cartography-cncf/cartography
Cartography is a Python tool that pulls infrastructure assets and their relationships into a Neo4j graph database. observed · 2026-08-28
Health v2 · maintenance only
98/100
- Activity 99
- Release rhythm 97
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 9.0
- age_days: 2745
- days_rel: 22
- days_push: 7
- n_releases_24m: 55
Adoption not part of the score
4028 stars · 558 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
Cartography is a Python CLI tool that ingests infrastructure assets and their relationships from 30+ platforms (AWS, GCP, Azure, Kubernetes, GitHub, Okta, and more) into a Neo4j graph database. It enables security and infrastructure teams to query cross-provider relationships like identity access, network exposure, and vulnerability impact using Cypher.
Use cases
- map cloud infrastructure assets into a graph database
- find which identities have access to which datastores across cloud providers
- detect internet-exposed compute instances
- analyze IAM privilege escalation paths in AWS
- track vulnerabilities and compromised packages across my environment
- visualize network paths in and out of my cloud environment
- inventory AI agents running in production and their permissions
- run drift detection on cloud resources
When to choose
- you need a unified asset inventory across multiple cloud providers and SaaS platforms
- you want to answer cross-account or cross-provider security questions with graph queries
- you're building custom security tooling on top of an infrastructure graph
- you need attack-path analysis combining identities, compute, and network data
When to avoid
- you need a turnkey commercial CSPM with dashboards and alerts out of the box
- you don't want to operate a Neo4j database
- you only need monitoring of a single cloud provider with simple built-in reports
- you need real-time streaming ingestion rather than periodic syncs
Facets
cli-tool · maturity active
database security monitoring cli etl security cloud-computing infrastructure-as-code databases developer-tools python cli cross-platform neo4j cloud-security asset-inventory graph-database cspm infrastructure-mapping aws gcp azure kubernetes attack-path-analysis graph-processing devops docker
5 sources
- readme: https://github.com/cartography-cncf/cartography · fetched 2026-08-28 · 266ba383ac80
- homepage: https://docs.cartography.dev/ · fetched 2026-08-29 · 460946091f25
- site_page: https://docs.cartography.dev/install.html · fetched 2026-08-29 · 5771cd71392e
- site_page: https://docs.cartography.dev/dev/index.html · fetched 2026-08-29 · 9eb785d636ec
- registry_pypi: https://pypi.org/pypi/cartography/json · fetched 2026-08-29 · e85e1eb844df
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| cartography-cncf/cartography | main | 98 |
For agents
markdown · JSON · MCP: product_card(name="cartography-cncf/cartography")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem