/ WIT OS · ENOS
Run the network at machine speed.
ENOS is the WIT OS network operations orchestrator. Six specialist agents continuously observe, reason about, and act on your fabric — fusing telemetry from Arista, Kentik, and Cloudflare into a single explainable control plane.
- Unified inventory across Arista switches, Kentik flows, and Cloudflare edge
- Six agents covering topology, traffic analytics, anomaly detection, and remediation
- Sub-second anomaly correlation across L2 → L7
- Every action explainable, every change auditable
/ What you get
Everything you need. Nothing you don't.
Topology & Inventory
Live graph of switches, links, BGP sessions, edge POPs — derived from device APIs, not screen-scraped CLI.
Traffic Analytics
Kentik-powered flow analysis with WIT OS reasoning on top — from raw packets to a sentence in your alert.
Anomaly Detection
Statistical + LLM-grounded detection. Spikes, drift, leaks, and BGP weirdness — caught before they page.
Edge & DDoS Posture
Cloudflare config, WAF rules, and rate-limit posture continuously evaluated against your policy baseline.
Change & Remediation
Agents propose, simulate, and (with approval) execute fabric changes — rollback always one click away.
Explainable Trace
Every recommendation cites its evidence. Every action records its before/after state. Auditable by default.
/ Inside the cockpit
ENOS Network Operations · live.
Multi-vendor visibility across Arista, Cisco, NVIDIA, Palo Alto, Fortinet, Kentik, and Cloudflare — fused into a single operator console with eight specialist agents on the wire.
Ready to run on WIT OS?
Talk to the team about a managed deployment, a pilot, or a custom agent — we typically respond within an hour.
/ FAQ
Frequently asked questions
What network vendors does ENOS support?
Arista, Cisco, Juniper, and Palo Alto for switching/routing/firewall. Kentik for flow analytics. Cloudflare for edge. ThousandEyes for synthetic monitoring. We integrate with the network you have rather than requiring a refresh.
Can ENOS make changes to my network, or is it read-only?
Read-only by default. Change capabilities are opt-in by integration: ENOS can deploy ACL updates, BGP policy changes, or firewall rules through CI/CD-style approval workflows. Every change is staged, reviewed, and rolled back automatically if validation fails.
How does ENOS detect network anomalies?
Baseline learning over 14-30 days establishes normal flow patterns, then ENOS flags deviations: unusual east-west traffic, new external destinations from sensitive subnets, BGP hijack attempts, DNS tunneling indicators, and lateral-movement patterns mapped to MITRE ATT&CK.