Feature
AI network analysis that stays on-premises
nAnalyst is an AI analyst layer for ntopng. Ask what is happening in your network, and why, in plain language. The agent runs the queries, charts the results and keeps a full evidence log, with your data staying under your control.
Capabilities
What the AI analyst does
Ask in plain language
Questions about your network in natural language, in any language your preferred LLM supports.
Evidence, not guesses
Gathers evidence from flows, hosts, asset inventory, SNMP and alerts, and shows reasoning steps, tool calls and raw SQL.
Charts in the chat
Results are visualized as charts embedded directly in the conversation.
Policies and alerts
Describe a rule in words and nAnalyst turns it into a periodic check that raises an alert on violation.
Less alert noise
Silences irrelevant, low-value alerts automatically.
Audit trail and cost tracking
Full audit trail of actions, and usage tracked per user and per model.
Use cases
Example investigations
Traffic investigation
Ask for DNS query volume per hour and the top queried domains, and get a chart plus next steps.
Policy generation
Say “no SSH for this host during business hours” and get a detection that runs on a schedule.
Alert investigation over MCP
Connect Claude Code, Cursor or any MCP client to ntopng data, correlate alerts and get remediation steps.
FAQ
Frequently asked questions
Does my data go to a cloud AI service?
nAnalyst is fully on-prem capable. You choose the LLM it uses, and the analysis runs on ntopng data inside your infrastructure.
How is nAnalyst different from a generic AI assistant?
It uses 25+ network-specific tools, shows full evidence, keeps an audit trail and is native to ntopng and nDPI.
Can I use it from other tools?
Yes. nAnalyst is also available as an MCP server running on ntopng.
How do I try it?
Install the free Community edition of ntopng first and talk to the ntop team about trials of commercial editions such as nAnalyst.
Get started
Ask your network a question
Download the free Community edition of ntopng, or talk to the ntop team about your requirements.
