Describe the symptom, drop in logs, configs, CLI output, packet captures or screenshots. NetDiag analyzes them locally, searches the knowledge base, and can SSH to your devices — read-only in Diagnose mode, approved changes in Resolve mode.
This is a read-only demo account: open a sample case on the left to see how NetDiag works through a problem, and search the knowledge base. Running your own diagnoses, uploads and changes are switched off.
Data stays on this server. Secrets are redacted automatically.
Knowledge base
Curated playbooks for Cisco, HPE Aruba, Palo Alto, Ubiquiti, Juniper, Fortinet and Arista plus your own runbooks, designs and vendor guides (PDF/DOCX/MD/HTML). Retrieval is hybrid: keyword (BM25) + local embeddings.
Title
Collection
Vendor
Chunks
Embedded
Devices & SSH
The assistant can log on to these devices. Diagnose cases run only allow-listed read-only commands; Resolve cases may propose changes that you approve one by one. Credentials entered here are kept in memory only.
Name
Host
Platform
Site
Source
Creds
RW
Consoleread-only commands, one per line
Quick analyze
Run the built-in analyzers without the LLM: log signatures & flap detection, config audit, CLI anomaly detection.
Integrations & MCP proxy
Every external connection goes through the MCP proxy (config/mcp_servers.yaml): tool allow/deny lists, read-only flags, secret redaction and auditing. NetDiag also exposes its own tools to other MCP clients at /mcp.
MCP servers
Audit log
Time
Actor
Action
Target
Case
Detail
Users
Admins manage everything. Users see only their own cases and work in Diagnose mode. Expired or disabled accounts are signed out immediately.