/ WIT OS · Network Orchestrator
Run the network at machine speed.
Network Orchestrator is the WIT OS network operations orchestrator. Six specialist agents continuously observe, reason about, and act on your fabric, fusing telemetry from Arista, Kentik, and Cloudflare into a single explainable control plane.
- Unified inventory across Arista switches, Kentik flows, and Cloudflare edge
- Six agents covering topology, traffic analytics, anomaly detection, and remediation
- Sub-second anomaly correlation across L2 → L7
- Every action explainable, every change auditable
/ What you get
Everything you need. Nothing you don't.
Topology & Inventory
Live graph of switches, links, BGP sessions, edge POPs, derived from device APIs, not screen-scraped CLI.
Traffic Analytics
Kentik-powered flow analysis with WIT OS reasoning on top, from raw packets to a sentence in your alert.
Anomaly Detection
Statistical + LLM-grounded detection. Spikes, drift, leaks, and BGP weirdness, caught before they page.
Edge & DDoS Posture
Cloudflare config, WAF rules, and rate-limit posture continuously evaluated against your policy baseline.
Change & Remediation
Agents propose, simulate, and (with approval) execute fabric changes. Rollback always one click away.
Explainable Trace
Every recommendation cites its evidence. Every action records its before/after state. Auditable by default.
/ Inside the cockpit
Network Orchestrator Network Operations · live.
Multi-vendor visibility across Arista, Cisco, NVIDIA, Palo Alto, Fortinet, Kentik, and Cloudflare, fused into a single operator console with eight specialist agents on the wire.
Ready to run on WIT OS?
Talk to the team about a managed deployment, a pilot, or a custom agent. We typically respond within an hour.
/ FAQ
Frequently asked questions
What network vendors does Network Orchestrator support?
Arista, Cisco, Juniper, and Palo Alto for switching/routing/firewall. Kentik for flow analytics. Cloudflare for edge. ThousandEyes for synthetic monitoring. We integrate with the network you have rather than requiring a refresh.
Can Network Orchestrator make changes to my network, or is it read-only?
Read-only by default. Change capabilities are opt-in by integration: Network Orchestrator can deploy ACL updates, BGP policy changes, or firewall rules through CI/CD-style approval workflows. Every change is staged, reviewed, and rolled back automatically if validation fails.
How does Network Orchestrator detect network anomalies?
Baseline learning over 14-30 days establishes normal flow patterns, then Network Orchestrator flags deviations: unusual east-west traffic, new external destinations from sensitive subnets, BGP hijack attempts, DNS tunneling indicators, and lateral-movement patterns mapped to MITRE ATT&CK.