Skip to content
Cenovel
Cenovel for enterprise

One record for every building on your network.

For network, asset and audit teams in multi-site organizations: what you own, where it is, how it is connected and what is down, on your own appliance.

A selected switch port in the console: its link, traffic, errors, administrative state and power over Ethernet, as the switch reported them.
One port, as the switch reported it.

Built for multi-site networks

For teams that answer to auditors, finance and the people in every building.

  • Departments hold their own equipment

    Access tiers, page rules and department scope, enforced by the server: department scope limits whose equipment each person can change, and reports are scoped the same way.

  • An audit trail you can hand over

    Every change is recorded with who, when and the values before and after, in a hash chain. Export it as an evidence file with a SHA-256 digest.

  • Plan replacement by year

    End of support, warranty and software for every unit. Replace by year shows the units due in each fiscal year, by site and category, with the cost from the model prices you record.

  • Priority sites

    Mark a site type, such as a hospital or a dispatch center, as priority: its network outages open as Critical and their alerts say URGENT.

Reads switches and stacks from Cisco, Juniper and Extreme over SSH and SNMPv3, other switches and Palo Alto Networks firewalls over SNMPv3, servers through Redfish, and access points directly or through Juniper Mist or ExtremeCloud IQ. Reading never changes a device; the few changes it can make are named and switched off until you choose them.

Know what a failure takes with it

“If this fails” follows the recorded links from a closet or switch and shows what depends on it, and where it is the only path up. It reports what the records say, not a prediction.

Closet 3 core switchIf this failsAccess switch, floor 1Access switch, floor 2Uplink to building BAccess points, floor 1Badge readers, floor 1Cameras, floor 2Building B switchOnly recorded path upAccess points, building BPhones, building B9 recorded dependents1 single point of failure
What one closet’s core switch takes with it, growing out level by level.Open Outages in the demo
The If this fails summary in the console: 22 recorded dependents, 3 single points of failure and 22 links followed.
The “If this fails” summary for one closet, in the console.

An audit trail you can hand over

Every change is recorded with who, when and the values before and after, in a hash chain. Export it as an evidence file with a SHA-256 digest; the export refuses to run while the chain does not verify.

Change 1041Network admin · Oct 12, 9:41 AMPlace: Room 101 → Room 114Hash 7f3a…c21Change 1042Field technician · 10:05 AMStatus: In stock → In useHash 0b9e…4d7Change 1043Asset manager · 11:20 AMAsset tag: A-0193 → A-0913Hash e52c…918Change 1044Administrator EX · 1:02 PMStatus: In use → In repairHash 3a6f…b02
Each change is linked to the one before it by its hash, and the check runs along the chain.Audit history and evidence

Where Cenovel sits in your network

One appliance inside your network. It reaches out only to what it reads and the services you connect, and never to us.

The Cenovel appliance runs inside your network. Staff browsers reach it over HTTPS on port 443. It reads switches, access points and firewalls over SSH and SNMPv3, servers through Redfish, and checks sign-ins against your directory over LDAPS or StartTLS. Site collectors read networks the appliance cannot route to. Mail, webhooks and an off-box backup host are used only if you set them up. Outside your network it reaches Juniper Mist, ExtremeCloud IQ and Microsoft Entra ID only if you connect them. It has no connection to Cenovel the company: no telemetry, no update check and no license server.Your networkOutside your networkCenovel applianceOne VM on your vSphereStaff browsersHTTPS 443Your directoryLDAPS · StartTLSSwitches, access pointsand firewallsSSH 22 · SNMPv3 161ServersRedfish 443Mail, webhooksand off-box backupsOnly if you set them upSite collectorsFor networks it can’t route toCloud controllersJuniper Mist · ExtremeCloud IQMicrosoft Entra IDHTTPS, only if you connect themCenovel, the companyNo connection: no telemetry,no update check, no license server
Every connection Cenovel makes, and the ports it uses.Deployment and network exposure

Security and trust

Where it fits

The same product in every sector. Sites can be campuses, clinics, branches or agency buildings.

  • Corporate

    Headquarters, offices and data rooms on one record, with end of support and warranty for every unit.

  • Healthcare

    Hospitals and outpatient clinics as sites of their own. Cenovel models equipment, places and staff accounts, not patients.

  • Higher education

    Campuses, residence halls and research buildings, with departments that hold their own equipment.

  • State and local government

    Agencies, courts and public-safety buildings, on infrastructure you already operate.

Straight answers

For the network lead, the security reviewer and procurement.

Is Cenovel only for schools?

No. Sites, closets, switches, outages, lifecycle and storerooms work the same for any multi-site network. Cenovel was built first with school districts, so it also has K-12 features, such as the E-Rate workspace, that other organizations can leave unused. The live demo uses a fictional school district.

Where does our data live?

On your own appliance, inside your network. Cenovel sends no telemetry, never checks for updates and never contacts Cenovel the company. See the trust center.

Does it change our devices?

Only when you choose. Reading never changes a device: that is enforced in its own code, where a read that could change a device is refused before it is sent, and SNMP set requests can’t be sent at all. Changing switch ports is a separate feature, off until you turn it on, with a dry run and an automatic undo; Locate only blinks a light.

How do people sign in?

With Active Directory over LDAPS or StartTLS, or Microsoft Entra ID, with groups mapped to access tiers. A local recovery account always works.

Will you answer our security questionnaire?

Yes. Ask on the first call. The trust center has the architecture, the network exposure, how secrets and backups are protected, and how releases are signed.

How is it priced?

There are no public prices. Pricing is set for each organization; ask us on a call.

See it on your own network

A short call and the live demo, then a trial or a pilot on your own appliance.