SubImage blog · Jul 2026
Case study showing Corelight using SubImage's graph as a core context layer for autonomous triage and security-agent workflows.
Company research
Public company, workplace, funding, and market signals
Updated Jul 29, 2026
Overview
SubImage is a San Francisco-based YC W25 cybersecurity startup that offers an open-core, fully managed security graph/CNAPP built on Cartography to map cloud and on-prem infrastructure, surface attack paths, and prioritize remediation.
Primary product
A fully managed open-core security graph platform for cloud/on-prem infrastructure mapping, attack-path analysis, and vulnerability remediation.
Founded
2024
Headquarters
San Francisco, California, United States
Team size
1-10 employees
Industry
Computer and Network Security
Sub-industry
Cloud security / CNAPP / CSPM / graph-based security analytics
Offices
San Francisco, CA, US
Business model
B2B SaaS
managed service
open-core
Funding
People & investors
Work & culture
Public materials describe a small, fast-moving team focused on security, infrastructure, and AI, with an open-core/community-powered mindset and a strong emphasis on transparency, inspectability, and attack-path thinking.
Compensation
A publicly posted Founding GTM role in San Francisco listed $80K-$115K salary plus 0.10% equity (1+ years' experience).
Product & market
Pricing
Direct partnership / enterprise-style fixed annual commitment scoped to environment complexity and deployment goals.
Differentiators
- —Open-core foundation built on Cartography
- —Fully managed, agentless platform with read-only API access
- —Attack-path analysis tied to real infrastructure context
- —Natural-language querying / chatbot for the graph
- —Customizable, schema-based integrations with low lock-in
- —Underlying graph and relationships remain visible and reproducible
- —Designed to prioritize only relevant, fixable risks
Technology
Cartography
AWS
Azure
GCP
Kubernetes
GitHub
GitLab
Okta
CrowdStrike
Semgrep
SentinelOne
Trivy
BigFix
Jamf
Kandji
Snipe-IT
Duo
Entra
Keycloak
OpenAI
Customers
Veriff
Neo4j
Corelight
Competitors
Wiz
Cartography
Scale & contact
Estimated revenue
≈$220K–$257K annual revenue (third-party estimates)
Latest news
SubImage blog · Jul 2026
Explains how SubImage/Cartography extends vulnerability management to a new cloud provider by reusing shared graph concepts.
SubImage blog · Jul 2026
Origin story for SubImage Issues, describing the company's remediation loop and lessons from large-scale vulnerability management.
SubImage blog · Jan 2026
Customer case study describing how Veriff used SubImage to assess React2Shell exposure quickly across hundreds of repos.
SubImage blog · Oct 2025
Official funding announcement for SubImage's $4.2M seed round.
Jobs and careers at SubImage
0 jobs at SubImage
No open positions
Check back later for new openings