How Is Device Health Tracked?
Continuous SNMP, ICMP, and agent-based polling across every node in your fleet. Know the moment something drifts.
Continuous monitoring, configuration management, and credential security from the NOC workspace on your own appliance — so your team can focus on building, not firefighting.
Six disciplines. One pane of glass. Every alert earned, never assumed.
Continuous SNMP, ICMP, and agent-based polling across every node in your fleet. Know the moment something drifts.
Automated baseline comparisons with instant diff alerts. No more surprise misconfigurations at 2 AM.
Centralized IPAM with subnet visualization, conflict detection, and historical allocation tracking.
Encrypted vaulting with role-scoped access, automatic rotation policies, and full audit trails on every retrieval.
Recorded SSH and console sessions with searchable playback. Every keystroke accounted for, every change traceable.
Intelligent deduplication and severity classification so your team responds to signals, not noise.
Whether you're a three-person team or a large enterprise, the same self-hosted appliance meets you where you are — and grows with you.
5 – 15 devices
One engineer wearing every hat. You need automated monitoring that watches while you sleep — not another dashboard to babysit.
50 – 200 devices
The team is growing and so is the blast radius of a bad change. You need collaboration tooling, RBAC, and audit trails that hold up under scrutiny.
500+ devices
Many sites, many teams, and zero room for error. You need a platform that scales without surprises — and an audit trail on every change and every credential retrieval.
Three self-serve steps, about ten minutes from image to a working appliance. Grab the image from the downloads page and follow the install & first-boot guide.
Grab the current release from the downloads page and verify its SHA-256 checksum. The OVA imports into VMware or VirtualBox; the ISO installs on bare metal or a custom VM.
Open the appliance console and the setup wizard walks you through the admin account and recovery key, network, time and NTP, hostname, and TLS certificate — then verifies every answer.
Browse to the web address the console shows when the wizard finishes, sign in, and open the NOC workspace to start onboarding devices.
Download the free appliance, run the first-boot wizard on the console, and the NOC workspace keeps watch over your network from your own infrastructure. Looking for the security side of the same appliance? See the SOC workspace or the full platform overview.
Questions that come up in every NOC evaluation — answered directly, with no marketing varnish.
The NOC workspace continuously monitors device reachability, interface and hardware health, configuration drift, IP address allocation, and credential lifecycle across every managed device. Polling uses SNMP, ICMP, and SSH-based agentless probing for vendor coverage across Cisco, Arista, Juniper, Fortinet, Palo Alto, Aruba, MikroTik, and Ubiquiti hardware. Alerts are deduplicated and severity-classified before they reach an operator, which reduces the noise that drives alert fatigue. IP address management visualizes subnet allocation and flags conflicts in real time. Credential rotation runs on a 24-hour schedule with atomic commit semantics so a failed push cannot leave the device and the vault out of sync.
Configuration drift detection works by taking a signed baseline of each managed device configuration at onboarding, then comparing the running configuration against that baseline on a continuous polling interval. Drift from baseline — whether from a manual change, an unauthorized access, or a legitimate-but-unrecorded edit — triggers an alert with a full diff view and an audit-trail link back to the session that caused the change, if any. Baselines can be versioned with approved-change windows so routine maintenance does not produce noise. For your own compliance reviews, the drift record contains the device identity, timestamp, diff, and responsible operator in a single exportable artifact.
Every privileged session opened through the NOC workspace is recorded with full command-line fidelity. SSH and console keystrokes, command output, timestamps, and the hardware identity that opened the session are stored in a searchable replay format. Recording is mandatory — there is no opt-out for privileged sessions — and is tamper-evident so the recording itself is admissible evidence in an audit review. Playback supports time-scrubbing, command-only filtering, and full-session export. Recordings are associated with the device, the operator, any configuration diff that resulted, and the change-control ticket if one is linked, producing a continuous chain of evidence for your auditors.