Straight answers before you connect a device.
Deployment, coverage, security, and read-only operation questions from network operations teams.
What does AssureMesh do?
AssureMesh sits on top of the monitoring tools you already run. It finds the likely root cause with evidence, shows which devices, sites and business applications a fault touches, and suggests remediation steps and commands, with the reasoning behind them, for the engineer to review and run.
Does RCA work without AI access?
Yes. Deterministic pattern-based RCA works without an external AI key. Optional AI enrichment is separate and must be presented as unavailable when it is not configured.
Can the collector or controller run on premises?
Yes. An edge collector can run inside the customer network so management interfaces remain private. The deployment plan documents whether the control plane is cloud-hosted, on premises, or hybrid.
What does read-only by default mean?
Write actions are blocked in the platform, not just hidden on screen. The engineer runs every command; Tenant administration, thresholds, incident workflow, device inventory, and notification settings are not blocked.
Does AssureMesh support every vendor alarm?
No. Recognition, generic monitoring, enhanced telemetry, verified detection, and field validation are different coverage levels.
How are devices monitored?
Depending on the platform, AssureMesh uses supported native APIs, gNMI, NETCONF, SSH CLI, SNMP, cloud APIs, or imported events. The onboarding check identifies which capabilities are actually available.
Can customers configure thresholds?
Tenant owners can configure supported detection thresholds. Values are validated, versioned, and applied only where the live detector supports that override.
Does AssureMesh replace the monitoring tools we already use?
No. It sits on top of them and does not ask you to replace anything. It collects its own telemetry from Cisco IOS-XE, Arista EOS, Juniper Junos, SNMP devices, and AWS, Azure and Google Cloud accounts. Which monitoring tools we take alerts from first, and which ticketing tools we connect, is decided together with our early-access customers.
What data is sent to an AI provider?
Optional AI enrichment is not required for deterministic RCA. Where enabled, customer policy, redaction, provider, retention, and tenant opt-out behavior should be agreed explicitly. The product should not silently send device secrets.
How do devices get connected?
Your owner connects the collectors and cloud accounts AssureMesh reads from, using read-only credentials. Every decision goes in a tamper-evident audit log, and each customer is a separate tenant with isolated data. To talk through your environment, request a demo.
Is AssureMesh independently certified?
AssureMesh publishes security practices and signed release provenance. It does not claim SOC 2 certification, external penetration-test status, or another independent certification unless that assessment has actually been completed and can be evidenced.
How do I report a vulnerability?
Email security@assuremesh.com and follow the process on the Security page.