Book a demo

Network audit · NOC wall · SOC, on your own server

Find what is wrong with your network. Fix it safely. Prove it.

NocLens logs in to your switches, routers and firewalls, shows the exact config line behind every finding, fixes the ones you approve with backups and a canary first, then checks again and gives you a before/after report.

Book a demo See how it works
Runs on your serverNetwork data never leaves itInstall in 15 minutes
54switches audited and monitored on a 900-client campus pilot
1,000+automated tests run before every release
11device platforms with audit rules
0bytes of your network data sent to us

Why teams switch

Most audits end as a PDF nobody can act on.

Hundreds of findings, no order

A scanner lists everything at the same volume. NocLens ranks by role and blast radius, so you know what to do first on Monday.

Opinions without proof

Every NocLens finding shows the device's own output. If something could not be measured, the report says "not measured" instead of guessing.

Fixing is the scary part

Changing 50 switches by hand is how outages start. NocLens backs up every device, tries one first, then rolls out in stages and stops on the first failure.

One server, three modules

Audit it, watch it, defend it.

Audit

Evidence-first network audit

  • Discovery across many ranges, SSH and Telnet
  • Config, firmware and CVE checks per device
  • Priority list by device role
  • Config backups with change history
  • PDF reports for management and auditors
Wall

Live NOC screen

  • Switch up/down and reboot detection
  • WAN links, latency and loss, ISP vs local fault
  • Firewall CPU, licences and health
  • Top talkers from NetFlow
  • Phone alerts through the free ntfy app
SOC

Security events that matter

  • Built-in log collector for any vendor (syslog, CEF, LEEF)
  • Infected hosts, brute force, admin logins
  • Counts people and hosts, not noise
  • Who was on that IP, from firewall sessions
  • Shown on the same wall

NocLens Wall

The screen your NOC looks at all day.

One page for the TV in the NOC and one for your phone. It says what is down and whose fault it is: your link, your ISP, or something beyond them.

From install to first report

Up and running before lunch.

Install

One command on an Ubuntu or Debian server or VM: curl -fsSL https://get.noclens.com | sudo bash

Discover

Give your management ranges and a read-only account. NocLens finds what answers and what it is.

Audit

Findings with evidence, ranked by role. Unmeasured items are listed as unmeasured.

Fix and verify

Approve fixes, watch the staged rollout, download the before/after report.

Safe remediation

Five gates before a change touches your network.

Remediation is off until you turn it on. When you do, every run passes the same gates, and any failure stops the run.

1 · Backup all

Every target device is backed up first. No backup, no change.

2 · Drift check

If a config changed since the audit, the run stops and asks you to re-audit.

3 · Canary

One device gets the change first and is checked before anyone else.

4 · Staged rollout

Small batches, stop on the first failure, recovery steps ready.

5 · Verify

Each device is checked again and the result goes into a before/after report.

Supported equipment

We tell you what is proven and what is not.

"Proven" means run against real devices in production. "Supported" means built from the vendor's published formats and tested against them, not yet field-proven. Anything that sends standard syslog, CEF or LEEF, or answers standard SNMP, works on a best-effort basis.

VendorPlatformsConfig auditLive logs (Wall, SOC)Health (SNMP)
CiscoIOS, IOS-XE (Catalyst 2960, 3650, 3750, 4500 and more)ProvenProvenProven
SophosSophos Firewall (XGS / SFOS)ProvenProvenProven
MikroTikRouterOSProvenSupportedSupported
CiscoNX-OS, ASA / FTD, AireOS and 9800 wirelessSupportedSupportedSupported
FortinetFortiGate (FortiOS)SupportedSupportedSupported
Palo Alto NetworksPAN-OSSupportedSupportedSupported
HuaweiVRP switches, routers, USGSupportedSupportedSupported
JuniperJunos (EX, MX, SRX)SupportedSupportedSupported
HPE ArubaAOS-CX, ArubaOS-Switch, ArubaOS controllersSupportedSupportedSupported
Any vendorSyslog (RFC 3164 / 5424), CEF, LEEF; standard SNMP MIBs–Best effortBest effort

Security and privacy

A tool that logs in to your network has to be locked down itself.

On your premises

Configs, credentials and reports stay on your server. The only outside call is the license check (license key or ID, a random server ID, version); phone alerts, if you switch them on, go through ntfy.

HTTPS by default

Encrypted from the first start with its own certificate authority, or your own certificate.

Roles and audit log

Viewer, engineer and admin roles. Every login, scan and change is recorded with who and when.

Hardened web app

CSRF tokens, login throttling, strict cookies, security headers, sessions ended on password change.

Hardened containers

App containers run as non-root on a read-only file system with all Linux capabilities dropped; the HTTPS proxy keeps only the right to open ports 80/443. People reach HTTPS only.

Device passwords encrypted

Stored encrypted on disk with a key kept outside the data folder, so a backup or a copied disk never holds readable passwords.

SSH keys pinned

Each device's SSH key is recorded at first contact. A device that later shows a different key gets no password, and you are told why.

Guard rails on scans

Hard caps on scan size and parallel jobs, so a typo cannot turn into a network-wide sweep.

Pricing

Monthly or yearly. Cancel any time.

Card checkout opens soon. Until then we invoice you (bank transfer, local currency on request) and email your license key the same day.

Free

Try it on part of your network

$0
  • Audit module
  • Up to 25 devices
  • Evidence and PDF report
  • Community support
Get the installer

Starter

Small networks, one site

$49/month
  • Audit module
  • Up to 100 devices
  • Safe remediation
  • Config backups and CVE checks
  • Email support
Request Starter
Most chosen

Pro

Campuses, hospitals, mid-size companies

$149/month
  • Audit, Wall and SOC modules
  • Up to 300 devices
  • Safe remediation
  • NOC screens and phone alerts
  • Priority email support
Request Pro

MSP

Managed service providers

$399/month
  • Everything in Pro
  • Up to 2,000 devices
  • Many client networks
  • Reports for each client
  • Onboarding call
Request MSP

Prices in US dollars; tax is added at checkout where it applies. Need an invoice and bank transfer, a local-currency price, or more devices? Write to mindshatter1122@gmail.com.

Questions

Before you buy

Does any of my network data leave my server?

No. Configs, credentials, findings and reports stay on your server. NocLens contacts our license service when you activate (license key, a random server ID, the host name and the version) and twice a day after that (license ID, server ID, version). Nothing else. Phone alerts are off until you choose an ntfy topic.

What do I need to run it?

A server or VM with Ubuntu 22.04/24.04 or Debian 12, 2 CPU cores, 4 GB RAM and 20 GB disk, that can reach your devices over SSH. The installer sets up everything else.

Can it break my network?

Audits only read. Remediation is off by default, and when you use it, it backs up every device, checks for drift, tries one device first and stops on the first failure. You approve every change.

What happens if I stop paying?

You get a 14-day grace period. After that the server falls back to the Free plan. Your data is never deleted or locked, and paying again switches everything back on.

Our server has no internet. Will it work?

Yes. Download a license file from our offline page and upload it on the server. Renew the file each billing period.

Do I need a SIEM or Wazuh?

No. NocLens has its own log collector: point your devices' syslog at it and the Wall and SOC tiles fill in, whatever the brand. If you already run Wazuh, NocLens can read it instead.

Refunds?

If NocLens does not work for you in the first 14 days of a paid plan, write to us for a full refund. See the refund policy.

See it on your own network.

Free for up to 25 devices. Write to us and we send the installer and set it up with you.

Book a demo Read the install guide