# SubImage

> SubImage is a San Francisco security startup building an open-core security graph that maps a company's cloud and SaaS infrastructure so teams can see who can access what, and why. Built by the original team behind Cartography, the open-source graph tool created at Lyft and now a CNCF project, SubImage sells a managed, agentless platform for attack path analysis, asset inventory, and misconfiguration detection. Backed by a $4.2M seed round, it positions itself as an open-core alternative to Wiz.

- **Founded:** 2024
- **Headquarters:** San Francisco, California, United States
- **Founders:** Alex Chantavy (Co-founder & CEO), Kunaal Sikka (Co-founder & President)
- **Team size:** 4-5 employees
- **Products:** Cartography, SubImage Platform, Agentic Vulnerability Remediation
- **Notable:** Created Cartography at Lyft (2019), now a CNCF project with ~4,000 GitHub stars, Cartography used by 70+ companies, including 7 of the Fortune 100, Raised $4.2M seed round before Demo Day

## Products & services

- **Cartography** — Open-source Python tool that pulls infrastructure assets and their relationships into a Neo4j graph database, with 30+ integrations across AWS, GCP, Azure, Okta, GitHub, Kubernetes and more. Created at Lyft in 2019, donated to open source, and now a CNCF project with roughly 4,000 GitHub stars, used by 70+ companies including 7 of the Fortune 100.
- **SubImage Platform** — Managed, agentless CNAPP built on Cartography. Provides attack path analysis, AI-powered asset inventory, cloud security posture management (CSPM), a natural-language query interface, and integrations with SIEM, SOAR, and ticketing systems. Agentless deployment uses read-only API access.
- **Agentic Vulnerability Remediation** — AI-driven workflows that surface risky infrastructure changes and help teams continuously remediate misconfigurations and exposures.

## Achievements

- Created Cartography at Lyft (2019), now a CNCF project with ~4,000 GitHub stars
- Cartography used by 70+ companies, including 7 of the Fortune 100
- Raised $4.2M seed round before Demo Day
- Only security company in its YC Winter 2025 batch
- 30+ platform integrations in the open-source core

## Latest updates

- **2025-11** — Announced $4.2M seed round (Y Combinator, Funders Club, Transpose Platform, Phosphor Capital, angels).
- **2025-02** — Launched publicly via Launch YC and Hacker News as an open-core security graph.
- **2024-08** — Cartography, the open-source foundation, accepted into the CNCF.

## Links

- Website: https://subimage.io
- LinkedIn: https://www.linkedin.com/company/subimagesec
- Twitter/X: https://x.com/subimagesec
- GitHub: https://github.com/cartography-cncf/cartography

---

Profile page: https://yespress.io/subimage-yc-w25
Published by YesPress — https://yespress.io
Last updated: 2026-07-30