The address plan that matches the live network.

Subnet, VLAN and IP allocation: lightweight, multi-zone and vendor-agnostic, built for OT networks where an address stays put for decades. Paired with narrowin Explorer, it shows a live diff between your plan and what the network actually contains.

narrowin IPAM — address plan PLANNED
PREFIX · NAMEVLAN
10.20.0.0/22Core services VLAN 100
10.20.8.0/22OT cell A VLAN 110
10.20.12.0/24Substation 04 VLAN 201
narrowin Explorer — discovered LIVE
PREFIX · HOSTSVLANvs PLAN
10.20.0.0/22162 hosts VLAN 100
10.20.8.0/2284 hosts VLAN 110
10.20.12.0/2441 hosts VLAN 210
10.20.40.0/2411 hosts · unplanned VLAN 130+
live diff vs your plan · 2 match · 1 VLAN mismatch · 1 unplanned subnet
[ Walkthrough ]

See the live diff in action.

[ The reality ]

Your IP spreadsheet is wrong. You just don't know where.

Addressing is the source of truth your whole network depends on. Keep it in a spreadsheet and you're running critical infrastructure on a guess.

  • The spreadsheet drifts from the network the moment anything changes
  • Parallel copies drift into separate sources of truth
  • Conflicts and overlaps surface during an outage, not before
  • Full IPAM suites are too heavy for a small OT team to maintain
  • In OT an address is infrastructure: assigned for decades, no room for clashes
[ Use cases ]

Where IPAM fits.

Purpose-built for operational networks, where IP addresses are infrastructure, not just database entries.

01

Replace the spreadsheet

Live validation shows exactly where your documentation has diverged from the live network, down to the row.

02

OT network documentation

Addresses assigned for 10–20 years, strict change control, zero tolerance for conflicts. Built for this, not adapted from an IT tool.

03

Pre-change validation

Before you touch the network, confirm the plan is accurate. The live diff surfaces the discrepancies that would otherwise bite mid-change.

04

Compliance & audit

Demonstrate accurate address documentation for ISO 27001, IEC 62443 and similar. Full change history; exports ready for auditors.

05

Merger & integration

Integrating two networks? Import both address spaces, detect overlaps, plan migrations. Utilization makes consolidation visible.

06

Off the spreadsheet

Bring an existing Excel or CSV. IPAM validates it against reality and keeps it current. Most migrations finish in hours, not weeks.

[ Capabilities ]

What IPAM does.

Manage the plan, check it against the live network, and stay light enough that a small team keeps it current.

Manage the planthe address book
Hierarchical prefixes
10.20.0.0/16 10.20.0.0/22 · Core 10.20.8.0/22 · OT cell A 10.20.16.0/20 · free utilization · VLSM-aware
Hierarchical subnets with VLSM. See utilization and free space at every level of the tree.
Every address tracked
Active184
Reserved12
DHCP range40
Deprecated6
Each address has a lifecycle (active, reserved, DHCP, deprecated), with who assigned it, and when, plus OT custom fields.
VLANs, VRFs, zones
IT zone6 VLANs
OT zone14 VLANs
DMZ3 VLANs
VRF contexts4
VLANs, VRFs and locations modelled per zone: addressing that mirrors a segmented OT network, not a flat list.
Check it against realitythe live diff
Plan vs discovered
10.20.8.0/22VLAN 110
10.20.12.0/24201 ≠ 210
10.20.40.0/24unplanned+
IPAM continuously compares your plan against what narrowin Explorer discovers on the wire: plan versus reality, side by side.
Discrepancies surfaced
VLAN mismatch2 prefixes
Unplanned subnet1 found
Address conflict1 host
Subnet at 92% fullcapacity
Mismatches, overlaps and unplanned subnets surface the moment they appear, not during the next outage.
One-click reconcile
10.20.12.0/24VLAN 201 ≠ 210
Reconcile — set plan to VLAN 210 ✓
or flag the discovery for investigation
Resolve a discrepancy in one click: update the plan to match reality, or flag the discovery for review.
Light enough to keep upadoption
Bring your spreadsheet
ip-plan.xlsx narrowin IPAM 247 rows imported 3 conflicts flagged
Import your existing Excel or CSV. IPAM validates on import, flags conflicts and duplicates: migrations in hours.
Standalone or paired
STANDALONE
A modern, lightweight IP manager: import, allocate, track utilization.
WITH EXPLORER
The live diff switches on: plan versus reality, continuously.
On its own, a clean IP manager. Connected to Explorer, a live diff. Start either way, add Explorer when you're ready.
Audit trail & API
Change history · who & when
REST API● automation
Export · Excel / CSV
Audit evidence · ISO 27001
Every change recorded with who and when. A REST API for automation, and exports auditors can actually use.
Part of the Explorer family

IPAM is the addressing layer of narrowin Explorer. On its own it is a modern, lightweight IP manager; connected to Explorer it becomes a live diff: your plan against the network Explorer actually discovers. It has its own page because an addressing problem deserves a direct answer, but in practice the two are deployed together.

[ How it works ]

From spreadsheet to a plan that stays true.

Getting started is simple, whether you run IPAM on its own or paired with Explorer for the live diff.

1

Import your spreadsheet

Bring an existing Excel or CSV. IPAM validates the data and flags conflicts and duplicates. Hours, not weeks.

2

Connect Explorer

With Explorer connected, IPAM continuously compares your plan against the discovered network state.

3

See the live diff

VLAN mismatches, address conflicts and unplanned subnets surface the moment they appear.

4

Reconcile

Resolve a discrepancy in one click: update the plan to match reality, or flag it for investigation.

[ Details ]

The specifics.

Technical specifications
DeploymentOn-premises: part of narrowin Explorer; standalone option available
Data modelPrefixes, IP addresses, VLANs, VRFs, locations
Address familiesIPv4 and IPv6, full prefix and address management
Live validationContinuous diff against narrowin Explorer discovery data
ImportExcel (.xlsx) and CSV, validated on import, conflicts flagged
APIREST API for automation and integration
AuthenticationLocal users, SAML SSO (Keycloak, Entra ID, Okta, ADFS), and LDAP / Active Directory
AuditFull change history: who assigned what, and when
DataStored locally on your own infrastructure
PackagingLicensed with narrowin Explorer; standalone available, talk to us
Documentation/docs/ipam (login) →
Frequently asked

How is this different from NetBox or phpIPAM?

Live validation. Most IPAM tools are documentation databases: they store what you tell them. narrowin IPAM continuously compares your plan against the network Explorer actually discovers, so discrepancies surface before they cause problems. It is also light enough for a small OT team to keep current.

Is IPAM part of Explorer, or its own product?

Both, in effect. IPAM is the addressing layer of the Explorer family and is normally deployed with it: that pairing is where the live diff comes from. It has its own page because an addressing problem deserves a direct answer.

Can I use IPAM without Explorer?

Yes, standalone, as a modern, lightweight IP manager: import, allocate, track utilization. The live diff needs Explorer's discovery data; add Explorer later and it switches on.

How do I migrate from spreadsheets?

Excel or CSV import with validation. IPAM flags conflicts and duplicates on import and brings in clean records. Most migrations finish in hours.

Does it support IPv6?

Yes, full IPv4 and IPv6 prefix and address management, side by side.

What about DHCP?

IPAM tracks DHCP ranges and can import lease data. Direct DHCP-server integration varies by vendor. Talk to us about your environment.

[ Related work ]

Deep dives into IP management.

Make the plan match the network.

Stop guessing which row of the spreadsheet is wrong. See your address plan and your live network, side by side.

Talk to us about IPAM