Invariant

Invariant is a network analysis platform: it uses an offline digital twin to exhaustively validate multi-vendor network configurations and security access policies *before* deployment.

Invariant delivers a network security and automation solution by generating a highly scalable, cross-vendor digital twin from configuration files (Cisco, Juniper, AWS, etc.). This model, based on the Batfish system, enables exhaustive pre-deployment validation of critical network flows and access policies (ACLs, BGP, OSPF). It identifies configuration errors and security gaps, preventing incidents before they impact the live environment. The platform supports a DevOps workflow via CLI, SDK, and API, ensuring network teams can safely manage changes and maintain compliance across complex hybrid infrastructure.

https://invariant.tech