Netpicker
netpicker.io
What it is
Netpicker validates network state, device configurations, compliance, security and behavior, and can automate remediation. It runs automated Python tests in pytest format against device configurations, show-command output and API data. The free version includes unlimited configuration backups, Git history, diffs, search and drift detection. Netpicker supports devices from more than 180 vendors and can be deployed as a Docker container or OVA virtual appliance, on-premises or in air-gapped environments. API-based connections link it to source-of-truth systems, Git, ITSM tools and other existing tools. Its REST API manages devices, backups and tests, runs show commands and tests, and restores backups; documentation is provided through Swagger/OpenAPI. Security validation covers CVEs, security configurations, compliance and pen-test findings without sending network data outside the customer's environment. Potential CVEs are matched by OS version, while verified CVEs also check whether vulnerable features are enabled and mitigations are present. AI can draft tests, remediation jobs and troubleshooting queries from plain English, subject to engineer review and approval. The free Foundation plan is available; Professional starts at $7,500 a year.
Spec sheet
- Purpose
- Netpicker continuously validates network state, configurations, compliance, security and network behavior, and can automate remediation.Read 1 Oct 2026 · netpicker.io
- Audience
- Netpicker is designed for network and NetDevOps engineers and includes a graphical interface for configuration checks and real-time show commands.Read 1 Oct 2026 · netpicker.io
- Deployment
- Netpicker is available as a Docker container or an OVA virtual appliance, and can run on-premises or air-gapped.Read 1 Oct 2026 · netpicker.io
- Integrations
- Netpicker provides API-based connections to source-of-truth systems, Git, ITSM tools and other existing tools.Read 1 Oct 2026 · netpicker.io
- Privacy
- Flock9 says it uses organisational and technical security measures but does not guarantee that internet transmission or storage can be completely secure.Read 1 Oct 2026 · netpicker.io
- Support
- Foundation includes a knowledge base, YouTube training courses, best-effort tickets and best-effort Discord; Professional adds 24-hour ticket response and a private Discord channel.Read 1 Oct 2026 · netpicker.io
- AI
- Netpicker can generate compliance tests, remediation jobs and troubleshooting queries from plain English, with engineer review and approval.Read 1 Oct 2026 · netpicker.io
- Backup
- The free version provides unlimited configuration backups, Git history, diffs, search and drift detection.Read 1 Oct 2026 · netpicker.io
- Compliance evidence
- Netpicker provides evidence aligned with CIS, NIS2, DORA, PCI-DSS, NIST, ISO 27001, HIPAA and DISA STIGs.Read 1 Oct 2026 · netpicker.io
- CVE method
- Potential CVEs use OS-version matching, while verified CVEs check whether the vulnerable feature is enabled and mitigations are present.Read 1 Oct 2026 · netpicker.io
- REST API
- The REST API manages devices, backups and tests, runs show commands and tests, and restores backups; it is documented with Swagger/OpenAPI.Read 1 Oct 2026 · netpicker.io
- Security automation
- Netpicker validates CVEs, security configurations, compliance and pen-test findings without sending network data outside the customer environment.Read 1 Oct 2026 · netpicker.io
- Source-of-truth plugins
- Professional pricing lists supported plugins for NetBox, Nautobot and Infrahub, plus integration with Slurp'it.Read 1 Oct 2026 · netpicker.io
- Testing engine
- Netpicker runs automated Python tests in pytest format against device configurations, show-command output and API data.Read 1 Oct 2026 · netpicker.io
- Vendor coverage
- Netpicker supports network devices from more than 180 vendors.Read 1 Oct 2026 · netpicker.io
Plans and prices
Strong points and limits
Strong points
- Supports devices from more than 180 vendors.
- Free version includes unlimited configuration backups.
- Can run on-premises or in air-gapped environments.
- REST API manages tests, backups and devices.
- Security checks do not send network data outside.
Limits
- Professional starts at $7,500 a year.
- Foundation is limited to a single user.
- Professional includes 10 devices.
- Internet transmission or storage is not guaranteed completely secure.
Who it suits
Netpicker is aimed at network and NetDevOps engineers who need configuration checks, backups, security validation or remediation. Its deployment options may suit organizations that need on-premises or air-gapped operation.
Verdict
Netpicker combines network testing, backup management and security validation, with self-hosted and air-gapped deployment options. Compare device and user needs with the Foundation and paid-plan limits before selecting a tier.
Where Specifiction places it
- Network Configuration Management Software#6 of 358.1
- Network Testing Software#8 of 338.2