Netpicker
Netpicker validates network configurations, state, security, compliance, and behavior, and can automate remediation.
What Netpicker is
Netpicker validates network configurations, state, security, compliance, and behavior, and can automate remediation. It runs Python tests in pytest format against device configurations, show-command output, and API data. The free Foundation plan includes unlimited configuration backups, Git history, diffs, search, and drift detection. Netpicker supports devices from more than 180 vendors and provides a graphical interface for configuration checks and real-time show commands.
It can run as a Docker container or OVA virtual appliance, on-premises or in air-gapped environments. API connections link it with source-of-truth systems, Git, ITSM tools, and other existing tools. The REST API manages devices, backups, and tests, runs commands and tests, and restores backups; its documentation uses Swagger/OpenAPI. Security validation covers CVEs, configurations, compliance, and pen-test findings without sending network data outside the customer environment.
Good
- Free Foundation plan includes unlimited configuration backups.
- Supports devices from more than 180 vendors.
- Can run on-premises or air-gapped.
- Checks security findings without sending network data outside.
- REST API can manage and restore backups.
Watch out
- Foundation is limited to a single user.
- Professional includes 10 devices.
Who it suits
Netpicker is aimed at network and NetDevOps engineers who need to validate device configurations, compliance, or security and may want to automate remediation. Its free tier may suit users who need backup and drift-detection features.
Verdict
Netpicker combines network validation with configuration backup and remediation capabilities. Compare the Foundation limits with the paid plan’s device and team features to determine which tier fits your use.
Plans and prices
From Netpicker's own pricing page, checked 1 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Netpicker - Foundation | Free | unlimited network devices · single user · Professional features for 10 devices · FREE for life |
| Netpicker - Professional | $7,500 a year | 10 devices included · multi-user admin · NetBox, Nautobot and Infrahub plugins · Starting at $7,500 per year |
| Netpicker - Enterprise | $33,500 a year | multi-role RBAC · SSO · audit logs · Kubernetes, OpenShift and air-gapped support · Starting at $33,500 Per year |
The facts
Each one read from Netpicker's own pages, with the date it was checked.
What it does
- AI
- Netpicker can generate compliance tests, remediation jobs and troubleshooting queries from plain English, with engineer review and approval.checked 1 Oct 2026
- Audience
- Netpicker is designed for network and NetDevOps engineers and includes a graphical interface for configuration checks and real-time show commands.checked 1 Oct 2026
- Backup
- The free version provides unlimited configuration backups, Git history, diffs, search and drift detection.checked 1 Oct 2026
- Compliance evidence
- Netpicker provides evidence aligned with CIS, NIS2, DORA, PCI-DSS, NIST, ISO 27001, HIPAA and DISA STIGs.checked 1 Oct 2026
- CVE method
- Potential CVEs use OS-version matching, while verified CVEs check whether the vulnerable feature is enabled and mitigations are present.checked 1 Oct 2026
- Deployment
- Netpicker is available as a Docker container or an OVA virtual appliance, and can run on-premises or air-gapped.checked 1 Oct 2026
- Integrations
- Netpicker provides API-based connections to source-of-truth systems, Git, ITSM tools and other existing tools.checked 1 Oct 2026
- Privacy
- Flock9 says it uses organisational and technical security measures but does not guarantee that internet transmission or storage can be completely secure.checked 1 Oct 2026
- Purpose
- Netpicker continuously validates network state, configurations, compliance, security and network behavior, and can automate remediation.checked 1 Oct 2026
- REST API
- The REST API manages devices, backups and tests, runs show commands and tests, and restores backups; it is documented with Swagger/OpenAPI.checked 1 Oct 2026
- Security automation
- Netpicker validates CVEs, security configurations, compliance and pen-test findings without sending network data outside the customer environment.checked 1 Oct 2026
- Source-of-truth plugins
- Professional pricing lists supported plugins for NetBox, Nautobot and Infrahub, plus integration with Slurp'it.checked 1 Oct 2026
- Support
- Foundation includes a knowledge base, YouTube training courses, best-effort tickets and best-effort Discord; Professional adds 24-hour ticket response and a private Discord channel.checked 1 Oct 2026
- Testing engine
- Netpicker runs automated Python tests in pytest format against device configurations, show-command output and API data.checked 1 Oct 2026
- Vendor coverage
- Netpicker supports network devices from more than 180 vendors.checked 1 Oct 2026
Alternatives to Netpicker
- 1
ManageEngine Network Configuration Manager
Free planAndroidiOSWebAPI8.2From $238 a year - 2
Configuration Center
APIWindows6.8$99 one-time - 3
NetBrain
WebAPILinuxSelf-hosted6.8 - 4
rConfig
Free planWebAPILinuxSelf-hosted6.8From €3,999 a year - 5
Nexsparkle ConfigVault
LinuxSelf-hostedWindows6.7From $495 a year - 6
Oxidized
Free planWebAPILinuxSelf-hosted6.6Free plan