NetStacksNetStacks

NetStacks Engineering · Network automation consulting

We get network automation into production. On the platform you already own.

We are network automation engineers who specialise in Cisco NSO, Cisco Crosswork, NetBrain and Forward Networks. We build software too. NetStacks is the product with our name on it, and it is one of many tools we have built. Most of our work is for clients: rescuing projects that stalled, delivering workflows on the platform they already own, and building the small tools that let those workflows finish.

No sales team
The engineer on the first call is the engineer who does the work. There is no account manager and no handoff from sales to delivery.
No vendor quota
We resell no one else's platform, and we tell you when our own product is not the right fit.
Fixed scope, fixed price
Every stage is priced before it starts, and you can stop after any of them.
You own what we build
Code, pipelines and runbooks live in your repository from the first commit.

When to call us

  • The platform has been installed for months and only a handful of workflows run in production.
  • Changes still arrive as tickets and an engineer still types them in.
  • The person who built the automation has moved on, and nobody wants to touch it.
  • The platform does 90% of the job and the last 10% needs a tool nobody has time to build.
  • You want a second opinion before buying another platform.

Why automation projects stall explains the seven patterns we see most often.

How we engage

It starts with a 30-minute call with an engineer: no slides, no demo unless you ask for one. You get a short written note afterwards with what we would do first, or who we think is better suited. From there the work runs in stages, each priced before it starts.

  1. 01

    Assess

    2 weeks, fixed price

    A read-only review of the platform, the process, and the team against the seven patterns that stall automation projects. Versions, packages, sync state, repository history, change records, and interviews with the engineers who build it and the operators who are meant to use it.

    You get: A scorecard with the evidence for each finding, a risk list, and a 90-day plan that names the first workflow to put in production.

  2. 02

    Deliver

    6 to 8 weeks, fixed price

    One or two workflows chosen in the assessment, built, tested against a simulator or a lab, and put into production. Git as the source of truth for the code, a pipeline with dry-run review on every merge request, and a reconciliation plan for devices that have drifted.

    You get: Workflows in production with test cases and a runbook each, a repository and pipeline the team has used, and handoff sessions with the client's engineers.

  3. 03

    Run

    Monthly retainer

    Senior automation engineering on a set number of days each month. Platform and driver upgrades on a cadence, new workflows, small tools where the platform has a gap, and code review with the team. Pairs naturally with a NetStacks support plan.

    You get: A platform that keeps moving after the project ends, without a full-time hire.

change-vlan-access.flowRun #4411runningServiceNowCHG0048211 approvedok0.3sPre-checkpyats learn bgp isisok41sForward verifyintent + path queriesok18sNSO dry-runcommit dry-run nativerunningliveReview diffowner: noc-l2waitingwaitApply + post-checkcommit, pyats diffqueuedqueuedRun log12:04:11pre-checkbgp 24/24 established isis 12/12 up12:04:29forwardchecks 31/31 pass isolation cust-1042 holds12:04:30nsocommit dry-run outformat native pe2-den +3 lines12:04:30reviewwaiting for noc-l2
What every delivery builds, whatever the platform: ticket in, checks, a dry-run diff a person reads, the change, checks again, evidence saved.

What we've built

NetStacks, our terminal and controller, is the tool we publish under our own name. It is not the only one. Most of what we build belongs to clients and lives in their repositories, so we describe it here rather than name it:

  • AI operations agentsChat and chat-ops agents that run read-only device commands over SSH, NETCONF and gNMI, query inventory and ticketing, and stop for a person's approval before anything changes.
  • Operator portals and formsSo a NOC engineer can run a workflow from a form instead of logging into the orchestrator.
  • Ticketing integrationsServiceNow and Jira wired to the platform that makes the change, with results written back to the ticket.
  • Service packages and modelsOrchestration service models with the inputs operators have, and a dry-run diff they can read.
  • Change pipelinesPre-checks, dry runs, approvals and post-checks in GitLab CI or GitHub Actions, with evidence kept for every change.
  • Drift and compliance reportsBuilt from data the network already produces, on a schedule, without a new platform.
  • Parsers and collectorsFor the devices and outputs a platform does not cover out of the box.
  • Lab and test harnessesSimulators and test suites so a change or an upgrade is tried before it is real.

When the gap is something a product should solve, we say so, even when the product is not ours. When it is ours, you can read about NetStacks on its own site.

Who you work with

Engineers who have run networks and built automation for them. The people on the first call are the people who do the assessment, write the code and hand it over. There is no sales team, no account manager and no point where the work is passed to someone you have not met.

That also means we will tell you when we are not the right fit, when your existing platform can already do what you are asking for, or when the answer is a process change rather than more software.

Platforms we specialise in

Independent, hands-on expertise. We are not affiliated with these vendors and do not resell their products; we make the platform you have licensed do the job.

  • Cisco NSOService packages, NEDs, YANG models, upgrades, and brownfield reconciliation. Git and a netsim pipeline for every package change.
  • Cisco CrossworkChange Automation playbooks built around real change windows. Workflow Manager flows that take a ticket in and hand evidence back.
  • NetBrainRunbooks and intent checks before and after every change, triggered from the ticket. Maps that stay current because they are used.
  • Forward NetworksIntent and path verification in the change pipeline, so a change that breaks reachability or isolation is blocked before it ships.
  • NetStacksOur own controller and terminal, for MOPs with approvals, shared credentials, session recording, and an AI assistant that reads the same CLI the operator does.

How we work

  1. Start with the process, not the tool.

    Before anything is built, the way a change actually happens today is written down with the people who make it. Automation that skips this step encodes a process nobody agreed on, and that is where most projects stall.

  2. One small workflow before any large one.

    The first thing in production is frequent, low-risk, and boring. It proves the path from request to device and gives operators a habit. Scope grows from there.

  3. Every change gets a dry run a person reads.

    No change reaches a device without a native diff reviewed by someone who knows the network. If the diff is a surprise, the change does not ship.

  4. The platform you own comes first.

    We build NetStacks, and we say when it is not the right tool. The platform a client already owns is the one we make work, and ours comes in only where it adds something the stack does not have.

  5. The client can run it without us.

    The measure of a finished engagement is that the client's team can operate, change, and upgrade what was built on their own. Until that is true, the work is not done.

Questions

Do we have to use NetStacks?
No. Most engagements do not involve it. The platform you already own is the one we make work. NetStacks comes up only when it fills a gap the existing stack cannot, and we will say plainly when it does not.
Who will we actually talk to?
Engineers. The people on the first call are the people who do the assessment and write the code. Nobody on our side is paid to sell you something.
What happens on the first call?
Thirty minutes, no slides. We ask what platform you run, what the project was meant to do and where it stopped. Afterwards you get a short written note with what we would do first, or the name of someone better suited if it is not us.
How is the work priced?
The assessment and each delivery stage are fixed scope and fixed price, agreed before work starts. Ongoing work after that is a monthly retainer for a set number of engineering days.
What do you need from our team?
For an assessment, read-only access and two to four hours in total from the people who build and operate the platform, spread over two weeks.
Who owns the code afterwards?
You do. Everything is in your repository from day one, written so your engineers can change it after we leave.

Tell us where the project is stuck.

Thirty minutes with an engineer. If we can't help, we'll say who can.

Cisco, Cisco NSO, Cisco Crosswork, and pyATS are trademarks or registered trademarks of Cisco Systems, Inc. Juniper and Paragon are trademarks of Juniper Networks, Inc. NetBrain is a trademark of NetBrain Technologies, Inc. Forward Networks is a trademark of Forward Networks, Inc. NetBox is a trademark of NetBox Labs. Nautobot is a trademark of Network to Code, LLC. Ansible is a trademark of Red Hat, Inc. ServiceNow is a trademark of ServiceNow, Inc. GitLab is a trademark of GitLab Inc. Jira is a trademark of Atlassian Pty Ltd. All other product names, logos, and brands are the property of their respective owners and are used for identification purposes only. Their use does not imply endorsement, sponsorship, or affiliation. NetStacks is an independent company and has no partnership, reseller, or affiliate relationship with any of these vendors.