NetForge

Multi-vendor network automation, proven before it ships.

NetForge is the validation-first automation platform for multi-vendor networks. It models your topology, simulates every change against a digital twin, and only then pushes config — with proof that it works.

Plan → Simulate → Apply → Verify. No 2am rollbacks.

80 %+
Fewer change incidents

After switching to validated automation.

9 +
Vendor platforms

One source of truth, many targets.

100 %
Pre-deployment validation

Every change modelled and proven.

0
Rollbacks at go-live

Atomic apply with automatic safety net.

Four phases. One pipeline.

Every change goes through the same four-stage workflow. No phase is optional.

schema

Plan — source of truth

Pulls intent from NetBox, Infrahub or YAML and builds a vendor-neutral graph of the network. Renders the proposed config from intent rules, not templates.

science

Simulate — digital twin

Runs reachability, policy and convergence checks against a topology twin. Catches the 80% of bugs that template tests miss. Diff against current state, before pushing.

rocket_launch

Apply — atomic + safe

Pushes change windows with structured pre-checks, atomic apply, and automatic rollback on failure. Every device, every vendor — within agreed change windows.

verified

Verify — proof of work

Runs the same intent checks on the live network after deployment. The change is only “done” when verification passes. Signed, timestamped, audit-ready.

A change window you can sleep through.

This is what a NetForge run looks like — a plan, a simulation against a twin of your live topology, an atomic apply, and a verification pass on the real network. No surprises.

  • edit_notePlan — render proposed config and compile intent rules
  • scienceSimulate — reachability, policy and convergence checked against a topology twin
  • rocket_launchApply — atomic push with structured pre-checks and automatic rollback
  • verifiedVerify — same intent checks re-run on the live network. Done means proven.

Who NetForge is for

Built for teams who have outgrown templated push-and-pray.

hub

Multi-vendor networks

Network teams running 100+ devices across two or more vendors. NetForge thrives in mixed estates.

schedule

Strict change windows

Service providers and enterprises with tight, audited change-window SLAs. Verification is built in, not bolted on.

bug_report

"Template was fine in lab"

Teams who have been burned by templates that passed unit tests but failed against real-world topology. We close that gap.

Vendor support

First-class drivers for the platforms we see most. We add more as clients ask.

router

Cisco

IOS · IOS-XE · IOS-XR · NX-OS — all supported, all tested.

router

Juniper

Junos across MX, QFX, EX and ACX. Commit-confirmed integration.

router

Arista

EOS with eAPI and gNMI. CloudVision-compatible.

router

Nokia

SR OS and SR Linux — service-provider grade.

shield

Fortinet · Palo Alto

FortiOS and PAN-OS — security-policy aware deployments.

router

Mikrotik · Aruba CX

RouterOS and AOS-CX — first-class drivers, no second-class citizens.