Multi-vendor network automation, proven before it ships.
NetForge is the validation-first automation platform for multi-vendor networks. It models your topology, simulates every change against a digital twin, and only then pushes config — with proof that it works.
Plan → Simulate → Apply → Verify. No 2am rollbacks.
Fewer change incidents
After switching to validated automation.
Vendor platforms
One source of truth, many targets.
Pre-deployment validation
Every change modelled and proven.
Rollbacks at go-live
Atomic apply with automatic safety net.
Four phases. One pipeline.
Every change goes through the same four-stage workflow. No phase is optional.
Plan — source of truth
Pulls intent from NetBox, Infrahub or YAML and builds a vendor-neutral graph of the network. Renders the proposed config from intent rules, not templates.
Simulate — digital twin
Runs reachability, policy and convergence checks against a topology twin. Catches the 80% of bugs that template tests miss. Diff against current state, before pushing.
Apply — atomic + safe
Pushes change windows with structured pre-checks, atomic apply, and automatic rollback on failure. Every device, every vendor — within agreed change windows.
Verify — proof of work
Runs the same intent checks on the live network after deployment. The change is only “done” when verification passes. Signed, timestamped, audit-ready.
A change window you can sleep through.
This is what a NetForge run looks like — a plan, a simulation against a twin of your live topology, an atomic apply, and a verification pass on the real network. No surprises.
- edit_notePlan — render proposed config and compile intent rules
- scienceSimulate — reachability, policy and convergence checked against a topology twin
- rocket_launchApply — atomic push with structured pre-checks and automatic rollback
- verifiedVerify — same intent checks re-run on the live network. Done means proven.
Who NetForge is for
Built for teams who have outgrown templated push-and-pray.
Multi-vendor networks
Network teams running 100+ devices across two or more vendors. NetForge thrives in mixed estates.
Strict change windows
Service providers and enterprises with tight, audited change-window SLAs. Verification is built in, not bolted on.
"Template was fine in lab"
Teams who have been burned by templates that passed unit tests but failed against real-world topology. We close that gap.
Vendor support
First-class drivers for the platforms we see most. We add more as clients ask.
Cisco
IOS · IOS-XE · IOS-XR · NX-OS — all supported, all tested.
Juniper
Junos across MX, QFX, EX and ACX. Commit-confirmed integration.
Arista
EOS with eAPI and gNMI. CloudVision-compatible.
Nokia
SR OS and SR Linux — service-provider grade.
Fortinet · Palo Alto
FortiOS and PAN-OS — security-policy aware deployments.
Mikrotik · Aruba CX
RouterOS and AOS-CX — first-class drivers, no second-class citizens.