DriftGuard

DriftGuard is a web app (with optional on-prem agent) that continuously detects, explains, and helps remediate configuration drift across multi-vendor networks. It pulls configs and state from routers, switches, firewalls, and wireless controllers, then compares them against a Git-backed “golden intent” baseline. When drift appears, it shows exactly what changed, who/what likely caused it (change window, user, automation job), and the blast radius (affected sites/VLANs/ACLs). It can open a PR with the proposed fix, generate a rollback plan, or push a safe, scoped remediation using pre-approved playbooks. It’s not a full-blown NMS replacement; it’s a focused drift and compliance layer that fits into existing workflows (GitOps, ITSM, CI/CD). Includes audit-ready reports for common controls (SOX, PCI-ish evidence) without pretending to magically make you compliant.