Snapshot
Continue to About ↓- What it does
- Subimage is an open-core security graph, investigation tool and CNAPP that pulls cloud resources, identities, code repositories and devices into one graph, then maps how an attacker could reach sensitive assets.
More detail
- It turns findings into prioritized issues, routed tickets and pull requests, with both deterministic attack-path analysis and AI agents.
- Best for
- Security engineering, red and blue teams that need graph-based attack-path investigation, vulnerability triage and remediation routing across cloud, identity, code and devices.
More detail
- Also fits teams already running Cartography that want a managed version with prioritization, attack paths, RBAC/SSO and historical data.
- Pricing
- Custom quote based on environment size, complexity and deployment goals, described as "one price, unlimited usage" with all features included and no hidden fees or upcharges.
More detail
- The exact price, minimum commitment, contract term and any per-seat or per-resource components are undisclosed.
- A no-cost tri
- Main limitation
- Buyers who need published list pricing, since Subimage quotes custom pricing only.
More detail
- Poor fit for teams wanting a pure open-source tool, for which the vendor itself points to Cartography, and fit for very small environments is unknown.
- Record
- Static profile
- Reviewed
- Evidence
- Public web research
- Machine access
- Structured profile ↗
About
- Subimage is an open-core security graph, investigation tool and CNAPP that pulls cloud resources, identities, code repositories and devices into one graph, then maps how an attacker could reach sensitive assets.
- It turns findings into prioritized issues, routed tickets and pull requests, with both deterministic attack-path analysis and AI agents.
What it helps with
- Blind spots where misconfigurations and access paths from the internet to sensitive assets go unseen
- Long, undifferentiated vulnerability lists that lack fix-first ordering
- Manual triage and ticket routing to the right owner
- Reconciling security findings scattered across separate tools
- Identity and service-account trust chains that are hard to follow across boundaries
- Remediation work that stalls between finding and pull request
Capabilities
A practical view of what is available and where limitations apply.
| Offering | Available | Detail |
|---|---|---|
| Security graph | Yes | Hourly read-only scans link cloud resources, identities, code and devices in one graph. |
| Graph explorer and Cypher queries | Yes | Team-accessible explorer with custom rules written in Cypher. |
| Attack path analysis | Yes | Deterministic engine maps internet exposure, vulnerability exploitation, identity usage and exfiltration routes. |
| Vulnerability management | Yes | CVEs, vulnerable packages, affected images and auto-triage action items. |
| Identity and access tracing | Yes | Follows users and service accounts across chained trust boundaries. |
| Ownership routing | Yes | Uses commit history, CODEOWNERS and org charts to guess assignees, then routes to Linear, Jira, Slack, webhooks or MCP. |
| Automated remediation pull requests | Yes | Investigation Agent opens pull requests and issues auto-close when signals resolve. |
| MCP and agent integration | Yes | Connect via MCP and bring your own agent; open APIs and webhooks. |
| RBAC and SSO | Yes | Enterprise controls listed alongside 2FA, team management and a secrets vault. |
| Published list pricing | No | Custom quote only; exact figures, minimums and terms are undisclosed. |
Bot trust
How confidently AI systems can verify this profile from public evidence.
—of 100
ChatGPT—/100
Claude—/100
This profile has not completed a Bot Score assessment yet.
Evidence
Where this record came from, when it was reviewed, and how confidently it can be used.
- Verification
- Scribble researched these facts from the linked public sources.
- The owner has not manually confirmed every field.
- Last reviewed
- Primary source
- subimage.io
Technical profile details
Record ID
d1f3d9ed-719f-4d5f-baed-7e13be6c8b57Canonical URLhttps://profiles.scribble.network/listing/subimage-d1f3d9ed