Skip to main content
The Graph Explorer provides an interactive, visual interface for navigating your organizational knowledge graph. It allows you to explore entities as nodes, understand how they relate to each other through relationships, inspect node-level details, and focus on the parts of the graph that matter most through filtering and dynamic layout controls. Kubiya Platform Overview This view is ideal for analyzing structure, discovering dependencies, or visually investigating how resources, identities, policies, and other objects are connected across your systems.

Prerequisites

To work effectively with the Graph Explorer:
  • At least one integration or data source must supply entities and relationships
  • The Context Graph must contain a meaningful number of nodes for exploration
  • Data types and labels must be ingested before filter options become available
Without connected data, the graph will load but contain few or no visualized nodes.

Page Layout and Components

The Graph Explorer consists of three primary areas:
  1. Filters Panel (left): controls what subset of the graph is shown
  2. Toolbar (top): actions such as reload, re-arrange, node limit selection, and search
  3. Graph Canvas (center): the interactive visualization
  4. Node Details Panel (right, when a node is selected): properties, labels, metadata, navigation to full details
These components work together to provide both a high-level overview and deep inspection of any entity.

Filters Panel

Kubiya Platform Overview

Data Sources

This section displays all data sources present in the graph, such as:
  • AWS
  • CSV
  • Custom
  • Unknown
Each data source tag shows a count of nodes originating from that source. Selecting a data source filter limits the graph to only entities created by that ingestion path.

Entity Types

The Entity Types section lists all node labels available in the graph, each with a count of how many nodes of that type exist. Examples include:
  • AWSUser
  • AWSRole
  • AWSPolicy
  • AWSManagedPolicy
  • AWSAccount
  • AWSPrincipal, AWSRootPrincipal
  • IntegrationAws, IntegrationCsv, IntegrationCustom
  • and many others depending on the dataset
Selecting one or more labels filters the visualization to nodes of those types only.

Active Filters

When filters are applied, they appear in a dedicated Active Filters section, allowing users to:
  • See which filters are currently affecting the visualization
  • Remove individual filters directly
  • Clear all filters at once
This helps maintain visibility into how the graph view is being constrained.

Toolbar Actions

Reload

Refreshes the visual graph by re-fetching nodes and relationships according to the current filters. Useful after data source updates or when switching between environments.

Re-arrange

Recalculates the graph layout and redistributes nodes. This is especially helpful when:
  • Switching filters
  • Zooming in/out
  • The layout becomes visually cluttered
  • You want a cleaner, more readable layout
The graph engine repositions nodes for optimal clarity while preserving the structure of relationships.

Node Limit Selector

A dropdown lets users choose how many nodes to load into the canvas at once:
  • 50 nodes
  • 100 nodes
  • 250 nodes
  • 500 nodes
  • 1000 nodes
Smaller views load faster and are easier to interpret, while larger views provide a more complete picture of complex systems. The current node/edge count is always shown (e.g., 100 nodes, 208 edges).

Search (Filter Nodes…)

Provides text-based filtering across node names and key properties. Typing in this field dynamically reduces the graph to only nodes matching the query. This is useful for locating:
  • Specific resource names
  • IAM identities
  • Policies
  • Custom integration records
  • Any node identifiable by ingested metadata

Graph Canvas

Kubiya Platform Overview The main visualization shows nodes and edges with:
  • Entity type labels
  • Relationship names (e.g., POLICY)
  • Clusters where resources are heavily interconnected
  • A miniature map in the bottom-right for navigation

Interaction Capabilities

Users can:
  • Pan across the graph
  • Zoom in or out
  • Drag nodes to manually reposition them
  • Click a node to open its details
  • Hover for quick type/label confirmation
The canvas dynamically updates with every filter or limit change.

Node Details Panel

Kubiya Platform Overview Clicking any node opens a detailed information panel on the right. This panel includes:

Labels

All labels assigned to the node, such as:
  • AWSPolicy
  • AWSManagedPolicy
  • IntegrationAws

Properties

Structured properties ingested from the data source, such as:
  • Name
  • Type
  • ARNs (for AWS resources)
  • Identifiers
  • Any relevant metadata included by the integration

Metadata

Graph-level metadata:
  • Node ID
  • First Seen timestamp
  • Last Updated timestamp
These values help trace ingestion history and verify data freshness.

Relationships

Shows connected nodes, including number of inbound/outbound links. This helps understand how a node fits into the greater graph topology.

View Full Details

A link that takes the user to a dedicated page for the selected entity in the Entities section. That page includes:
  • Full raw JSON
  • All relationships
  • Property expansion
  • Full metadata
  • Structured navigation between entities
This is the primary way to jump deeper into an entity after discovering it in the graph.

Graph Loading and Update Behavior

When the Graph Explorer fetches updated data due to filter changes or reload actions, users see:
  • A progress indicator (e.g., Updating relationships 100/100)
  • A loading animation
  • Gradual completion of relationship fetches
The graph is rendered only after loading is fully complete to avoid partial or inaccurate layouts.

How the Graph Explorer Helps

The Graph Explorer is commonly used to:
  • Trace AWS IAM permission relationships
  • Inspect associations between policies, users, roles, and managed policies
  • Explore network-level relationships between subnets, ACLs, and routes
  • Identify dependencies between resources
  • Visually debug unexpected resource or identity relationships
  • Detect missing, misconfigured, or overly-permissive links
  • Understand how custom ingestion data connects to cloud or identity systems
It is the most intuitive way to see your environment as a connected system rather than as isolated objects.

What’s Next

The Graph Explorer gives you a visual understanding of your data. The following sections allow you to continue exploring the same dataset through other views:
  • Entities Inspect every node in a structured table, open detailed views, and explore properties and metadata.
  • Queries Write and execute Cypher queries to search and analyze the graph programmatically.
  • Data Sources Review the integrations feeding the graph, verify ingestion, and add new sources.