Cartography

6.8easy start · #13 of 36
in Application Dependency Mapping Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on Linux, Mac, self-hosted, Windows.

Cartography is ranked #13 of 36 in application dependency mapping software on The Geeks Club. It runs on Linux, macOS, Self-hosted, Windows. There is a free plan.

Cartography plans and pricing

All plans

Cartography Free Open-source infrastructure mapping tool cartography.dev · 4 Oct 2026

Compared on application dependency mapping software

Deployment model: self_hosted

Best Cartography alternatives

See all 12

Netdata 0 of 4 in the starter kit Lesson 18.0 Dynatrace Kubernetes Monitoring 0 of 4 in the starter kit Lesson 27.9 Port 0 of 4 in the starter kit Lesson 37.6 uControl Asset Management 0 of 4 in the starter kit Lesson 47.4 New Relic Kubernetes Monitoring 0 of 4 in the starter kit Lesson 57.3 Backstage 0 of 4 in the starter kit Lesson 67.2

The record

Purpose: Cartography is an open-source tool for mapping infrastructure assets and their relationships in a Neo4j graph database.
Security questions: It helps investigate identity access to datastores, critical vulnerabilities, network paths, internet-exposed compute, and production AI agents and their permissions.
Project status: The project says it was created at Lyft and is now a CNCF Sandbox project.
Integrations: The project documentation lists integrations including AWS, GCP, Azure, Kubernetes, GitHub, Okta, Entra ID, CrowdStrike, and more than 30 other platforms.
Security rules: Cartography Rules provides predefined and custom security queries for identifying potential attack surfaces and security gaps in a populated graph.
Deployment: The install guide supports Docker Compose or native installation and requires a reachable Neo4j database.
Operating systems: The native install guide says Cartography should work on Linux, Mac, and Windows, while noting Windows has not been tested much.
Runtime requirements: The install guide specifies Python 3.13 and Neo4j 5.23 or higher; Python 3.11 and 3.12 may work but are not tested, and Python 3.10 and older are unsupported.
API permissions: For GitHub, Cartography supports fine-grained personal access tokens, classic personal access tokens, and GitHub Apps, with optional permissions allowing unavailable data to be skipped while ingestion continues.
Secret handling: The GitHub module reads secret metadata but never loads secret values.
Integration limit: The Orca Security module requires organization-wide read access; partial account, business-unit, or asset access is unsupported.
Support and community: The project directs bug reports and feature requests to GitHub Issues, broader discussions to GitHub Discussions, and community participation to the CNCF Slack #cartography channel.
License: The project repository states that Cartography is licensed under Apache 2.0.
Price from: Free

Where it ranks on The Geeks Club

Best Application Dependency Mapping Software in 2026#13 of 36

Is Cartography yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Cartography

Sources

cartography.dev· checked 4 Oct 2026
github.com/cartography-cncf/cartography· checked 4 Oct 2026
docs.cartography.dev/usage/rules.html· checked 4 Oct 2026
docs.cartography.dev/install.html· checked 4 Oct 2026
docs.cartography.dev/modules/github/config.html· checked 4 Oct 2026
docs.cartography.dev/modules/orca/config.html· checked 4 Oct 2026