Nautobot Operational Compliance App

Automated Validation for Network Changes and Automation Workflows

operational-compliance

Step Up to Enterprise-grade Automation: All Applications are Developed, Maintained and Supported by Network to Code

Nautobot Operational Compliance

Availability Enterprise

Initial Release 2026-04-15

Latest Release 2026-04-15

Install App

Overview

Operational Compliance validates network changes on-demand with confidence and precision. By capturing and comparing device state before and after changes, teams gain immediate data-driven visibility into what changed, why it changed, and whether it introduced risk. Built on Nautobot’s automation framework, it enables engineers to define validation rules, execute checks at scale, and maintain a historical record of compliance outcomes for full operational traceability.

Challenge

Manual Network Validation Poses a Critical Risk

Modern network operations rely heavily on automation, but validation often remains manual, inconsistent, or incomplete. Teams push changes with limited visibility into their real impact, relying on spot checks or assumptions instead of evidence.

This creates several challenges:

  • Configuration changes can introduce unintended side effects that go undetected
  • OS upgrades and automation workflows can silently break critical services
  • Engineers lack a consistent way to validate intended state versus actual state
  • Troubleshooting becomes reactive, with no clear “before vs. after” comparison
  • Historical validation data is rarely captured, making audits difficult
  • Many one-off configurations go unnoticed and create compliance drift, which impedes automations and introduces risks

Even with configuration management tools, most solutions focus on generating or pushing configs, not verifying that the network is actually operating as expected.

Bottom line:
Without automated validation, you are simply automating risk. Operational Compliance is the solution that converts speed into confidence.

Solution

Seamless, Automated Validation Embedded Into Your Nautobot Workflows

Operational Compliance embeds validation directly into your network automation lifecycle. It enables teams to define what “correct” looks like, collect device state, and compare results across time to detect drift or unintended changes.

Define Validation Rules That Reflect Real Network Behavior

At the core of the app are validation rules that describe what should be true about your network:

  • Platform-specific commands (CLI or API-driven via NAPALM)
  • Structured or unstructured data parsing (TextFSM, TTP, JSON)
  • Flexible comparison logic including exact match, tolerance thresholds, and parameter validation

These rules allow teams to validate anything from interface state and routing neighbors to OS versions and performance metrics.

Collect and Normalize Device State for Accurate Comparison

The app executes commands against devices using the Nautobot Nornir integration and collects operational data in a consistent format.

  • CLI output is parsed into structured data
  • JMESPath extracts only the relevant fields
  • Data is normalized for accurate comparison

This ensures comparisons are meaningful and focused on what actually matters.

Pinpoint Changes with Pre- and Post-Check Comparison

The core workflow is simple but powerful:

  1. Collect device state before a change
  2. Execute the change or automation workflow
  3. Collect device state after the change
  4. Compare results using rule-defined logic

Differences are surfaced with precision, showing exactly what changed and where.

Organize and Scale Validation with Rule Groups

Validation rules can be grouped into logical workflows:

  • Pre/post upgrade validation
  • Maintenance window checks
  • Continuous compliance monitoring

These groups can be executed as Nautobot Jobs, scheduled, or triggered as part of automation pipelines.

Integrate with Git and CI/CD Pipelines for NetDevOps Alignment

  • Store validation rules and parsers in Git repositories
  • Maintain version-controlled compliance logic
  • Integrate validation into CI/CD pipelines for NetDevOps

This aligns validation with modern infrastructure-as-code practices.

The Outcome

Achieving Confident, Observable, and Scalable Network Operations

With Operational Compliance in place, network teams lower operational risk and move from reactive troubleshooting to proactive validation.

What Changes

  • Every change is validated, providing measurable evidence-based results
  • Engineers can immediately detect unintended impact
  • Compliance becomes a repeatable and auditable process that satisfies regulatory requirements
  • Automation workflows include built-in verification
  • Historical data provides full operational traceability

Key Benefits

  • Reduce risk during network changes and upgrades
  • Detect unintended behavior instantly
  • Improve reliability and trust of automation workflows
  • Establish a consistent validation framework across teams
  • Enable audit-ready, data-driven operations

Stop Guessing. Start Building Confidence.

Bring validation into every network change and eliminate uncertainty in your operations.

Request a Demo

Frequently Asked Questions

The app supports both structured data (via NAPALM getters) and unstructured CLI output parsed with TextFSM, TTP, or JSON, enabling validation across a wide range of network states.

It uses a comparison engine (jdiff) to evaluate differences between datasets using rule types such as exact match, tolerance thresholds, and parameter matching.

Yes. Validation workflows are executed using Nautobot Jobs, which can be scheduled or triggered as part of automation pipelines.

Yes. The app leverages Nautobot’s device inventory, platform models, APIs, and Jobs framework for seamless integration.

Yes. Validation rules and command parsers can be stored and managed in Git repositories, enabling version control and collaboration.

Typical use cases include validating critical network protocols (BGP, OSPF), verifying interface state, ensuring configuration persistence during upgrades, and establishing continuous compliance monitoring after automation workflows.

No. It complements them by validating operational state, ensuring that intended configurations result in the expected real-world behavior.

The app is an extension of the Nautobot platform and requires the Nautobot Nornir plugin to connect to devices and collect operational data.

ntc img
ntc img

Contact Us to Learn More

Share details about yourself & someone from our team will reach out to you ASAP!

Author