subimage

open-core alternative to wiz, built by the team behind cartography!

[Emil Eifrem @emileifrem]

Security is such a graph and no one does it better than this team!

[subimage @subimagesec]

Graphs securing graphs.

Proud to work with @neo4j.

[alex chantavy @alexchantavy]

Big news: @neo4j, the world's leading graph intelligence platform, chose https://t.co/ubM1Wgcddh to secure their infrastructure.

Back in 2019, I helped open source Cartography, built on Neo4j. Years later, supporting Neo4j itself feels like a full-circle moment.

More soon!

[subimage @subimagesec]

dogfood is best food 🐶

[alex chantavy @alexchantavy]

we used our own product to fix react2shell last week: https://t.co/ygKGKVDbFB

read on for me bragging about subimage and cartography + some broader thoughts on vuln mgmt

[alex chantavy @alexchantavy]

another shai-hulud supply chain vuln, another cartography query to find that for you:

https://t.co/t769aJda5A

[subimage @subimagesec]

We're on Yahoo Finance!
https://t.co/9XNnCQ35we

[subimage @subimagesec]

🎉

[Y Combinator @ycombinator]

Congrats to @alexchantavy, @kunaalsikka, and @SubImageSec on their $4.2M seed!

From the creators of Cartography at @Lyft, SubImage is an open-core alternative to Wiz, using AI to show how vulnerabilities and access paths lead to compromise.

https://t.co/HpMp0e8sfN

[subimage @subimagesec]

And on the SubImage side, you can search for it with chat

[alex chantavy @alexchantavy]

you can check if you're affected by the npm debug and chalk compromise with this cartography query:

https://t.co/pTtGYYxTxM

[alex chantavy @alexchantavy]

We're hiring an intern at @subimagesec for next Summer 2026 in SF

https://t.co/ReFixPurdv

I wanted to share some tips that will help your application stand out

[alex chantavy @alexchantavy]

in this conclusion of the Sketchy Intern™️ series, we create baseline rules to track and be alerted if our intern can access more than we expect

will we ever catch anything? will @shyammukund2 get tired of this gag?

find out on the next episode of dragon ball Z 🐉⚡

[alex chantavy @alexchantavy]

in part 2 of our Sketchy Intern™️ series featuring @shyammukund2 , we drill down to view the underlying permissions graph of things he has access to

[subimage @subimagesec]

trust but verify :)

[alex chantavy @alexchantavy]

welcome to @shyammukund2 as our first intern at @subimagesec! here's how we locked down his access 😆