OSI & TCP/IP
Packet Journey
Be the packet. Change costumes at every layer.
Coming soonFrom the country map
to the switch port.
ipconfigs puts every site, building, floor and device of your company on one live map — and lets you secure and configure them safely, even without a network specialist on site.
Private beta · Multi-vendor · Read-only by default
Works with the network you already own
- Cisco
- Juniper
- Fortinet
- Palo Alto Networks
- Huawei
- MikroTik
- Ubiquiti
- Dell
- NETGEAR
Guided setup
No network engineer? No problem.
Plug in the collector, follow four plain-language steps, and ipconfigs builds the map, the inventory and a hardened security baseline for you.
- 1
Plug in the collector
A small box or virtual machine. It only dials out — no firewall changes.
- 2
Automatic discovery
Every switch, router, firewall and access point is found and identified.
- 3
Place it on the map
Sites are placed by address; drag devices onto floor plans in minutes.
- 4
Secure in one click
A recommended security baseline is checked, explained and applied — with approval.
Discovering network…100%
1,284devices found
9vendors
Security score
41Before
94After
- Telnet disabled on 37 devices
- 12 default passwords replaced
- SNMP 'public' community removed
- 9 firmware updates scheduled overnight
Spatial view
Know exactly where every device lives.
Upload a floor plan, drop devices onto it and watch live status in place. Which wall jack in Finance goes to which switch port? One click.
- Building → floor → room → rack → port
- Floor plans from PDF or PNG today, DWG and BIM next
- A failing device and its cable path light up instantly
UpDegradedDown
sw-3f-02Down
- Model
- Arista 720XP-96ZC2
- Management IP
- 10.30.0.12
- Ports in use
- 0 / 96
- Uptime
- 0d
- Location
- Floor 3 · IT room
AI copilot
Ask your network. In your language.
Plain-language questions get answers grounded in live telemetry, logs and topology — not guesses.
- Explains any configuration in plain language
- Root-cause analysis across logs, telemetry and topology
- Works in every language of this site
Why has guest Wi‑Fi on floor 3 been slow since this morning?
Root cause: uplink Gi1/0/48 on SW-3F-01 has been negotiating at 100 Mb/s since 08:42 — most likely a damaged patch cable.
Impact: 64 clients on 3 access points, guest VLAN 120 only.
Suggested fix: move the uplink to Gi1/0/47 and replace the cable. A draft change is ready for review.
Grounded inSW-3F-01 counterssyslog 08:42topology
Open draft changeSafe change pipeline
AI proposes. The twin proves. People approve.
Every change follows the same path, so nothing reaches production untested.
- 01
Intent
Describe the outcome in plain words.
- 02
Draft
AI writes vendor-specific configuration for every device.
- 03
Simulate
The digital twin checks reachability, loops and policy.
- 04
Approve
One or two approvers, depending on risk.
- 05
Roll out
Canary first, then the rest — in stages.
- 06
Verify & record
Automatic rollback on failure. Signed, immutable log.
Change #2041 · VLAN 140 for interns, floor 4
Drafted by ipconfigs AI
1 vlan 140 2+ name INTERNS-4F 3 interface Vlan140 4+ ip address 10.40.140.1 255.255.255.0 5+ ip access-group INTERN-IN in 6 ip access-list extended INTERN-IN 7+ deny ip 10.40.140.0 0.0.0.255 10.10.0.0 0.0.255.255 8+ permit ip 10.40.140.0 0.0.0.255 any 9 interface range Gi1/0/1-24 10- switchport access vlan 1 11+ switchport access vlan 140
Approvals 1/2
Security center
Catch the change nobody approved.
Campaigns like Salt Typhoon persist on network gear by quietly adding tunnels and ACL entries. ipconfigs flags every drift from your approved configuration the moment it happens.
- Drift and out-of-window change alerts
- Firmware matched against the CISA KEV catalog
- CIS benchmark scoring per device
- Post-quantum readiness inventory
| Severity | Finding | Detected |
|---|---|---|
| Critical | Unauthorized GRE tunnel created | 03:12 |
| High | Known exploited CVE on running firmware | 09:40 |
| Medium | Drift from approved configuration | 11:05 |
| Info | No post-quantum key exchange support | — |
Security architecture
Built for teams that cannot afford a bad change.
Your credentials never leave your building, nothing connects in, and every action is attributable.
Your network
- Switches · routers
- Firewalls · Wi‑Fi
SSH · SNMPv3 · gNMI
On-site collector
- Credential vault
- Read-only by default
- Signed updates
Outbound mTLS only
ipconfigs cloud
- EU hosting
- Tenant isolation
- Tamper-evident log
Encrypted · audited
Your team
- SSO · MFA
- Role-based approvals
Credentials stay on-site
Device passwords live in the collector's vault and never reach our cloud.
Outbound-only connector
No inbound firewall rules. The collector dials out over mutual TLS.
Read-only by default
Write access is opt-in, per site and per device group.
Least-privilege AI
Agents get scoped tools, never standing admin rights. High-impact actions need a human.
Tenant isolation
Row-level security keeps every company's data separate.
SSO & MFA
SAML or OIDC sign-in with enforced multi-factor authentication.
Tamper-evident audit
A change history nobody can rewrite. Not even us.
Every change is hash-chained in your audit log, and an hourly fingerprint is anchored to a public blockchain. Auditors can verify any record independently.
Change #4821a3f9…e21c✓ Verified
Change #48227b04…91d8✓ Verified
Change #4823c6e2…0fa3✓ Verified
Merkle root · 14:00 UTC0x5e1d…b7c2⛓ Anchored on a public chain
Report-ready forNIS2DORAISO 27001KVKKSOC 2PCI DSS
ipconfigs Academy
Learn networking like a game. Master it like a job.
Start as an intern in a one-room café and grow it into a multi-site campus. Every floor is a level, and every level ends with a real incident.
IP addressing
Subnet Slicer
Slice address blocks like pizza — against the clock.
Coming soonSwitching & VLANs
Cable Master
Patch the rack, paint the VLANs, avoid the sparks.
Coming soonACLs & firewalls
Gatekeeper
Allow or deny. The rules keep getting trickier.
Coming soonTroubleshooting
Escape Room 03:00
An outage at 3 AM. A terminal and a timer.
Coming soonSecurity
Threat Hunt
Find the rogue tunnel hidden in a hundred configs.
Coming soonGive a team of three the reach of twenty.
We are onboarding a small group of design partners. Leave your email and we will be in touch.