01

IPAM, but the addresses know what they are for.

Every IP record in OmniTwin is a live Durable Object — not a row in a table. When an agent touches a subnet, it acts as a named principal with a delegated identity. agent:reconciler (acting as: maya@acme.com) isn't metadata bolted on after the fact. It's the write path itself.

That means your IPAM has an immutable audit trail, full reversibility on every allocation, and agents that can resolve conflicts without opening a ticket. VLAN objects carry the same identity model. Subnets know their purpose, their owner, and the last agent that touched them — and why.

  • Identity-bound writes on every allocation
  • Immutable audit log — no gaps, no bolt-ons
  • Conflict resolution without human escalation
  • VLAN, subnet, and IP all in one object graph

The ⌘K command bar: two modes, one input.

Type a CIDR block or hardware keyword — 10.0.0.0/24, gi0/1 — and the bar stays deterministic: instant typeahead, no AI involved. Start with an operational verb — Find all unused /24s in prod-east, Allocate a /28 for the new k8s cluster — and the bar morphs into an agent prompt with streaming results.

One input field. Two behaviors. The engineer always knows which mode they're in because the UI tells them before they press enter.

Server streaming response
[
  { "type": "agent_status",    "body": "searching vector index..." }
  { "type": "data_chunk",      "body": { "matches": 3 } }
  { "type": "agent_tool_call", "body": { "fn": "allocate_subnet" } }
  { "type": "final_result",    "body": { "committed": true } }
]

Ctrl + ~ opens the agent telemetry drawer.

02

DCIM with drift detection as a first-class signal.

OmniTwin's Canvas renders your physical and virtual infrastructure as a live object graph. Every rack, device, port, and interface is a Durable Object. When the real world diverges from the twin — a cable gets moved, a device is reconfigured, a lease expires — the Canvas marks it.

Drift isn't a cron-job report delivered the next morning. It's a signal that surfaces the moment the discrepancy appears. One-click reconcile queues an agent action, lets you review the delta, and commits the fix with full identity attribution.

The agent surfaces drift, proposes the action, and waits for the human to commit it. Identity is bound to the action — not to the chat window.

  • Canvas: live object graph of physical and virtual infra
  • Drift detection as a real-time signal, not a batch job
  • One-click reconcile with delta preview
  • Every fix attributed to agent and delegated human

03

The Universal Importer.

Infoblox NIOS. BlueCat. phpIPAM. CSV. Whatever DDI tool you're running today, OmniTwin speaks it. Export from your old tool, drop it in the Importer, and you have a working twin.

Designed to get your existing exports into a working twin in a single sitting. The Importer validates, normalizes, and maps every record to a live Durable Object with fast, Rust-backed workers. Nothing is silently dropped. Every import conflict surfaces with a suggested resolution and waits for your approval before writing.

  • Infoblox NIOS, BlueCat, phpIPAM, CSV & more
  • Full validation before any write commits
  • Conflicts surface — none are silently dropped
  • From export to working twin in a single sitting

Not just different. Different by design.

NetBox Labs
OmniTwin
Architecture
Monolithic Django framework. Static registry, no real-time reactive tier.
Go control plane + Rust math engine. Streaming-first via gRPC/MCP.
Data ingestion
Discovery engine is open source (Diode). Sophisticated buyers use it without ever converting to a paid tier.
Discovery is native and runs on the same agent runtime paid customers use.
Drift detection
Reactive dashboard. A human must click to accept, deny, or fix every discrepancy.
Drift is a pulsing red line on the canvas. The agent reconciles in one click and logs identity, intent, and result.
SSO / SAML
SAML gated behind the top "Premium" tier. Basic group mapping gated behind "Pro."
SAML, OIDC, and role-based group mapping are platform features at every tier.
Visualization
Add-on graphical UI rendering a relational dataset. Slow at enterprise scale.
Graph database (Neo4j) as the topology layer. Built to render large active node sets in real time.
AI capability
Natural-language query layer wrapping a third-party LLM.
Agents live inside the twin with persistent state and identity-bound action.
Air-gap deployment
Self-managed enterprise edition. Notoriously complex; high PoC failure rate per buyer interviews.
Single-binary Iron Vault profile. No external dependencies. (Roadmap)
Buyer
CIO with a procurement team. Six-figure annual contract floors.
Engineer with a credit card. Self-serve to Premium. Custom only when the math requires it.

Private Beta

Get early access.

We're onboarding the first teams now. Join the list and we'll reach out when your slot opens.

No spam. No sales calls. By submitting you agree to our Terms and Privacy Policy.