Network config backup.
Every change, on record.
MantisNMS is network configuration backup software that saves your switch, router and firewall configs on a schedule and on demand, keeps every version, shows exactly what changed, and flags insecure settings — cloud-hosted, with a free trial and no server to run.
Built for the job.
Included in MantisNMS.
Automatic backups
Scheduled and on-demand backups over SSH for Cisco, Juniper, Fortinet, Arista, HPE/Aruba, MikroTik and Palo Alto, plus Cisco Meraki through the Dashboard API. A new version is saved only when the config really changes.
Versions and diffs
Every version is kept, with a side-by-side diff of exactly what changed between any two.
Drift alerts
Get an alert when a device's running config changes, so no change goes unnoticed.
Compliance checks
Built-in checks per vendor — default SNMP communities, telnet, plaintext passwords, missing hardening — plus your own rules. High-severity findings open an incident.
Secrets stay hidden
Passwords and keys in stored configs are masked. A changed secret still shows up in the diff; its value never does.
Careful with logins
SSH credentials live in an encrypted vault, can be set per device, and each device's SSH host key is pinned so credentials are never sent to an impostor.
Up and running
the same day.
Add your devices
Add the switch, router or firewall as an SNMP sensor; MantisNMS identifies the vendor.
Give it a login
Assign an SSH credential for the site, or pin one to the device. Meraki uses your Dashboard API key.
Backups run
Configs are backed up on a schedule, and you can click "Backup now" any time.
Watch for change
Drift alerts and compliance findings appear in Alerts and the notification bell.
Config backup is part of MantisNMS, priced per sensor from $175 per month for 500 sensors, with no multi-year contract. See pricing →
Open-source tools or
MantisNMS?
Open-source tools (Oxidized, RANCID)
Free, well established and a good fit if you are comfortable running your own server, writing your own device models and wiring up alerting and reporting yourself. You also look after storage, credentials and updates.
MantisNMS
Hosted, with backups, version diffs, drift alerts, compliance checks and an encrypted credential vault built in, and network monitoring on the same platform. Nothing to install or patch. Free trial, then from $175 per month.
Config backup guides by vendor: Cisco · Fortinet · Juniper · Palo Alto · Arista · MikroTik · HPE / Aruba
Common questions.
Cisco, Juniper, Fortinet, Arista, HPE/Aruba, MikroTik and Palo Alto devices over SSH, and cloud-managed Cisco Meraki networks through the Meraki Dashboard API.
No. Secrets in stored configs are replaced with a masked fingerprint before they're saved, so changes still show up in diffs but the values never appear.
On a regular schedule and whenever you click "Backup now". A new version is only saved when the configuration actually changes.
Yes. Tools such as Oxidized and RANCID are free and widely used for backing up device configs. They suit teams happy to run their own server and build their own alerting, reporting and credential handling. MantisNMS is the hosted option: backups, version diffs, drift alerts, compliance checks and a credential vault are built in, and config backup sits alongside network monitoring, with a free trial.
Yes. Add rules that require or forbid any pattern in a config, alongside the built-in checks for each vendor — and switch off any built-in check you don't need.
Try MantisNMS free
No credit card required. We review every signup and email your activation link within one business day.
Start a MantisNMS trial →Related: MantisNMS network monitoring · PRTG alternative · Pricing