Is your network monitoring keeping pace with AI, larger infrastructures, and the growing need for real observability? We’re excited to introduce ntopng 7.0, alongside new releases of the rest of the ntop suite.
This is one of the biggest ntopng releases to date: a new AI-assisted analysis engine, native SIEM integration, a network-to-site hierarchy for large deployments, BGP visibility, a completely rebuilt observability/timeseries backend on ClickHouse, and a modernized Vue.js frontend. We want to walk you through it live, with a Q&A session at the end of the event.
Here is what we will cover:
- nAnalyst — AI-assisted traffic analysis. A brand-new chat-based assistant that lets you query live and historical flows and alerts in different languages, define AI-driven alert policies, and get AI-generated dashboards, all through an agentic loop that supports multiple LLM providers (Anthropic, OpenAI, Google, Qwen, and local models) plus a built-in MCP server for connecting external AI agents to ntopng.
- Wazuh XDR/SIEM integration. Native collection and correlation of Wazuh alerts into ClickHouse, with asset enrichment, dedicated alert pages, MITRE-mapped rules, and configurable retention, bringing SIEM-grade security visibility directly into ntopng.
- Sites: hierarchy for large networks. A new network-to-site model designed for ISPs, MSPs, and large infrastructures, with a sites dashboard, geomap, matrix/heatmap views, and per-site timeseries and statistics.
- BGP & BMP support. A new Looking Glass page, RPKI validation, prefix-change alerts, and full BGP context surfaced directly in live and historical flows, a big step for routing observability.
- A rebuilt Observability backend. A new ClickHouse-based timeseries engine, including a High-Resolution counters driver, a redesigned Observability dashboard, and out-of-the-box Grafana integration.
- Modern authentication & a new frontend. SSO via OpenID Connect, Multi-Factor Authentication, Passkeys, and API key support, alongside a full migration to a Vue.js frontend with D3-based charts replacing the legacy UI.
- Plus: user-defined host Tags, automatic flow deduplication, extended OT visibility (new S7comm and Profinet support), the new nEdge Lite, and a long list of performance and security hardening improvements across the board.
Who should attend?
- Network engineers and SREs who want deeper, AI-assisted visibility into their infrastructure.
- Security and SOC teams looking to leverage the new Wazuh integration and AI-driven alerting.
- ISPs, service providers, and enterprises managing large, multi-site networks or their own Autonomous Systems.
- Existing ntopng users who want a guided tour of what’s new before upgrading.
Secure your spot
The webinar is scheduled for Tuesday, October 20th, 15:00 CET / 9 AM EDT and will be run online via Microsoft Teams. Participation is free, but space is limited: please register at this page.
The event will be recorded and shared with our community for those who cannot attend live.
Looking forward to seeing you there!