Recent Posts
Adding Scaleway to Cartography without rewriting vulnerability management
How shared graph concepts let a new cloud provider reuse the existing path from a running container to a CVE, fix, source repository, and owner.
Screwing up vulnerability management at scale, and building a startup to fix it
Introducing Subimage Issues: the vulnerability remediation loop I always needed but could never build
What it's like being the only security company in your YC batch
Alex Chantavy's guest post on Venture in Security about building Subimage through YC and why security startups follow a different playbook.
Shift-right: attack path analysis that never wastes a good incident
Each incident response should leave fewer attack paths than the last
Cartography inventories AI agents in cloud environments
Alex Chantavy's Cartography post on using AIBOM scans and infrastructure graph context to find AI agents, the tools they use, and what they can reach.
How Veriff Evaluated React2Shell Risk Across 600 Repos in Minutes With Subimage
7 million findings and a different approach
How we used Subimage to fix React2Shell on our own infrastructure
How we used Subimage to fix React2Shell on our own infrastructure
We've raised $4.2M
We're funded, and here's where we're going next!
Unifying the Graph: Why We Introduced an Ontology in Cartography
How Cartography's ontology adds a shared semantic layer for correlating users, devices, vulnerabilities, and other entities across data sources.