NCM, controlled execution & verified outcomes

Make every network change explainable.

A successful command does not tell you whether the service survived the change. AmrudAi connects configuration history, policy, risk, approval and staged execution with post-change evidence so engineers can control the rollout and verify its operational outcome.

The application experience

Network configuration assurance

See the complete workspace. Enlarge any image to inspect its panels, navigation and evidence at actual size.

Network Configuration Assurance — illustrative product view with sample data. Illustrative product view · Sample data
Track backups, differences, compliance and the service checks that qualify a change.

Know whether the change improved the service.

Close the loop from configuration drift to validated outcome.

AmrudAi connects inventory, backups, version history, semantic diffs, golden-state checks and compliance policies with controlled change execution. Approval, canary or staged rollout, post-checks and adapter-supported rollback keep operational consequences visible.

The capability in detail

Manage the complete configuration and change lifecycle.

01

Scheduled and event-aligned configuration backup

Capture on-demand, scheduled and pre/post-change backups through supported device interfaces. Protected versions and visible job results give engineers a reliable comparison point and a relevant recovery artifact before they act.

02

Version history, search and differences

Search configurations under sensitive-field controls and compare running, startup and historical versions. Raw differences are available, with semantic comparison where the device parser supports it, to show what changed in operational terms.

03

Golden state and recurring drift checks

Define desired configurations, inherited baselines and justified exceptions. Detect recurring deviations and distinguish compliant, noncompliant and unknown results so engineering standards can be reviewed consistently across sites and vendors.

04

Configuration policy and lifecycle context

Evaluate deterministic operational and applicable CIS/STIG-oriented rule content against configuration evidence. Combine violations with firmware and EOS/EOL context to prioritize work, while keeping rule checks distinct from an organizational compliance certification.

05

Versioned plans, templates and preflight

Prepare a change from controlled templates, exact targets and a defined window. Validate compatibility, access, configuration state and required preconditions before execution so the approved plan has a concrete operational scope.

06

Topology impact and explainable change risk

Use the affected interfaces, routes, dependencies and business services to assess potential blast radius. Present the factors and assumptions behind deterministic risk, including existing degradation or lost resilience that may make a rollout unsafe.

07

Maker-checker and ITSM approval binding

Bind approval to the specific change plan, configuration, target set and window. Material changes invalidate stale approval, and local permissions and current preconditions remain authoritative when execution begins.

08

Canary and staged execution

Roll out through an approved canary or fixed stages with bounded concurrency and explicit stop criteria. Keep job and batch results visible, and prevent configuration work from consuming the resources reserved for routine monitoring.

09

Post-change validation and recovery

Check device, protocol, path and service behavior through the stabilization period after execution. Roll back through the supported adapter and verified artifact where safe, or escalate with the failed checks and affected scope intact.

10

One Change Assurance Record

Connect the plan, configuration versions, risk evidence, approval, ITSM Change, job, CLI references, incidents and audit. Firmware workflows also retain approved image provenance, integrity and compatibility checks, rollout results and validated recovery behavior.

From information to action

Control the change from preparation to verified service.

  1. 01

    Plan, back up and compare

    Define the intended result, exact targets and window; capture the baseline, inspect the difference and complete preflight.

  2. 02

    Assess and approve

    Review dependency impact, deterministic risk and the relevant checks. Bind the approval to the plan that will execute.

  3. 03

    Execute and observe

    Use the approved canary or stages, monitor stop criteria and validate configuration, protocol and service behavior after each step.

  4. 04

    Recover or complete with evidence

    Use the supported rollback path or escalate when needed; retain the final configuration, service outcome and audit in the Change Assurance Record.

Built around your operating environment

Fit the way your team operates.

Apply the change controls appropriate to each device, parser, operation and operating policy.

  • Backups, versions, running/startup comparison, drift and golden state.
  • Controlled templates, preflight, impact assessment and exact approval binding.
  • Canary/staged execution, explicit stop criteria and post-change stabilization.
  • Rollback and firmware behavior follow the supported adapter, device and verified recovery artifact.

How does the separate NCM product supply change evidence?

Does NCM include configuration deployment as well as backups?

Yes. The lifecycle covers planning, backup, comparison, preflight, risk assessment, approval, canary or staged execution, validation, observation and recovery or escalation. The supported operation and device adapter determine the available execution and rollback mechanisms.

Can an approved change be edited just before execution?

Material changes to configuration, targets or the approved window make that approval stale. The plan must pass the applicable approval process again, and execution-time deterioration can still block an otherwise unchanged plan.

Is rollback available for every device or firmware operation?

Rollback uses the mechanisms supported by the specific adapter and device, together with a verified recovery artifact and safety checks. Where safe automatic rollback is unavailable, the workflow preserves the evidence and escalates through the approved recovery procedure.

Do configuration checks certify regulatory compliance?

They provide evidence of the selected operational or applicable benchmark rules. Results help teams identify violations and document exceptions; running a check is not itself an external compliance certification.

See the workflow in your environment.

Explore the technology, service dependencies and operating requirements that matter to your team.