack

2025 © Cartography Project Authors. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our Trademark Usage page.