SubImage

SubImage is a fully managed cloud-native application protection platform built on the Cartography open-source security graph project. It maps cloud, SaaS, identity, and on-premises infrastructure into a single graph so security teams can see what is exposed, what is misconfigured, and which risks to address first. The platform connects through a secure read-only API without agents or maintenance.

Core capabilities include Attack Path Analysis, which traces routes from internet-exposed entry points to critical assets and identifies the single fix that breaks each chain; Agentic Vulnerability Remediation, where repo-aware agents prioritize CVEs and generate fixes; CSPM with AI-tailored rules; and AI Asset Inventory powered by a graph ontology. Integrations span cloud providers (AWS, Azure, Google Cloud, Kubernetes, and others), identity providers (Okta, Entra, Duo, Keycloak), SaaS tools (GitHub, GitLab, Slack, Google Workspace), security products (CrowdStrike, Semgrep, Trivy), and AI providers (Anthropic, OpenAI). Findings can be queried directly and connected to SIEM, SOAR, or ticketing systems through open APIs.

SubImage is aimed at security teams managing complex multi-cloud and SaaS environments. It is sold through direct partnership, with pricing scoped to environment complexity and deployment goals as a fixed annual commitment.