Skip to content
SPECIFICTION
Get listed

NetKeep

github.com

Free plan WebLinuxSelf-hosted
Visit github.com
Spec score 7.4 #19 of 35 in Network Configuration Management Software

What it is

NetKeep is a free, open-source, self-hosted system for collecting, versioning, comparing, and protecting network-device configurations. It uses Oxidized 0.37.0 to gather configurations and keeps each version in permanent Git history. Teams can search, download, and compare revisions with unified or side-by-side diffs. Read-only inventory synchronization is available with LibreNMS and NetBox. Notifications can be sent by email, signed webhook, or Telegram. Full backups may be encrypted and stored locally or in S3-compatible services, with private Git mirroring as another option. Roles include owner, administrator, operator, and reader; optional TOTP two-factor authentication and passkeys are supported. Safe mode exports and compares configurations without applying changes, although arbitrary Ruby or unreviewed drivers reduce that assurance. Installation needs a Linux amd64 or arm64 server, Docker Engine 25+, Docker Compose plugin 2.24+, and persistent storage. The product is on-premises under AGPL-3.0.

Spec sheet

Purpose
NetKeep collects, versions, compares, and protects network device configurations for ISPs and infrastructure teams.Read 4 Oct 2026 · github.com
Integrations
NetKeep supports read-only inventory synchronization with LibreNMS and NetBox.Read 4 Oct 2026 · github.com
Support
Community support is best-effort with no SLA; commercial implementation, migration, or operational support is arranged by email.Read 4 Oct 2026 · github.com
License
NetKeep's original code is distributed under the GNU Affero General Public License v3.0.Read 4 Oct 2026 · github.com
Access controls
The product offers owner, administrator, operator, and reader roles, plus optional TOTP two-factor authentication and passkeys.Read 4 Oct 2026 · github.com
Backups
Full backups can be encrypted and sent to local storage or S3-compatible services, with private Git mirroring also available.Read 4 Oct 2026 · github.com
Collection
It uses Oxidized 0.37.0 as its configuration collection engine and stores collected versions in permanent Git history.Read 4 Oct 2026 · github.com
Configuration history
Users can search, download, and compare configuration versions with unified or side-by-side diffs.Read 4 Oct 2026 · github.com
Data protection
The maker warns that configuration backups may contain passwords, tokens, SNMP communities, and sensitive network details, and recommends encrypted storage and restricted administrative access.Read 4 Oct 2026 · github.com
Deployment requirements
Installation requires a Linux amd64 or arm64 server, Docker Engine 25 or newer, Docker Compose plugin 2.24 or newer, and persistent storage.Read 4 Oct 2026 · github.com
Notifications
Notification channels include email, signed webhooks, and Telegram.Read 4 Oct 2026 · github.com
Safe mode
In safe mode, NetKeep collects, compares, and exports configurations without applying changes to equipment; arbitrary Ruby or unreviewed drivers weaken this guarantee.Read 4 Oct 2026 · github.com

Plans and prices

NetKeep Free Self-hosted · Linux amd64 or arm64 server · AGPL-3.0 Read 4 Oct 2026 · github.com

Every NetKeep plan and price →

Strong points and limits

Strong points

  • Permanent Git history for collected configurations
  • Unified and side-by-side configuration diffs
  • Encrypted local or S3-compatible backups
  • Read-only LibreNMS and NetBox synchronization
  • Optional TOTP and passkey authentication

Limits

  • Requires Linux server and Docker components
  • Community support has no SLA
  • Backups may contain sensitive credentials
  • Unreviewed drivers weaken safe mode

Who it suits

NetKeep suits ISPs and infrastructure teams managing device configuration history and backups on their own Linux servers. It fits organizations needing Git-based comparison, role controls, and integrations with LibreNMS or NetBox.

Verdict

NetKeep provides broad configuration collection, history, comparison, notification, and backup controls in a self-hosted package. Its infrastructure requirements and responsibility for securing sensitive backups matter for deployment planning.

Where Specifiction places it

Alternatives to NetKeepAll alternatives →