| Name | cartography JSON |
| Version |
0.107.0
JSON |
| download |
| home_page | None |
| Summary | Explore assets and their relationships across your technical infrastructure. |
| upload_time | 2025-07-17 19:05:42 |
| maintainer | Cartography Contributors |
| docs_url | None |
| author | None |
| requires_python | >=3.10 |
| license | apache2 |
| keywords |
|
| VCS |
 |
| bugtrack_url |
|
| requirements |
No requirements were recorded.
|
| Travis-CI |
No Travis.
|
| coveralls test coverage |
No coveralls.
|
[](https://scorecard.dev/viewer/?uri=github.com/cartography-cncf/cartography)
[](https://www.bestpractices.dev/projects/9637)
Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a [Neo4j](https://www.neo4j.com) database.
## Why Cartography?
Cartography aims to enable a broad set of exploration and automation scenarios. It is particularly good at exposing otherwise hidden dependency relationships between your service's assets so that you may validate assumptions about security risks.
Service owners can generate asset reports, Red Teamers can discover attack paths, and Blue Teamers can identify areas for security improvement. All can benefit from using the graph for manual exploration through a web frontend interface, or in an automated fashion by calling the APIs.
Cartography is not the only [security](https://github.com/dowjones/hammer) [graph](https://github.com/BloodHoundAD/BloodHound) [tool](https://github.com/Netflix/security_monkey) [out](https://github.com/vysecurity/ANGRYPUPPY) [there](https://github.com/duo-labs/cloudmapper), but it differentiates itself by being fully-featured yet generic and [extensible](https://cartography-cncf.github.io/cartography/dev/writing-analysis-jobs.html) enough to help make anyone better understand their risk exposure, regardless of what platforms they use. Rather than being focused on one core scenario or attack vector like the other linked tools, Cartography focuses on flexibility and exploration.
You can learn more about the story behind Cartography in our [presentation at BSidesSF 2019](https://www.youtube.com/watch?v=ZukUmZSKSek).
## Supported platforms
- [Airbyte](https://cartography-cncf.github.io/cartography/modules/airbyte/index.html) - Organization, Workspace, User, Source, Destination, Connection, Tag, Stream
- [Amazon Web Services](https://cartography-cncf.github.io/cartography/modules/aws/index.html) - ACM, API Gateway, CloudWatch, CodeBuild, Config, EC2, ECS, ECR, Elasticsearch, Elastic Kubernetes Service (EKS), DynamoDB, IAM, Inspector, KMS, Lambda, RDS, Redshift, Route53, S3, Secrets Manager(Secret Versions), Security Hub, SQS, SSM, STS, Tags
- [Anthropic](https://cartography-cncf.github.io/cartography/modules/anthropic/index.html) - Organization, ApiKey, User, Workspace
- [BigFix](https://cartography-cncf.github.io/cartography/modules/bigfix/index.html) - Computers
- [Cloudflare](https://cartography-cncf.github.io/cartography/modules/cloudflare/index.html) - Account, Role, Member, Zone, DNSRecord
- [Crowdstrike Falcon](https://cartography-cncf.github.io/cartography/modules/crowdstrike/index.html) - Hosts, Spotlight vulnerabilities, CVEs
- [DigitalOcean](https://cartography-cncf.github.io/cartography/modules/digitalocean/index.html)
- [Duo](https://cartography-cncf.github.io/cartography/modules/duo/index.html) - Users, Groups, Endpoints
- [GitHub](https://cartography-cncf.github.io/cartography/modules/github/index.html) - repos, branches, users, teams
- [Google Cloud Platform](https://cartography-cncf.github.io/cartography/modules/gcp/index.html) - Cloud Resource Manager, Compute, DNS, Storage, Google Kubernetes Engine
- [Google GSuite](https://cartography-cncf.github.io/cartography/modules/gsuite/index.html) - users, groups
- [Kandji](https://cartography-cncf.github.io/cartography/modules/kandji/index.html) - Devices
- [Kubernetes](https://cartography-cncf.github.io/cartography/modules/kubernetes/index.html) - Cluster, Namespace, Service, Pod, Container
- [Lastpass](https://cartography-cncf.github.io/cartography/modules/lastpass/index.html) - users
- [Microsoft Azure](https://cartography-cncf.github.io/cartography/modules/azure/index.html) - CosmosDB, SQL, Storage, Virtual Machine
- [Microsoft Entra ID](https://cartography-cncf.github.io/cartography/modules/entra/index.html) - Users
- [NIST CVE](https://cartography-cncf.github.io/cartography/modules/cve/index.html) - Common Vulnerabilities and Exposures (CVE) data from NIST database
- [Okta](https://cartography-cncf.github.io/cartography/modules/okta/index.html) - users, groups, organizations, roles, applications, factors, trusted origins, reply URIs
- [OpenAI](https://cartography-cncf.github.io/cartography/modules/openai/index.html) - Organization, AdminApiKey, User, Project, ServiceAccount, ApiKey
- [Oracle Cloud Infrastructure](https://cartography-cncf.github.io/cartography/modules/oci/index.html) - IAM
- [PagerDuty](https://cartography-cncf.github.io/cartography/modules/pagerduty/index.html) - Users, teams, services, schedules, escalation policies, integrations, vendors
- [Scaleway](https://cartography-cncf.github.io/cartography/modules/scaleway/index.html) - Projects, IAM, Local Storage, Instances
- [SentinelOne](https://cartography-cncf.github.io/cartography/modules/sentinelone/index.html) - Accounts, Agents
- [SnipeIT](https://cartography-cncf.github.io/cartography/modules/snipeit/index.html) - Users, Assets
- [Tailscale](https://cartography-cncf.github.io/cartography/modules/tailscale/index.html) - Tailnet, Users, Devices, Groups, Tags, PostureIntegrations
- [Trivy Scanner](https://cartography-cncf.github.io/cartography/modules/trivy/index.html) - AWS ECR Images
## Philosophy
Here are some points that can help you decide if adopting Cartography is a good fit for your problem.
### What Cartography is
- A simple Python script that pulls data from multiple providers and writes it to a Neo4j graph database in batches.
- A powerful analysis tool that captures the current snapshot of the environment, building a uniquely useful inventory where you can ask complex questions such as:
- Which identities have access to which datastores?
- What are the cross-tenant permission relationships in the environment?
- What are the network paths in and out of the environment?
- What are the backup policies for my datastores?
- Battle-tested in production by [many companies](#who-uses-cartography).
- Straightforward to extend with your own custom plugins.
- Provides a useful data-plane that you can build automation and CSPM (Cloud Security Posture Management) applications on top of.
### What Cartography is not
- A near-real time capability.
- Cartography is not designed for very fast updates. Cartography writes to the database in a batches (not streamed).
- Cartography is also limited by how most upstream sources only provide APIs to retrieve assets in a batched manner.
- By itself, Cartography does not capture data changes over time.
- Although we do include a [drift detection](https://cartography-cncf.github.io/cartography/usage/drift-detect.html) feature.
- It's also possible to implement other processes in your Cartography installation to make this happen.
## Install and configure
### Trying out Cartography on a test machine
Start [here](https://cartography-cncf.github.io/cartography/install.html) to set up a test graph and get data into it.
### Setting up Cartography in production
When you are ready to try it in production, read [here](https://cartography-cncf.github.io/cartography/ops.html) for recommendations on getting cartography spun up in your environment.
## Usage
### Querying the database directly
Now that data is in the graph, you can quickly start with our [querying tutorial](https://cartography-cncf.github.io/cartography/usage/tutorial.html). Our [data schema](https://cartography-cncf.github.io/cartography/usage/schema.html) is a helpful reference when you get stuck.
### Building applications around Cartography
Directly querying Neo4j is already very useful as a sort of "swiss army knife" for security data problems, but you can also build applications and data pipelines around Cartography. View this doc on [applications](https://cartography-cncf.github.io/cartography/usage/applications.html).
## Community
- Hang out with us on Slack: Join the CNCF Slack workspace [here](https://communityinviter.com/apps/cloud-native/cncf), and then join the `#cartography` channel.
- Talk to us and see what we're working on at our [monthly community meeting](https://zoom-lfx.platform.linuxfoundation.org/meetings/cartography?view=week).
- Meeting minutes are [here](https://docs.google.com/document/d/1VyRKmB0dpX185I15BmNJZpfAJ_Ooobwz0U1WIhjDxvw).
- Recorded videos from before 2025 are posted [here](https://www.youtube.com/playlist?list=PLMga2YJvAGzidUWJB_fnG7EHI4wsDDsE1).
## License
This project is licensed under the [Apache 2.0 License](LICENSE).
## Contributing
Thank you for considering contributing to Cartography!
### Code of conduct
All contributors and participants of this project must follow the [CNCF code of conduct](https://github.com/cncf/foundation/blob/main/code-of-conduct.md).
### Bug reports and feature requests and discussions
Submit a GitHub issue to report a bug or request a new feature. If we decide that the issue needs more discussion - usually because the scope is too large or we need to make careful decision - we will convert the issue to a [GitHub Discussion](https://github.com/cartography-cncf/cartography/discussions).
### Developing Cartography
Get started with our [developer documentation](https://cartography-cncf.github.io/cartography/dev/developer-guide.html). Please feel free to submit your own PRs to update documentation if you've found a better way to explain something.
## Who uses Cartography?
1. [Lyft](https://www.lyft.com)
1. [Thought Machine](https://thoughtmachine.net/)
1. [MessageBird](https://messagebird.com)
1. [Cloudanix](https://www.cloudanix.com/)
1. [Corelight](https://www.corelight.com/)
1. [SubImage](https://subimage.io)
1. {Your company here} :-)
If your organization uses Cartography, please file a PR and update this list. Say hi on Slack too!
---
Cartography is a [Cloud Native Computing Foundation](https://www.cncf.io/) sandbox project.<br>
<div style="background-color: white; display: inline-block; padding: 10px;">
<img src="docs/root/images/cncf-color.png" alt="CNCF Logo" width="200">
</div>
Raw data
{
"_id": null,
"home_page": null,
"name": "cartography",
"maintainer": "Cartography Contributors",
"docs_url": null,
"requires_python": ">=3.10",
"maintainer_email": null,
"keywords": null,
"author": null,
"author_email": null,
"download_url": "https://files.pythonhosted.org/packages/96/98/09fef47c6d17980bf7c90b02e906f57da32c7b45195630fe0667ff58ef03/cartography-0.107.0.tar.gz",
"platform": null,
"description": "\n\n[](https://scorecard.dev/viewer/?uri=github.com/cartography-cncf/cartography)\n[](https://www.bestpractices.dev/projects/9637)\n\n\n\n\nCartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a [Neo4j](https://www.neo4j.com) database.\n\n\n\n## Why Cartography?\nCartography aims to enable a broad set of exploration and automation scenarios. It is particularly good at exposing otherwise hidden dependency relationships between your service's assets so that you may validate assumptions about security risks.\n\nService owners can generate asset reports, Red Teamers can discover attack paths, and Blue Teamers can identify areas for security improvement. All can benefit from using the graph for manual exploration through a web frontend interface, or in an automated fashion by calling the APIs.\n\nCartography is not the only [security](https://github.com/dowjones/hammer) [graph](https://github.com/BloodHoundAD/BloodHound) [tool](https://github.com/Netflix/security_monkey) [out](https://github.com/vysecurity/ANGRYPUPPY) [there](https://github.com/duo-labs/cloudmapper), but it differentiates itself by being fully-featured yet generic and [extensible](https://cartography-cncf.github.io/cartography/dev/writing-analysis-jobs.html) enough to help make anyone better understand their risk exposure, regardless of what platforms they use. Rather than being focused on one core scenario or attack vector like the other linked tools, Cartography focuses on flexibility and exploration.\n\nYou can learn more about the story behind Cartography in our [presentation at BSidesSF 2019](https://www.youtube.com/watch?v=ZukUmZSKSek).\n\n\n## Supported platforms\n- [Airbyte](https://cartography-cncf.github.io/cartography/modules/airbyte/index.html) - Organization, Workspace, User, Source, Destination, Connection, Tag, Stream\n- [Amazon Web Services](https://cartography-cncf.github.io/cartography/modules/aws/index.html) - ACM, API Gateway, CloudWatch, CodeBuild, Config, EC2, ECS, ECR, Elasticsearch, Elastic Kubernetes Service (EKS), DynamoDB, IAM, Inspector, KMS, Lambda, RDS, Redshift, Route53, S3, Secrets Manager(Secret Versions), Security Hub, SQS, SSM, STS, Tags\n- [Anthropic](https://cartography-cncf.github.io/cartography/modules/anthropic/index.html) - Organization, ApiKey, User, Workspace\n- [BigFix](https://cartography-cncf.github.io/cartography/modules/bigfix/index.html) - Computers\n- [Cloudflare](https://cartography-cncf.github.io/cartography/modules/cloudflare/index.html) - Account, Role, Member, Zone, DNSRecord\n- [Crowdstrike Falcon](https://cartography-cncf.github.io/cartography/modules/crowdstrike/index.html) - Hosts, Spotlight vulnerabilities, CVEs\n- [DigitalOcean](https://cartography-cncf.github.io/cartography/modules/digitalocean/index.html)\n- [Duo](https://cartography-cncf.github.io/cartography/modules/duo/index.html) - Users, Groups, Endpoints\n- [GitHub](https://cartography-cncf.github.io/cartography/modules/github/index.html) - repos, branches, users, teams\n- [Google Cloud Platform](https://cartography-cncf.github.io/cartography/modules/gcp/index.html) - Cloud Resource Manager, Compute, DNS, Storage, Google Kubernetes Engine\n- [Google GSuite](https://cartography-cncf.github.io/cartography/modules/gsuite/index.html) - users, groups\n- [Kandji](https://cartography-cncf.github.io/cartography/modules/kandji/index.html) - Devices\n- [Kubernetes](https://cartography-cncf.github.io/cartography/modules/kubernetes/index.html) - Cluster, Namespace, Service, Pod, Container\n- [Lastpass](https://cartography-cncf.github.io/cartography/modules/lastpass/index.html) - users\n- [Microsoft Azure](https://cartography-cncf.github.io/cartography/modules/azure/index.html) - CosmosDB, SQL, Storage, Virtual Machine\n- [Microsoft Entra ID](https://cartography-cncf.github.io/cartography/modules/entra/index.html) - Users\n- [NIST CVE](https://cartography-cncf.github.io/cartography/modules/cve/index.html) - Common Vulnerabilities and Exposures (CVE) data from NIST database\n- [Okta](https://cartography-cncf.github.io/cartography/modules/okta/index.html) - users, groups, organizations, roles, applications, factors, trusted origins, reply URIs\n- [OpenAI](https://cartography-cncf.github.io/cartography/modules/openai/index.html) - Organization, AdminApiKey, User, Project, ServiceAccount, ApiKey\n- [Oracle Cloud Infrastructure](https://cartography-cncf.github.io/cartography/modules/oci/index.html) - IAM\n- [PagerDuty](https://cartography-cncf.github.io/cartography/modules/pagerduty/index.html) - Users, teams, services, schedules, escalation policies, integrations, vendors\n- [Scaleway](https://cartography-cncf.github.io/cartography/modules/scaleway/index.html) - Projects, IAM, Local Storage, Instances\n- [SentinelOne](https://cartography-cncf.github.io/cartography/modules/sentinelone/index.html) - Accounts, Agents\n- [SnipeIT](https://cartography-cncf.github.io/cartography/modules/snipeit/index.html) - Users, Assets\n- [Tailscale](https://cartography-cncf.github.io/cartography/modules/tailscale/index.html) - Tailnet, Users, Devices, Groups, Tags, PostureIntegrations\n- [Trivy Scanner](https://cartography-cncf.github.io/cartography/modules/trivy/index.html) - AWS ECR Images\n\n\n## Philosophy\nHere are some points that can help you decide if adopting Cartography is a good fit for your problem.\n\n### What Cartography is\n- A simple Python script that pulls data from multiple providers and writes it to a Neo4j graph database in batches.\n- A powerful analysis tool that captures the current snapshot of the environment, building a uniquely useful inventory where you can ask complex questions such as:\n - Which identities have access to which datastores?\n - What are the cross-tenant permission relationships in the environment?\n - What are the network paths in and out of the environment?\n - What are the backup policies for my datastores?\n- Battle-tested in production by [many companies](#who-uses-cartography).\n- Straightforward to extend with your own custom plugins.\n- Provides a useful data-plane that you can build automation and CSPM (Cloud Security Posture Management) applications on top of.\n\n### What Cartography is not\n- A near-real time capability.\n - Cartography is not designed for very fast updates. Cartography writes to the database in a batches (not streamed).\n - Cartography is also limited by how most upstream sources only provide APIs to retrieve assets in a batched manner.\n- By itself, Cartography does not capture data changes over time.\n - Although we do include a [drift detection](https://cartography-cncf.github.io/cartography/usage/drift-detect.html) feature.\n - It's also possible to implement other processes in your Cartography installation to make this happen.\n\n\n## Install and configure\n\n### Trying out Cartography on a test machine\nStart [here](https://cartography-cncf.github.io/cartography/install.html) to set up a test graph and get data into it.\n\n### Setting up Cartography in production\nWhen you are ready to try it in production, read [here](https://cartography-cncf.github.io/cartography/ops.html) for recommendations on getting cartography spun up in your environment.\n\n## Usage\n\n### Querying the database directly\n\n\n\nNow that data is in the graph, you can quickly start with our [querying tutorial](https://cartography-cncf.github.io/cartography/usage/tutorial.html). Our [data schema](https://cartography-cncf.github.io/cartography/usage/schema.html) is a helpful reference when you get stuck.\n\n### Building applications around Cartography\nDirectly querying Neo4j is already very useful as a sort of \"swiss army knife\" for security data problems, but you can also build applications and data pipelines around Cartography. View this doc on [applications](https://cartography-cncf.github.io/cartography/usage/applications.html).\n\n\n## Community\n\n- Hang out with us on Slack: Join the CNCF Slack workspace [here](https://communityinviter.com/apps/cloud-native/cncf), and then join the `#cartography` channel.\n- Talk to us and see what we're working on at our [monthly community meeting](https://zoom-lfx.platform.linuxfoundation.org/meetings/cartography?view=week).\n - Meeting minutes are [here](https://docs.google.com/document/d/1VyRKmB0dpX185I15BmNJZpfAJ_Ooobwz0U1WIhjDxvw).\n - Recorded videos from before 2025 are posted [here](https://www.youtube.com/playlist?list=PLMga2YJvAGzidUWJB_fnG7EHI4wsDDsE1).\n\n## License\n\nThis project is licensed under the [Apache 2.0 License](LICENSE).\n\n## Contributing\nThank you for considering contributing to Cartography!\n\n### Code of conduct\nAll contributors and participants of this project must follow the [CNCF code of conduct](https://github.com/cncf/foundation/blob/main/code-of-conduct.md).\n\n### Bug reports and feature requests and discussions\nSubmit a GitHub issue to report a bug or request a new feature. If we decide that the issue needs more discussion - usually because the scope is too large or we need to make careful decision - we will convert the issue to a [GitHub Discussion](https://github.com/cartography-cncf/cartography/discussions).\n\n### Developing Cartography\n\nGet started with our [developer documentation](https://cartography-cncf.github.io/cartography/dev/developer-guide.html). Please feel free to submit your own PRs to update documentation if you've found a better way to explain something.\n\n## Who uses Cartography?\n\n1. [Lyft](https://www.lyft.com)\n1. [Thought Machine](https://thoughtmachine.net/)\n1. [MessageBird](https://messagebird.com)\n1. [Cloudanix](https://www.cloudanix.com/)\n1. [Corelight](https://www.corelight.com/)\n1. [SubImage](https://subimage.io)\n1. {Your company here} :-)\n\nIf your organization uses Cartography, please file a PR and update this list. Say hi on Slack too!\n\n---\n\nCartography is a [Cloud Native Computing Foundation](https://www.cncf.io/) sandbox project.<br>\n<div style=\"background-color: white; display: inline-block; padding: 10px;\">\n <img src=\"docs/root/images/cncf-color.png\" alt=\"CNCF Logo\" width=\"200\">\n</div>\n",
"bugtrack_url": null,
"license": "apache2",
"summary": "Explore assets and their relationships across your technical infrastructure.",
"version": "0.107.0",
"project_urls": {
"Changelog": "https://github.com/cartography-cncf/cartography/releases",
"Documentation": "https://cartography-cncf.github.io/cartography",
"Homepage": "https://cartography-cncf.github.io/cartography",
"Issues": "https://github.com/cartography-cncf/cartography/issues",
"Repository": "https://github.com/cartography-cncf/cartography"
},
"split_keywords": [],
"urls": [
{
"comment_text": null,
"digests": {
"blake2b_256": "b2b00b08c55abf6735cdba38015161c208344eb1a94e41b5bd93d234d63b24ea",
"md5": "eb683c2605c337f568d209b9448f0b55",
"sha256": "e45c778041965c5f19226b38322f2df237c27583f9b1f8ef689f13979b6ce702"
},
"downloads": -1,
"filename": "cartography-0.107.0-py3-none-any.whl",
"has_sig": false,
"md5_digest": "eb683c2605c337f568d209b9448f0b55",
"packagetype": "bdist_wheel",
"python_version": "py3",
"requires_python": ">=3.10",
"size": 608080,
"upload_time": "2025-07-17T19:05:38",
"upload_time_iso_8601": "2025-07-17T19:05:38.972359Z",
"url": "https://files.pythonhosted.org/packages/b2/b0/0b08c55abf6735cdba38015161c208344eb1a94e41b5bd93d234d63b24ea/cartography-0.107.0-py3-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": null,
"digests": {
"blake2b_256": "969809fef47c6d17980bf7c90b02e906f57da32c7b45195630fe0667ff58ef03",
"md5": "9cba4467f897570692f3594f7aacd2a4",
"sha256": "9f91112b1ef02a0a604ca1636439705ff1bc00b746b5b62d6dab05ba50a09220"
},
"downloads": -1,
"filename": "cartography-0.107.0.tar.gz",
"has_sig": false,
"md5_digest": "9cba4467f897570692f3594f7aacd2a4",
"packagetype": "sdist",
"python_version": "source",
"requires_python": ">=3.10",
"size": 7643792,
"upload_time": "2025-07-17T19:05:42",
"upload_time_iso_8601": "2025-07-17T19:05:42.854873Z",
"url": "https://files.pythonhosted.org/packages/96/98/09fef47c6d17980bf7c90b02e906f57da32c7b45195630fe0667ff58ef03/cartography-0.107.0.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2025-07-17 19:05:42",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "cartography-cncf",
"github_project": "cartography",
"travis_ci": false,
"coveralls": false,
"github_actions": true,
"lcname": "cartography"
}
