NetOpsGuard

Network AAA and security operations, in one platform

NetOpsGuard (previously NetworkAAA) is an open-source, self-hosted network management platform for teams operating Cisco and other supported network infrastructure. Centrally manage TACACS+ authentication, command authorization and accounting, connect directory identities, inspect configuration changes, and review security findings through a web interface.

NetOpsGuard web dashboard showing network operations and TACACS+ management

Get started at no cost: The Community edition supports up to five managed devices with the currently available feature set. Introductory annual licences start at US$99 for 15 devices, with signed licences for larger networks. See plans and pricing.

Install NetOpsGuard · Explore the source on GitHub

What NetOpsGuard helps you manage

Area What it does
TACACS+ AAA Control administrative login and command authorization for managed devices; view accounting and access activity.
Active Directory / LDAP Connect existing directory identities and authorized group mappings to network access policies.
RADIUS Define network access policies and attributes supported by the installed daemon and NAS.
Network configuration management (NCM) Archive device configurations over SSH, compare versions and baselines, inspect drift, and review change workflows.
Cisco security auditing Review security findings, compliance-oriented views, and reports for supported Cisco IOS/IOS-XE devices.
Network Operations Execute authorized SSH command jobs and reusable command templates across network devices.

Affordable network AAA, NCM and security operations

NetOpsGuard edition Device limit Introductory annual licence
Community 5 Free
Starter 15 US$99
Professional 50 US$299
Business 100 US$599
Enterprise 300 US$1,299

For perspective, ManageEngine’s dedicated Network Configuration Manager Professional annual subscription lists US$958 for 50 devices, while NetOpsGuard’s 50-device Professional licence is proposed at US$299/year and includes its currently available AAA and network operations modules. Product capabilities and support offerings differ; this is not a like-for-like feature comparison. See the official vendor source (checked 13 October 2026) and our detailed comparison. All NetOpsGuard prices are introductory and subject to confirmation.

Start with the workflow you need

Built for network administrators and infrastructure security teams

NetOpsGuard is designed for lab environments, operational teams, and organizations that want centrally managed network device access without building separate workflows for AAA policy, configuration history, and device checks.

The management plane runs on Ubuntu Server and uses PostgreSQL for application state. TACACS+ services are delivered by the installed tac_plus-ng daemon. Features involving directory membership, RADIUS capabilities, or device CLI output must be validated against the specific build and equipment in use.

Deployment note: The policy simulator does not replace actual NAS authorization testing. A backup schedule displayed in the UI does not itself prove unattended backup execution. Test critical AAA and NCM workflows before depending on them in production.

Try NetOpsGuard

Read the quick installation guide or go directly to NetOpsGuard on GitHub for the complete source, Apache-2.0 licence, and issue tracker.

Licence requests and contact

The Community edition supports five devices for free. To request a licence for more devices or ask about licence migration, read the NetOpsGuard licensing information or contact the maintainer: