products/Explorer

See the network as it really is.

IT/OT visibility in hours, not weeks: the live network discovered, end to end. No agents. No sensors. No SPAN ports.

[ Walkthrough ]

Discover your live network.

[ The reality ]

Your docs are already out of date.

Critical networks are mixed-vendor, always changing and barely documented. You can't secure, segment or troubleshoot what you can't see.

  • The wall diagram is three reorganisations old
  • Spreadsheets drift from the live network the moment something is plugged in
  • Heavy discovery tooling is its own deployment project
  • No clear picture, so segmentation and audits stall before they start
[ Use cases ]

Where Explorer fits.

Trusted by energy companies, hospitals, universities and manufacturers, wherever network clarity saves time and prevents outages.

01

Network troubleshooting

From hours to minutes. Search the whole network by IP, MAC, VLAN or vendor; the topology shows exactly where the problem starts.

02

Security architecture

See single points of failure, redundancy paths and STP topology: the picture segmentation and hardening decisions actually need.

03

Assessment & audit

Complete, current network documentation generated in hours, for security audits, compliance reviews and architecture work.

04

Segmentation projects

Plan and validate segmentation with full visibility: VLAN sprawl, dependencies and blast radius, before you touch anything.

05

Incident response

When something breaks, snapshot comparison shows exactly what changed, and the map shows who it affects.

06

Change management

Configuration drift tracked automatically. Git-based config history stands as a continuous audit trail.

[ Capabilities ]

What Explorer does.

Discover the network, analyse it, then operate it day to day.

Discoverbuild the live picture
Device inventory
DEVICEVENDOR
CORE-SW-01MikroTik
DIST-AHirschmann
EDGE-SW-7Cisco
HMI-PANELSiemens
47 devices · 20+ vendors
Hardware, software and configuration detail for every switch, router and firewall, discovered automatically.
Interactive netmap
Topology maps with custom layouts by site, building or zone. Drag, zoom, export.
Deep search
mac:00:1B:*
3 matches · 0.02 s
› HMI-PANEL00:1B:44:11
› PLC-S7-120000:1B:44:73
› WS-DELL-1200:1B:44:A0
Find anything instantly: IP, MAC, VLAN, hostname, vendor or tag. JSON queries for power users.
Analysefind what matters in it
Spanning-tree analysis
ROOT BLK
STP topology, root bridges, single points of failure and Layer-2 blast radius, visualised.
Assessment checks
half-duplexpass
err-disabled2 ports
MAC flappingpass
STP consistencypass
Automated health checks: half-duplex, err-disabled, MAC anomalies and more.
History & snapshots
daily snapshots
compare 06:00 → 22:00
~ SW-03 ge-0/0/12 changed
+ HMI-PANEL-2 new host
3 changes since 22:00
Daily snapshots track the network over time. Compare any two states, see what changed.
Operatekeep it true, day to day
Config management
config · EDGE-SW-7⎇ 3 commits
- switchport mode access
+ switchport mode trunk
+ switchport trunk vlan 30
backed up · 22:14 · git
Git-based version control, automatic backups, a full audit trail of who changed what.
Zones & segmentation
ZONEVLANDEVICES
OT-Cell-33012
SCADA208
Mgmt2005
Corporate1021
Define security zones, track VLAN assignments, plan segmentation projects.
API-first
GET /api/devices?site=OT-Cell-3
200 OK · application/json
[ { "host": "EDGE-SW-7", "vlan": 30 }, … ]
REST · every view is also an endpoint
Everything Explorer shows is available over a REST API: script discovery, sync your CMDB, wire it into your own tools.
Add-on

The optional Endpoint Agent extends Explorer to the host in the same UI: system, processes, software, hardware. An add-on module, not a separate product. See below ↓

[ Add-on module ]

The Endpoint Agent.

Explorer maps the network without touching a host. Install the Endpoint Agent on a host and additional detail opens up inside the same Explorer UI: system, processes, software, hardware. The agent is light. It runs on industrial PCs in OT environments as readily as on data-center hosts, with builds for macOS, Linux and Windows.

Fig. — Explorer add-on · Endpoint Agent
narrowin Explorer — network map
CORE-01 SW-A SW-B hmi-04
Endpoint Agent — enabled on 3 of 8 hosts
EXPLORER ADD-ON
Endpoint Agent
host details
▸ ENABLED
narrowin Explorer — host detail
hmi-04 ● ENDPOINT AGENT
Windows 10 IoT Enterprise LTSC
SYSTEM & HARDWARE
HardwareSIMATIC IPC427E
Kernel10.0.19044
Uptime42 days
PROCESSES
CCAgent.exepid 41286.2%
firefox.exepid 22100.4%
RTloader.exepid 55302.1%
SOFTWARE
SIMATIC WinCC7.5 SP2
STEP 7 ProfessionalV16
Firefox ESR128.4.0
Endpoint Agent · processes, packages, users, ports, patches · 2 min ago
No separate product, no separate console. The network view gains host-level depth, inside the same Explorer UI.
macOS Linux Windows industrial PCs · OT data-center hosts light footprint
[ How it works ]

Deployed in under 30 minutes.

A lightweight approach: Explorer is running and returning results inside the first hour.

1

Non-invasive discovery

Explorer queries switches and routers over SSH with standard show commands, so there's no traffic interception and the load on each device stays minimal.

2

Parallelised queries

Queries run across the whole network at a configurable interval, harmonised into one vendor-agnostic data model.

3

Simple setup

Deploy as a VM (VMware, Proxmox, ESXi). Give it read-only SSH credentials and device IPs; CSV bulk import is available.

4

First results in 30 min

Deploy, configure, run the first discovery: full topology, device inventory and connected endpoints inside the hour.

[ Details ]

The specifics.

Technical specifications
DeploymentVM (VMware, Proxmox, ESXi), narrowin hardware, or a laptop
DiscoverySSH (primary), SNMP v1/v2c/v3, REST API
Vendors20+ including Cisco, Aruba, HP/HPE, Siemens, Moxa, Hirschmann, Fortinet, MikroTik
AuthenticationLocal users, SAML SSO (Keycloak, Entra ID, Okta, ADFS), and LDAP / Active Directory
LicensingPer managed switch / router, unlimited endpoints
DataOn-premises only; your network data stays on your infrastructure
Setup time~2 hours including installation, to first insights
Documentation/docs/explorer (login) →
Frequently asked

How is it different from a monitoring tool?

Monitoring tells you if something is up or down. Explorer tells you what you have, how it is connected and what changed, for understanding, documentation and operations.

Does it work for OT as well as IT?

Yes. Explorer is vendor-agnostic and built for mixed IT/OT environments; non-intrusive discovery keeps it safe in sensitive OT zones.

How long does deployment take?

About two hours including installation, to first network insights, with no sensors or complex integrations to set up.

Which vendors are supported?

Cisco, Aruba, HP/HPE, Siemens, Moxa, Hirschmann, Allied Telesis, Fortinet, MikroTik, Extreme, Garderos and more.

Where is my data stored?

On-premises only. Your network data never leaves your infrastructure.

Can it be used for assessments?

Yes, many partners use Explorer for network audits and assessment engagements. It produces complete documentation in hours, not weeks.

[ Proof ]

Running in critical infrastructure today.

The Lightweight Network Explorer is an important foundation for us to implement the ICT minimum standard for critical infrastructures.
Markus WeberHead of IT · Swissgas
Also deployed at

sciCORE · University of Basel: Explorer underpins stable operations of a demanding research-computing network.

SwissgassciCORE / UnibasAxians
[ Related work ]

Deep dives into visibility & operations.

No slides. No sales pitch.

Tell us about your network.

Talk to us about your network