Cartography

Spec sheet

Purpose

Cartography is an open-source tool for mapping infrastructure assets and their relationships in a Neo4j graph database.Read 4 Oct 2026 · cartography.dev

Deployment

The install guide supports Docker Compose or native installation and requires a reachable Neo4j database.Read 4 Oct 2026 · docs.cartography.dev

Integrations

The project documentation lists integrations including AWS, GCP, Azure, Kubernetes, GitHub, Okta, Entra ID, CrowdStrike, and more than 30 other platforms.Read 4 Oct 2026 · github.com

License

The project repository states that Cartography is licensed under Apache 2.0.Read 4 Oct 2026 · github.com

API permissions

For GitHub, Cartography supports fine-grained personal access tokens, classic personal access tokens, and GitHub Apps, with optional permissions allowing unavailable data to be skipped while ingestion continues.Read 4 Oct 2026 · docs.cartography.dev

Integration limit

The Orca Security module requires organization-wide read access; partial account, business-unit, or asset access is unsupported.Read 4 Oct 2026 · docs.cartography.dev

Operating systems

The native install guide says Cartography should work on Linux, Mac, and Windows, while noting Windows has not been tested much.Read 4 Oct 2026 · docs.cartography.dev

Project status

The project says it was created at Lyft and is now a CNCF Sandbox project.Read 4 Oct 2026 · cartography.dev

Runtime requirements

The install guide specifies Python 3.13 and Neo4j 5.23 or higher; Python 3.11 and 3.12 may work but are not tested, and Python 3.10 and older are unsupported.Read 4 Oct 2026 · docs.cartography.dev

Secret handling

The GitHub module reads secret metadata but never loads secret values.Read 4 Oct 2026 · docs.cartography.dev

Security questions

It helps investigate identity access to datastores, critical vulnerabilities, network paths, internet-exposed compute, and production AI agents and their permissions.Read 4 Oct 2026 · cartography.dev

Security rules

Cartography Rules provides predefined and custom security queries for identifying potential attack surfaces and security gaps in a populated graph.Read 4 Oct 2026 · docs.cartography.dev

Support and community

The project directs bug reports and feature requests to GitHub Issues, broader discussions to GitHub Discussions, and community participation to the CNCF Slack #cartography channel.Read 4 Oct 2026 · github.com

Plans and prices

Every Cartography plan and price →

Where Specifiction places it

• Application Dependency Mapping Software#9 of 428.1