NetKeep
NetKeep is a self-hosted tool for collecting, versioning, comparing, and protecting network device configurations for ISPs and infrastructure teams.
What NetKeep is
NetKeep is a self-hosted tool for collecting, versioning, comparing, and protecting network device configurations for ISPs and infrastructure teams. It uses Oxidized 0.37.0 to gather configurations and keeps collected versions in permanent Git history. Users can search, download, and compare versions with unified or side-by-side diffs. NetKeep supports read-only inventory synchronization with LibreNMS and NetBox, and notifications by email, signed webhook, or Telegram. Full backups can be encrypted and sent to local storage or S3-compatible services; private Git mirroring is also available. Access roles include owner, administrator, operator, and reader, with optional TOTP two-factor authentication and passkeys. Safe mode collects, compares, and exports configurations without applying changes to equipment, though arbitrary Ruby or unreviewed drivers weaken that protection. The project is free and open source under AGPL-3.0. Installation requires a Linux amd64 or arm64 server, Docker Engine 25 or newer, Docker Compose plugin 2.24 or newer, and persistent storage. Its maker warns that configuration backups may contain credentials, SNMP communities, and other sensitive network details, and recommends encrypted storage and restricted administrative access. Community support is best-effort with no SLA.
Good
- Keeps collected configurations in permanent Git history.
- Compares versions with unified or side-by-side diffs.
- Supports LibreNMS and NetBox inventory synchronization.
- Encrypted backups can go to local or S3-compatible storage.
Watch out
- Requires a Linux server and specified Docker versions.
- Community support has no SLA.
- Backups may contain credentials and sensitive network details.
- Arbitrary Ruby or unreviewed drivers weaken safe mode.
Who it suits
NetKeep suits ISPs and infrastructure teams that need versioned configuration history and comparisons on a self-hosted system. It assumes access to a compatible Linux server and Docker setup.
Verdict
NetKeep offers self-hosted configuration collection, history, comparison, and backup options for network teams. Plan for the stated Linux and Docker requirements, and protect backups that may include sensitive details.
Plans and prices
From NetKeep's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| NetKeep | Free | Self-hosted · Linux amd64 or arm64 server · AGPL-3.0 |
The facts
Each one read from NetKeep's own pages, with the date it was checked.
What it does
- Access controls
- The product offers owner, administrator, operator, and reader roles, plus optional TOTP two-factor authentication and passkeys.checked 4 Oct 2026
- Backups
- Full backups can be encrypted and sent to local storage or S3-compatible services, with private Git mirroring also available.checked 4 Oct 2026
- Collection
- It uses Oxidized 0.37.0 as its configuration collection engine and stores collected versions in permanent Git history.checked 4 Oct 2026
- Configuration history
- Users can search, download, and compare configuration versions with unified or side-by-side diffs.checked 4 Oct 2026
- Data protection
- The maker warns that configuration backups may contain passwords, tokens, SNMP communities, and sensitive network details, and recommends encrypted storage and restricted administrative access.checked 4 Oct 2026
- Deployment requirements
- Installation requires a Linux amd64 or arm64 server, Docker Engine 25 or newer, Docker Compose plugin 2.24 or newer, and persistent storage.checked 4 Oct 2026
- Integrations
- NetKeep supports read-only inventory synchronization with LibreNMS and NetBox.checked 4 Oct 2026
- License
- NetKeep's original code is distributed under the GNU Affero General Public License v3.0.checked 4 Oct 2026
- Notifications
- Notification channels include email, signed webhooks, and Telegram.checked 4 Oct 2026
- Purpose
- NetKeep collects, versions, compares, and protects network device configurations for ISPs and infrastructure teams.checked 4 Oct 2026
- Safe mode
- In safe mode, NetKeep collects, compares, and exports configurations without applying changes to equipment; arbitrary Ruby or unreviewed drivers weaken this guarantee.checked 4 Oct 2026
- Support
- Community support is best-effort with no SLA; commercial implementation, migration, or operational support is arranged by email.checked 4 Oct 2026
Alternatives to NetKeep
- 1
ManageEngine Network Configuration Manager
Free planAndroidiOSWebAPI8.2From $238 a year - 2
Configuration Center
APIWindows6.8$99 one-time - 3
NetBrain
WebAPILinuxSelf-hosted6.8 - 4
Netpicker
Free planWebAPILinuxSelf-hosted6.8From $7,500 a year - 5
rConfig
Free planWebAPILinuxSelf-hosted6.8From €3,999 a year - 6
Nexsparkle ConfigVault
LinuxSelf-hostedWindows6.7From $495 a year