Your whole network, in one place · operator preview

Know your network.
Trust the answer.

You know the feeling. Something is down, everyone is looking at you, and the diagram is wrong, the spreadsheet is out of date, and the one person who really knows is on vacation. CrossConnect is the way out: it discovers your whole network for you, gives you a picture you can finally trust, answers your questions in plain English, and when something breaks, shows you exactly what changed, so you fix it in minutes, not hours.

Runs on your own servers Your data stays yours Answers you can check Works with your other tools

An operator preview in active development. Everything shown here is built and running today against a real demo network.

localhost:8080 / devices
Devices · 80 records · HQ + studios · CSV ⤓
✦ Ask the assistant
SlugNameModelLocationStatusSeen
cor-hq-01Core HQ 01Catalyst 9500-48YHQactive2m ago
cor-hq-02Core HQ 02Catalyst 9500-48YHQactive2m ago
dist-hq-01Distribution HQ 01Meraki MS390-48UHQactive1m ago
acc-stuA-01Access Studio A 01Catalyst 9300-48PStudio Aactive1m ago
acc-stuA-rackAccess Studio A, rackNetgear M4250-26G4XFStudio Adecommissioning4m ago
The operator console. Every device, rack, IP, cable, VLAN, and circuit in one searchable place, with full create / edit / CSV on each and a last-seen time on every record so you always know how current it is.
What is CrossConnect

One accurate record of your whole network.

Most teams piece their network together from spreadsheets, old diagrams, and by who has been there longest. CrossConnect replaces all of that: it discovers what’s on your network for you, keeps that picture up to date on its own, answers your questions in plain English, and helps you troubleshoot when something goes wrong, all with the proof behind every answer.

01 · DISCOVER

It finds your network for you

Point CrossConnect at your network and it discovers what is there on its own: every device, how they connect, and what is plugged in where. No spreadsheets to fill in, no diagrams to draw by hand.

02 · ASK

Ask it like a coworker

Ask in plain English: “what’s plugged into this switch?” or “is anything about to run out of power?” You get a straight answer from your real network, with the exact records to back it up.

03 · FIX

Find and fix what’s wrong

When something breaks, CrossConnect pinpoints the change that caused it. It flags aging or risky gear and tells you what to deal with first. So you troubleshoot in minutes, not hours.

Sound familiar?

The diagram is wrong by the time you need it.

If you run a network, you know the feeling. Something is down, everyone is looking at you, and the notes you have are scattered, out of date, and disagree with each other. We have lived this too. Here is the difference CrossConnect makes.

A normal bad day

  • “Where is this device actually plugged in?” Three people, three answers.
  • The diagram was last right two cable moves ago.
  • Addresses tracked in a spreadsheet nobody trusts.
  • A power overload shows up as an outage, not a warning.
  • Onboarding someone new means weeks of “go ask Dave.”
  • Something breaks at 2am, and nobody knows what changed.

The same day, with CrossConnect

  • One straight answer for where every device is.
  • A map that redraws itself, so it is always current.
  • Every address tracked, clashes caught before they bite.
  • A power warning before the breaker trips, not after.
  • Ask a question, get a clear answer in seconds, with the proof.
  • When something breaks, see exactly what changed.
Built and running today

Everything about your network, in one place.

Your gear, your racks, your addresses, and how it is all wired together, kept in one place and all linked up, so a change in one spot shows up everywhere it matters. Everything you see here is built and working in the preview today.

Your gear and racks

  • Every building, room, and rack you have
  • Every device, who owns it, and its serial number
  • Exactly which shelf each device sits on
  • How much power each rack is using
  • The internet and phone lines coming into your building

Addresses and names

  • Every address your devices use, kept tidy
  • The next free address, the second you ask
  • Two devices sharing one address, caught early
  • The separate lanes your traffic runs on, kept apart
  • The plain names that point to each address

How it connects

  • Every cable, and what sits on each end
  • Follow any path from one point to another
  • A map that draws itself
  • It logs into your gear and reads what is connected
  • It works out which device is wired to which

Spot and fix problems

  • A ranked list of what to fix first
  • One clear next step for each device
  • Is any traffic going somewhere it should not?
  • Is it safe to change this device right now?
  • Aging gear, settings that quietly changed, and known security holes

Built on a real demo network: 80 devices across a head office and two studios, four real brands (Cisco, Meraki, Extreme, Netgear AV), full racks, separate lanes for management, audio, video, and control, and a real security warning on one software version.

The premier feature · Network black box

It broke at 2am. Find the exact change that broke it.

Something that worked for months suddenly stops, and nobody knows why. CrossConnect quietly keeps a copy of every change to your network’s settings, like a flight recorder. When a connection breaks, it replays that history and pinpoints the exact change that broke it, then shows you the before and after as proof. It tells you what went wrong. It never touches your gear.

NETWORK BLACK BOX flow: Dante audio · UDP 4440 · 10.10.10.0/24 → 10.10.20.5
🚨
Found the change that broke it. Healthy at 7 Jun 13:34, first broken by a change to cor-bb-01 at 8 Jun 13:34.
found in 2 probes
Finding the exact change that broke a flow Hundreds of saved changes on a timeline, healthy on the left in green and broken on the right in red, with the breaking change pinpointed in the middle. healthy broken change landed here oldest change newest · live
600+ saved changes · it narrows down fast instead of checking each one · focused on the device in the path, then double-checked against the whole network
cor-bb-01 · healthy · 7 Jun
ip access-list extended AV-EGRESS permit ip any any ! interface Gi0/1 ip access-group AV-EGRESS out
cor-bb-01 · broken · 8 Jun
ip access-list extended AV-EGRESS deny udp any 10.10.20.0 0.0.0.255 eq 4440 permit ip any any ! interface Gi0/1 ip access-group AV-EGRESS out
↑ added 8 Jun · silently drops Dante audio (UDP 4440)
Every revision kept, like a flight recorder Checks if the traffic can actually get through Before/after proof, not a hunch Read-only · names the cause, never applies a fix
01 The assistant

Ask your network anything. Verify every answer.

Ask a question in plain English and CrossConnect answers from your own records, and shows you the exact records it used. If the data can’t back up an answer, it says “I don’t know” instead of making something up. It can look anything up, but it can’t change a thing on its own.

1 You ask
Which access switches in Studio A are over PoE budget?

Plain English in.

No query language to learn, no filters to build. Just type the question.

2 It reads your records
tool get_poe_summary
tool get_rack_power · Studio A
every tool call shown in the open

Your records, in the open.

It pulls from the very same records you do, and shows you every step it took to get there.

3 You get a cited answer
One: acc-stuA-rack (Netgear M4250) is drawing 442 W of 480 W: 92% of budget. Sources: device/acc-stuA-rack · rack/studio-a-row-a-rack-1

Cited, or it abstains.

Every answer cites the records it used. If the data can’t support an answer, it replies “I don’t know.”

How it’s wired: the assistant works the moment you install it, no external model required. Point it at Claude for natural-language answers. Either way the citation rule holds, an answer that doesn’t trace to a record gets dropped before it reaches you.

✦ every claim traces to a record it actually read
One switch is over PoE budget: acc-stuA-rack is drawing 442 W of 480 W[1], which is 92% of the rack’s budget[2].
[1] device/acc-stuA-rack
poe_draw_w: 442 · model: M4250
[2] rack/studio-a-row-a-rack-1
poe_budget_w: 480 · site: Studio A
A validator drops any claim whose [n] does not resolve to a record the assistant actually read. No record, no claim.
Cites every record it used Says “I don’t know” when it can’t Never invents a device, IP, or circuit Every write needs a human confirm Every turn is logged
02 It asks first

The AI suggests. You say yes.

Ask the assistant to change something and it never touches your data. It writes up the change first, showing you exactly what it will look like before and after, and drops it in a waiting list. Nothing happens until you say yes. If you ignore it, the suggestion disappears on its own.

  • Suggested, then approved, then applied: in that order, every time
  • It saves the old value, so you can see exactly what changed
  • Every suggestion is logged, along with the question and answer behind it
Changes waiting for your yes
Move acc-stuA-01 to Studio B.
Here is the change, waiting for your yes: device/acc-stuA-01 · location Studio A → Studio B · status WAITING · disappears in 15m
ConfirmCancel
03 It reads your network

It sees what is really on your network.

CrossConnect can log into your gear (read-only) and see what is actually connected: every device, every port, every neighbor. From what the gear itself reports, it builds a complete, current picture of your network, and it refreshes that picture on a schedule, so it never goes stale.

dist-hq-01 · what discovery found
device
Meraki MS390-48U · HQ
IDENTIFIED
read over SNMP
48 interfaces · 6 LLDP neighbors
READ
uplink
→ acc-stuA-04
MAPPED

It reads the network for you, and keeps the keys safe.

On a schedule you set, CrossConnect logs into your gear and reads what is actually there: every device, what it is, and how it connects. The passwords it needs are kept locked up with strong encryption and only used at the moment it checks. The picture it builds stays current on its own, so it is ready the moment you need it.

  • Reads each device’s ports, neighbors, and power draw
  • Builds a live map of your network, refreshed on every run
  • The passwords it needs stay locked in an encrypted vault
04 Connectivity & trace

Follow any connection, end to end.

Pick any two points, a device, a cable, even the line to your internet provider, and CrossConnect walks the whole path between them and shows every hop along the way. So “how is this actually connected?” takes a click, not an afternoon with a flashlight.

Megacorp cor-hq-01 dist-hq-01 acc-stuA-01 acc-stuA-04 Dante I/O camera
Traced path: provider → circuit → core → distribution → access → endpointTotal run length summed across every hop

Trace from an interface, a circuit, or a provider hand-off, CrossConnect walks the rest. The same discovered data powers the live topology map below.

05 Topology

Watch the map build itself.

Instead of drawing a network map by hand and watching it go stale, CrossConnect asks each device who its neighbors are and draws the map for you. It redraws every time it checks, so you are always looking at how things are wired right now, not how someone drew it last year.

SNMP · LLDP-MIB · cor-hq-01
cor-hq-01# show lldp neighbors
LOCAL-PORT   NEIGHBOR       NEIGHBOR-PORT  PLATFORM
Gi1/0/1      dist-hq-01     Gi0/1          Meraki MS390-48U
Gi1/0/2      dist-hq-02     Gi0/2          Extreme X440-G2
Te1/1/1      cor-hq-02      Te1/1/1        Catalyst 9500-48Y
Gi1/0/9      acc-stuA-01    Gi0/1          Catalyst 9300-48P
Gi1/0/12     acc-stuA-rack  Gi0/1          Netgear M4250-26G4XF
CrossConnect reads this list of neighbors from every device each time it checks, and redraws the map below.
cor-hq-01cor-hq-02coredistributionaccess
Cisco Cisco Meraki Extreme Networks Netgear AV Line

Always current. The graph rebuilds on every discovery run, and the assistant reads the same adjacencies, so “show me everything two hops from cor-hq-01” is just a question.

Every vendor you run. Even the cloud-managed ones.

Most tools cover the big three and stop. CrossConnect goes three ways: a formal model where the vendor supports it, our own config parsers where it does not, and the vendor's cloud API for gear that has no box to reach.

Formal proof
We model the data plane and prove which traffic can actually reach what, not just read the config.
Cisco · Arista · Juniper · Fortinet · Palo Alto · F5
Config-level
Our own parsers pull VLANs, multicast, ACL intent and PoE from the switches Batfish will not model.
Aruba · Netgear · Ubiquiti EdgeSwitch & EdgeRouter · Extreme
Cloud API
For gear managed from a dashboard, we read the org's config straight from the vendor's cloud.
Cisco Meraki · Ubiquiti UniFi

Add a vendor and it shows up everywhere at once: the inventory, the map, the checks, and the assistant. You are never told "that one is not supported."

06 AV & broadcast

The network your AV actually rides on.

Dante, AES67, SMPTE ST 2110, NDI and Q-SYS are multicast on your switches, and they fail in ways a normal network tool never looks for. CrossConnect treats every AV stream as a first-class object and checks the four things it needs: IGMP snooping and a querier on each AV VLAN, one PTP clock the whole plant locks to, QoS that protects the audio, and the headroom to carry it.

localhost:8080 / av · readiness
Dante AES67 SMPTE ST 2110 NDI Q-SYS
IGMP snooping on the AV switches47 / 65
An IGMP querier per AV VLANpass
One PTP clock, no split domains2 domains
QoS protects the audio & PTPpass
18 switches need IGMP snooping on the AV VLAN: Dallas Access 01, Dallas Access 02 +16 more.
Click any item for the named switches and the exact fix in each one's own syntax (Cisco, Aruba, Juniper, Netgear, Ubiquiti, Extreme, Meraki).

It works the day you install it. A split clock even lists every endpoint on each domain and the one to move. All of it reads from the configs, SNMP and IGMP state you already have, so there is nothing to capture and nothing to wire up.

Every stream tracked, not just ports Multicast, clock and QoS in one view Tells you the switch and the command Read-only, nothing captured
Also on the same network

The cameras and the spaces, on the same map.

The engine that finds your switches finds the cameras hanging off them. CrossConnect surveys the whole fleet over open standards, flags the ones that have gone dark, lost their stream, or been quietly swapped for unknown hardware, and never stores a single frame. Where you run Wi-Fi, it can turn association counts into a live read on how full a room really is.

  • Every camera found, identified, and watched for trouble
  • Gone-dark, looped-feed, and swapped-hardware alerts
  • Room occupancy from the Wi-Fi you already have
localhost:8080 / cameras
142 cameras seen · 3 need attention
Lobby Dome 4live
Studio A PTZno stream · 6m
Dock Cam 2hardware swapped
Studio B widelive
Studio A · 18 of 40 seats in use · from Wi-Fi
07 Racks & power

Every rack, to the U, and every watt.

CrossConnect knows how much space each device takes in a rack and how much power it pulls, and draws the rack for you. You can see at a glance where there is room to add gear, and catch a rack that is about to run out of power before it takes a room of cameras dark.

HQ · Rack 1 · 42U cor-hq-01 · 9500-48Y · U41–42 cor-hq-02 · 9500-48Y · U39–40 dist-hq-01 · MS390-48U · U38 patch panel · U37 free · U25–36 acc-hq-07 · M4250 · U24 acc-hq-08 · 9300-48P · U23 acc-hq-09 · M4250 · U22 free · U1–21

See a power overload coming.

For every switch and every rack, CrossConnect shows how much power is being used against how much there is. A switch that is about to run out shows up as a number you can act on, not an outage you have to chase.

Studio A · PoE draw vs budget
acc-stuA-01 · Catalyst 9300-48P
61%
acc-stuA-rack · Netgear M4250
92%

acc-stuA-rack is using 442 of its 480 watts. You see that on the main screen, on the list of things to fix, and from the assistant, long before anything goes dark.

08 Addressing (IPAM)

Never hunt for a free IP again.

Every device needs an address, and running out (or handing the same one to two devices) causes outages that are miserable to track down. CrossConnect keeps tidy track of every address, hands you the next free one the moment you ask, and warns you as soon as two devices clash.

prefix 10.10.20.0/24 · 256 addresses
used reserved next free · 10.10.20.37 free

10.10.20.0/24, to the address.

When an address is given back, CrossConnect puts it back in the pool. So the next free address is the lowest one that is truly open, not just the next one up.

68%
utilization
41
free
2
duplicates
  • The next free address, and the next free block, the moment you ask
  • Two devices sharing one address, spotted across all your gear
  • Works with old and new address types, and keeps every address tidy
  • Your traffic lanes and your plain names, all in one place
09 Compliance & lifecycle

Spot the risky gear before it bites you.

CrossConnect checks every device three ways: has its setup drifted from how you meant to configure it, is it running software with a known security hole, and is it so old the maker has stopped supporting it. Then it tells you which devices to deal with first, with the evidence.

Golden-config compliance · HQ core
cor-hq-01 · running vs intended
100%
cor-hq-02 · missing NTP + 1 ACL line
88%
cor-hq-02 · the drift, line by line
logging host 10.10.0.20
− ntp server 10.10.0.10 in golden, missing from running
− permit udp host 10.10.0.10 eq 123 in golden, missing from running
snmp-server community public RO
The exact lines that drifted, not just a score.
Lifecycle match
CVE-2025-20123 · CRITICAL · Cisco IOS-XE 16.12.1 → 2 devices

Proof, every time.

Every result is backed by the real settings on the device and the real software it runs. So every pass or fail comes with the proof behind it. Ask the assistant which devices have a problem and why, and it answers from that same proof.

  • Compares how a device is set up now against how you meant to set it up, and shows you the exact lines that changed
  • Scores your network against the well-known security checklists, with proof for each item
  • Flags known security holes and gear too old to get fixes, matched to the software you actually run
  • A ranked list of what to fix today across all your gear
How it’s different

Why CrossConnect is different.

It keeps the tidy, organized record that good network tools have always had. Then it adds the two things spreadsheets and older tools cannot: it checks itself against your real network, and it answers your questions safely, in plain English.

 Spreadsheets & VisioOlder network toolsCrossConnect
One organized record of your gear, addresses, cables, and racksPart of it, by handYesYes
Logs into your gear and maps how it all connectsNoExtra add-on, or build it yourselfBuilt in
Draws each rack and tracks the power it usesNoSometimesBuilt in
Ask in plain English, every answer backed by proofNoNoYes, always
The AI never changes anything without your yesn/an/aAlways asks first
Other tools can pull its data and get alerts when things changeNoYesYes
Runs on your own server, one simple installn/aSometimesYes

CrossConnect was built from scratch for this job, with the AI woven into how it organizes your network from the start, not bolted on later as a chat box.

10 Migration

Bring your data with you.

Already have an inventory tool or IPAM database? Point CrossConnect at it. It shows you exactly what will change before anything happens: every new item, every update, every clash. If it does not look right, you can undo the whole thing in one click.

  • Brings over your brands, models, devices, ports, addresses, and cables
  • Shows you what it will add, change, or skip, before it does it
  • You can undo the whole import afterward, with nothing lost
Import from: existing IPAMCHECKED, READY
Devices+74 new6 updated
Addresses+31 new2 clash
Cables+58 new3 skipped
2 addresses clash: 10.10.0.0/24 is already on file. Keep yours, or use theirs.
you can undo this after it runsGo aheadUndo
On top of the record

It does not just hold the facts. It acts on them.

Once the record is trustworthy, CrossConnect reads it for you. It tells you what to fix first, whether a recent change caused a problem, and whether your traffic is going where it should. All of it is read-only until you decide to act.

What to fix first, and why

One ranked list of what needs you today: gear too old to get fixes, settings that quietly changed, known security holes, things running low, and devices that are down. Open any item and it walks back through the history to tell you if a change caused it, and points out changes made with no record of who did them.

act on this today

One plan for each device

Known security holes, gear too old to get fixes, and weak settings usually live on three separate lists. CrossConnect joins them and gives each at-risk device one clear next step: replace it, update it to a named version, or tighten its settings. Worst first.

replace · update · tighten

Is guest traffic really walled off?

For your audio, video, control, and guest lanes, CrossConnect checks two things at once: what you said should be kept apart, and what the real traffic actually did. The one that matters is when they disagree: a lane that should be sealed off, but where traffic slipped through.

what you set vs what really happened

Is it safe to change this now?

Before you touch a device, CrossConnect weighs four things at once: what goes offline if this device fails, what it is carrying right this minute, what the change would turn on or cut off, and whether you are in a planned downtime window. It gives you one answer: go, careful, or wait.

go · careful · wait

What is each link carrying?

Your routers and switches already keep short summaries of the traffic passing through them. Point them at CrossConnect and it lists the top conversations right next to your gear: who is talking to whom, how, and how much, plus which device saw it. The busiest links and the heaviest users jump right out.

traffic summaries

Find anything, fast

Type a name or an address and CrossConnect tells you the exact switch and socket it is plugged into, straight from the switches themselves. The same search shows what the device is doing, whether it has been moved, anything it is flagged for, and how to reach it if the network is down.

where is it · what is it doing
The rest of what ships

Everything else a serious team checks for.

The behind-the-scenes parts that make CrossConnect something your whole team and your other tools can rely on. All of it is working in the preview today.

Plugs into your tools

The automation you run, on real data

The tools you already run can read from CrossConnect and write back to it: the devices that actually exist, with their addresses and details. Fully documented, so your playbooks run against what is really there, not a stale export.

read and write · verified

A plain name for everything

Every device has a plain, steady name like cor-hq-01 that never breaks. No cryptic codes to look up, and the name still works after you re-import your data.

names that stick

Spreadsheets in and out

Any list can be saved as a spreadsheet, and that same spreadsheet loads straight back in. Edit it in Excel, put it back, and the columns line right up.

save out · load back

Alerts to your other tools

When a device, cable, line, or address changes, CrossConnect can ping your other tools right away. Each alert is signed with a timestamp, so a captured one can't be replayed later, and you choose exactly where they go.

signed · replay-proof

Search and reports

Search everything from one box, and run ready-made reports, like out-of-date devices or addresses that overlap. Save your own, send them out, or have them emailed to you on a schedule.

search · reports

An assistant that sees it all

The assistant can read your gear, addresses, racks, power, connections, security checks, and reports. It only reads, never changes. Every answer is backed by proof and written down.

reads only · backed by proof

Trust & operations

Each client walled off

If you run CrossConnect for more than one client, each one is walled off completely. No client can ever see another client's data.

fully separate

A score for your records

A live grade out of 100 for how complete and accurate your records are. Every gap is spelled out, so you know just what to fix.

scored · clear gaps

A history nobody can fake

A full record of every change, locked together so each entry depends on the one before it. If anyone tampers with the history, it shows. You can check it any time.

tamper-proof history

You control who can do what

Sign in with your company login, and roles decide who can see and who can change: admins, day-to-day users, and view-only. Every stored password and key is encrypted at rest, the same kind banks use.

SSO · roles · encrypted at rest

Simple to set up

It runs on your own server and installs in one step. Your data never leaves your building.

runs on your server

Watch it in your own tools

From day one, CrossConnect shares what it is doing, so you can keep an eye on it from the monitoring tools you already use.

your own monitoring
New · the visual tour

The Capability Guide: every area, drawn out.

Ten areas, 130+ capabilities, and a diagram for every one that matters. The complete picture of what CrossConnect does, read it on one page or hand the PDF to your team.

Find your path

Made for the job you actually do.

Same platform, told in your language. Pick the one that sounds like your week.

One place that always knows your whole network.

Your gear, your addresses, and how it all connects, in one place that keeps itself up to date, with a black box that finds what broke a connection and an assistant that answers from your own records. CrossConnect is in active operator preview.