NetKeep vs Netpicker

NetKeep is a free, open-source, self-hosted system for collecting, versioning, comparing, and protecting network-device configurations. It uses Oxidized 0.37.0 to gather configurations and keeps each version in permanent Git history. Teams can search, download, and compare revisions with unified or side-by-side diffs. Read-only inventory synchronization is available with LibreNMS and NetBox. Notifications can be sent by email, signed webhook, or Telegram. Full backups may be encrypted and stored locally or in S3-compatible services, with private Git mirroring as another option. Roles include owner, administrator, operator, and reader; optional TOTP two-factor authentication and passkeys are supported. Safe mode exports and compares configurations without applying changes, although arbitrary Ruby or unreviewed drivers reduce that assurance. Installation needs a Linux amd64 or arm64 server, Docker Engine 25+, Docker Compose plugin 2.24+, and persistent storage. The product is on-premises under AGPL-3.0.

Netpicker validates network state, device configurations, compliance, security and behavior, and can automate remediation. It runs automated Python tests in pytest format against device configurations, show-command output and API data. The free version includes unlimited configuration backups, Git history, diffs, search and drift detection. Netpicker supports devices from more than 180 vendors and can be deployed as a Docker container or OVA virtual appliance, on-premises or in air-gapped environments. API-based connections link it to source-of-truth systems, Git, ITSM tools and other existing tools. Its REST API manages devices, backups and tests, runs show commands and tests, and restores backups; documentation is provided through Swagger/OpenAPI. Security validation covers CVEs, security configurations, compliance and pen-test findings without sending network data outside the customer's environment. Potential CVEs are matched by OS version, while verified CVEs also check whether vulnerable features are enabled and mitigations are present. AI can draft tests, remediation jobs and troubleshooting queries from plain English, subject to engineer review and approval. The free Foundation plan is available; Professional starts at $7,500 a year.