NetPol

Overview

NetPol brings switch health, alarms, topology discovery, and configuration recovery into a system that can run on a local server, VM, or Raspberry Pi. The maker says day-to-day monitoring involves no telemetry, cloud sync, or third-party data processors, with switch data staying on the customer’s server. That local control suits environments where cloud dependence is unwelcome, though it also means the monitoring system must be deployed and maintained on site.

Polling classes range from Core at 30–90 seconds to Standard at 120–300 seconds and Slow at 300–900 seconds, alongside Maintenance. Jitter is intended to protect OT control planes. The range gives operators useful control over polling intensity, but choosing an interval still requires care around the needs of the monitored network.

Key features

Switch monitoring and alarms

SNMP v2c polling surfaces CPU and memory use, interface status, errors, and uptime. Per-switch thresholds, alarm acknowledgement or silencing, and an action history help operators manage alerts rather than merely observe status. The maker lists compatibility with managed SNMP v2c switches from Cisco, Hirschmann, Moxa, Fortinet FortiSwitch, HP/Aruba, Juniper, and Extreme Networks.

Topology and configuration recovery

Automatic CDP and LLDP discovery builds a live map of device relationships and link states, a practical advantage when teams need to understand connections across an industrial network. One-click SSH configuration backups, side-by-side diffs, and full restore add a recovery path when switch changes need to be reviewed or reversed.

Reporting and protocols

PDF management reports combine switch status, alert summaries, and recommendations for operational review. NetPol supports SNMP v2c, CDP, LLDP, SSH, and syslog. These capabilities keep its focus on switch operations and reporting rather than establishing it as a broad industrial cybersecurity platform.

Pricing

NetPol has no free plan and offers a 7-day trial. Every listed plan is billed per node, so costs rise with the number of NetPol nodes rather than being a single site-wide fee.

Plan	Price	What it includes	Best fit
Enterprise Dashboard	200.00 AUD per month, billed per node	Aggregates data from multiple NetPol nodes; cloud-hosted or self-hosted	Operators who need a combined view across nodes.
Lite	1000.00 AUD per month, billed per node	Up to 25 switches, SNMP v2c polling, real-time dashboard, alarm management, email support	A smaller deployment that can stay within the switch cap.
Medium	1500.00 AUD per month, billed per node	Unlimited switches, SNMP v2c polling, topology map, configuration backup and diff, full reporting suite, priority support	Teams that need topology and recovery across a larger switch estate.
Pro	2000.00 AUD per month, billed per node	Unlimited switches, multi-client profiles, poll class system, PingPlot per-hop monitor, VLAN management, priority and phone support	Multi-client operators or teams that need the additional Pro tools and phone support.

Lite is the lowest-cost operational tier, but its 25-switch ceiling and lack of the listed topology and backup features are meaningful constraints. Medium removes the switch cap and adds those tools; Pro costs more for multi-client profiles, poll classes, PingPlot, VLAN management, and phone support. The separate Enterprise Dashboard is priced at 200.00 AUD per month per node and aggregates node data; it is not a replacement for the monitoring plans.

Platforms

NetPol supports Linux, macOS, Windows, web, and self-hosted deployment, with hybrid deployment also listed. Windows has no topology map, a significant limitation for teams choosing NetPol specifically to visualize device relationships. macOS 10.14 or later is fully supported, and Ubuntu 18.04 or later is recommended for Linux.

Deployment requires at least 1 CPU core, 512 MB RAM, and 500 MB free disk space, plus LAN access to switches, SNMP v2c enabled, and TCP port 5001 available. Confirming those network and host requirements before rollout can prevent avoidable setup friction.

Who it's for

NetPol is aimed at mining, utilities, water and wastewater, manufacturing, oil and gas, and transport infrastructure, as well as OT managed-service providers and multi-site industrial operators. It is a stronger fit for teams responsible for switch availability and configuration recovery than for buyers seeking a general-purpose cybersecurity suite. Its asset limit is 25, which should be considered alongside Lite’s 25-switch cap when sizing a deployment.

Pros and cons

• Local operation: Runs on customer infrastructure without a cloud dependency, supporting sites that want monitoring data to remain on their server.
• Useful recovery workflow: SSH backups, configuration diffs, and full restore provide concrete tools for managing switch changes.
• Flexible monitoring: Multiple polling classes and jitter allow polling to be tuned for OT environments.
• Cost and scale constraints: There is no free plan, pricing is per node, and Lite stops at 25 switches.
• Platform trade-off: Windows lacks the topology map, so it omits a key visibility feature on that platform.

Alternatives

For broader OT and ICS security monitoring options, see OT and ICS Security Monitoring Software.

• Nozomi Networks Platform is worth considering if a free plan and cloud-hosted security infrastructure are priorities; its Nozomi Vantage SaaS plan comes at no charge and is used to license hardware and Guardian nodes.
• EmberOT offers a free OT PCAP Analyzer for device and protocol breakdown, suited to readers seeking that focused analysis tool rather than NetPol’s switch monitoring workflow.
• Honeywell Forge is another paid platform, with product-specific offerings and term-based licensing for Advanced Process Control; contact Honeywell for pricing.
• FactoryTalk Analytics is another paid option.
• Kaspersky Industrial CyberSecurity Platform targets enterprise OT/IoT environments; pricing is available by demo or sales contact.
• OTDefend uses custom solutions with proposals and pricing tailored to customer needs.
• Radiflow iSID is another self-hosted and web option, with pricing available by demo or contact.
• Tenable One Attack Surface Management suits buyers seeking unified visibility across IT, cloud, web applications, OT, and external attack surfaces; its Foundation plan includes attack surface management and asset intelligence.

Verdict

Choose NetPol if you operate OT or industrial switches and want self-hosted monitoring paired with topology discovery, alarms, and configuration recovery. Its strongest case is the combination of local operation and practical switch-management tools. Look elsewhere if per-node costs, Lite’s cap, or Windows’ missing topology map conflict with the scale or platform your deployment requires.