Pre-1.0 and under active development
Self-hosted network discovery, inventory and topology. With an AI assistant over your own data.
NETMapper logs into your switches over SSH, reads MAC/ARP tables and LLDP/CDP neighbors, and builds a live inventory and topology of every connected device. It watches for changes and fires alerts. A read-only AI assistant answers questions about that inventory; it does not do the discovery itself. Self-hosted, no cloud, no per-seat licensing.
Nothing to download. One command on a host with Docker.
NETMapper Core is free software under AGPL-3.0-only. Compare editions
What it does
Discovery, topology, alerting, and an AI assistant on top of the same data the dashboard shows.
Network inventory
MAC table, ARP table, hostname, vendor OUI, VLAN, port, and first/last-seen timestamps for every device on every switch.
LLDP/CDP topology
Neighbor edges read over SSH, drawn on an interactive canvas with zoom, pan, export, a Follow MAC mode, and bookmarked views saved server-side.
Scheduled scans and DHCP
Per-switch or scan-all intervals, plus a manual scan on demand. Lease correlation via Kea, ISC dhcpd, MikroTik RouterOS, Windows DHCP, pfSense, and OPNsense.
Alert rules and channels
Fire on new device, device missing, vendor, VLAN, or custom field conditions. Deliver to email, Slack, Teams, webhook, Telegram, Discord, Mattermost, PagerDuty, or OpsGenie.
AI assistant, read-only
Ask questions about your inventory through any OpenAI-compatible provider, including Ollama and local models. Tool use is gated to read-only inventory lookups and keys are encrypted at rest.
Security and access control
Role-based access with admin, operator, and viewer roles, TOTP two-factor auth, HttpOnly cookie plus CSRF auth, and switch credentials encrypted at rest.
What it looks like
Real screens from a running NETMapper. The network behind them is the mock lab that ships with Core, so you can reproduce every one of these before you point it at anything of your own.
Dashboard
Device and switch counts, when the last scan ran, the device mix by OS family, and the vendors that make up the inventory. Panels are draggable, so the layout matches how you actually work.
Inventory
Every MAC the switches reported, with the vendor resolved from the IEEE OUI database, an OS guess from vendor and hostname together, the port and VLAN it was seen on, and first and last seen timestamps.
Topology
Drawn from the LLDP and CDP neighbours the switches reported, not from a diagram someone maintains by hand. Each edge is labelled with the ports on both ends. Colour shows how recently the switch was scanned.
Switches
The devices NETMapper logs into. Credentials are encrypted at rest; the scanner is chosen per switch, and eleven vendors ship in Core.
Settings
Operational settings live in the UI, not only in a file. Anything your deployment pins in .env is shown read-only here, so you can always see where a value came from.
Want to click around instead? The mock scanners need no hardware:install it, add a switch with the mock type, and scan.
11 vendor scanners
Every scanner ships in Core. Scanners register automatically with the plugin factory, so adding a vendor is a single module.
One-command install
Docker is the only requirement. The installer downloads the compose files for the latest release, generates the secrets, starts the stack and creates your admin user.
curl -fsSL https://netmapper.nx1xlab.dev/install.sh | bashThen open http://<host>/. Prefer to read first? Each release ships a quickstart zip with the compose files and a pre-filled .env template. Run it on your management network behind a firewall; it holds switch credentials.
Who it is for
A lightweight, self-hosted alternative to bulkier DCIM or monitoring suites.
Network engineers
A live inventory of what is plugged into which port, on which VLAN, and since when. Topology drawn from LLDP/CDP instead of a stale diagram.
SOC analysts
Alerts on new or missing devices, a persistent audit log of every privileged action, and statistical anomaly flags for device churn and unknown devices.
Homelab operators
One docker compose command, no cloud account, no per-seat licensing. Runs on your own hardware and stays there.
Under the hood
A conventional stack you can read, audit, and run yourself.
Ready to map your network?
Use NETMapper only on networks you own or are explicitly authorized to assess.