EN
ENNA

Cartography vs CloudSploit

GitHub Stats

3.8k
Stars
3.7k
507
Forks
739
140
Issues
207
4d ago
Updated
1mo ago
Apache-2.0
License
GPL-3.0
Python
Language
JavaScript

About Cartography

Cartography is a Python tool developed by Lyft that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by Neo4j. It ingests data from AWS, GCP, Azure, Okta, GitHub, and other services to build a comprehensive map of your cloud environment. Security teams use Cartography to identify attack paths, find misconfigurations, and understand blast radius by querying relationships between resources like EC2 instances, S3 buckets, IAM roles, and security groups. Its graph-based approach makes it easy to ask questions like 'which instances can reach this database' or 'which IAM users have admin access across accounts' that would be extremely difficult with flat inventory tools.

About CloudSploit

CloudSploit is an open-source security configuration scanner for cloud environments, including AWS, Azure, GCP, and Oracle Cloud. It detects misconfigurations and security risks by analyzing cloud service settings against best practices. Written in JavaScript, CloudSploit is used by security teams to identify vulnerabilities in cloud infrastructure and ensure compliance with security standards. Its comprehensive coverage makes it a critical tool for cloud security monitoring.

Platform Support

🐧linux🍎macos
🐧linux🍎macos🪟windows

Tags

Shared

awsazure

Cartography only

cloud-graphneo4jgcpattack-pathasset-inventory

CloudSploit only

cloud-securitymisconfiguration