Network Truth verify
Prove it does what you intend.
Continuously reconcile network intent, configuration and actual behaviour — to establish Network Truth, and to keep it. The window the audit opened never closes.
no SRv6 required in your tenant · CPU only · no write credentials
0100 the window never closes
Assurance that never claims to see every flow.
Routers sample. So the promise is not “we see everything” — it is that configured reachability stays aligned with declared intent, re-checked on every change, with observed traffic as evidence.
- Intent against configuration is deterministic. A config export lands, the model recomputes, the diff becomes a verdict. No packet needs to have flowed.
- Observed traffic is evidence, never authority. The sampling rate rides on every record. Seen-but-undeclared waits for a named human; it never widens anything.
- Freshness is a gate with an alarm. A continuous promise with a stale source is not continuous, and the ledger says so.
- Last Tuesday is a closed window. It replays byte-identically, for an auditor who was not in the room.
0200 what never happens
The engine listens. The estate sends.
Never logs into a device
Exports you push, exporters you point, managers pulled read-only. No credential is handed over.
Nothing installed on a workload
No agents, no probes, nothing written to the network. One container in your tenant.
No write credentials
Your change process applies; the engine verifies the change landed. There is no mode in which it edits policy.
Nothing leaves your tenant
Raw flows are classified in flight and discarded. Deterministic, no model in the verdict, no GPU.
An estate that never adopts SRv6 stays here indefinitely — a complete product, not a waiting room.
e000 End.DT6 deliver
Start the free network audit.
Network Truth begins where the audit ends. Read-only, fixed scope; priced on your own numbers, never from our slides.