What it sells
The Open-Core Security Graph
Business model breakdown
Buyer: who owns the budget?
UnverifiedSecurity leaders (CISO/head of security) (inferred).
Trigger: what makes them buy now?
Cloud complexity leaves security teams without full visibility or relying on spreadsheets for vulnerabilities, misconfigurations and access risk.
Workflow: what inputs become what output?
Maps cloud and on-prem infrastructure into a graph, shows attack paths from internet exposure to crown jewels, prioritizes CVEs and misconfigurations, and agents generate fixes.
Economics: what it saves and how it charges
Open-core: free open-source Cartography drives adoption; commercial platform sold as a fixed annual commitment.
Distribution: how it reaches customers
Demo-led direct sales with each customer; open-source GitHub funnel.
Funding history and coverage
| Round date | Stage | Amount | Investors | Source |
|---|---|---|---|---|
| — | Y Combinator Winter 2025 | — | Y Combinator | ycombinator.com |
Profiles summarize public reporting and company websites. Business-model notes are MaxBC's reading of that material, not confirmed facts; unknowns are left blank rather than guessed. Updated 2026-10-12.