Skip to content
SPECIFICTION
Get listed

Invariant

invariant.tech

Free plan WebAPI
Visit invariant.tech
Spec score 7.8 #18 of 33 in Network Testing Software

What it is

Invariant validates network configurations against connectivity and security rules in a cross-vendor digital twin. It builds the model from configuration files, so direct access to routers or switches is not required. Users define policies in YAML and evaluate them against network snapshots, including proposed changes before deployment. Results can report policy violations and failures affecting critical flows. Scheduled network scans can trigger incident alerts with virtual traceroutes and virtual route-table differences. The service lists Cisco, Juniper, Palo Alto, and AWS among supported vendors, and integrations including Jenkins, GitHub Actions, LibreNMS, Netmiko, Aerleon, Capirca, IPAM, and SIEM workflows. A CLI, SDK, and API support automation. Listed protocols include BGP, OSPF, IPSec, NAT, policy-based routing, VPN, ACL, and VLAN. Invariant offers hybrid deployment and web/API access. The Basic account is free, billed as a free Basic account with effectively no usage limits. Higher tiers add SSO, larger device counts, and preview features.

Spec sheet

Purpose
Invariant validates network configurations against user-provided rules in a cross-vendor digital twin to identify connectivity problems and unwanted security gaps.Read 4 Oct 2026 · docs.invariant.tech
Intended users
Invariant describes its users as network and security operators who need to assess network security and safely make network changes.Read 4 Oct 2026 · invariant.tech
Integrations
The maker lists Jenkins, GitHub Actions, LibreNMS, Netmiko, Aerleon, Capirca, IPAM, and SIEM workflows as integration options.Read 4 Oct 2026 · docs.invariant.tech
Security
Invariant says its client removes passwords and secrets from configuration files before upload, and its cloud service uses encryption and environment isolation.Read 4 Oct 2026 · docs.invariant.tech
Support
The contact page lists [email protected] for technical support and says Slack is the most immediate way to reach the company.Read 4 Oct 2026 · invariant.tech
Analysis
Invariant builds its network model from configuration files and does not require direct access to routers or switches.Read 4 Oct 2026 · docs.invariant.tech
Automation tools
Invariant provides a CLI, SDK, and API for automating network management and validation tasks.Read 4 Oct 2026 · invariant.tech
Data access
The maker says staff cannot view customer data except through special disaster-recovery accounts secured with physical tokens.Read 4 Oct 2026 · docs.invariant.tech
Higher tiers
Higher-tier accounts unlock SSO, support for the highest device counts described as up to hundreds or thousands of devices, and early access to preview features.Read 4 Oct 2026 · docs.invariant.tech
Hosting option
The maker says customers requiring fully on-premise data retention should contact Invariant.Read 4 Oct 2026 · docs.invariant.tech
Monitoring
Invariant can receive scheduled network scans and generate incident alerts with virtual traceroutes and virtual route-table differences.Read 4 Oct 2026 · docs.invariant.tech
Network vendors
The maker lists Cisco, Juniper, Palo Alto, and AWS among supported vendors.Read 4 Oct 2026 · invariant.tech
Policy rules
Users can define connectivity and security policies in YAML and evaluate them against network snapshots.Read 4 Oct 2026 · docs.invariant.tech
Pre-change checks
Invariant can evaluate proposed configuration changes before deployment and report policy violations and critical-flow failures.Read 4 Oct 2026 · invariant.tech

Plans and prices

Basic Free Basic accounts are free; the page gives no numeric price. effectively no usage limits Read 4 Oct 2026 · docs.invariant.tech

Every Invariant plan and price →

Strong points and limits

Strong points

  • No direct router access required
  • YAML policies support repeatable checks
  • Pre-change validation reports violations
  • Scheduled scans can create incident alerts
  • Basic account has effectively no usage limits

Limits

  • Higher device counts require higher tiers
  • SSO is a higher-tier feature
  • Fully on-premise retention requires contacting Invariant

Who it suits

Invariant suits network and security operators assessing reachability, security policies, and planned network changes. It fits teams automating validation through a CLI, SDK, API, or listed integrations.

Verdict

Invariant combines configuration-based modeling, policy checks, pre-change analysis, and scheduled monitoring across listed vendors and protocols. Review tier requirements and hosting needs if you require SSO, very large device counts, or fully on-premise retention.

Where Specifiction places it

Alternatives to InvariantAll alternatives →