Agent-led investigation. Evidence-backed RCA.

Dashboards don’t fix networks.
Engineers do.

Rez does the slow triage work for them. It checks live device and API evidence in read-only mode, separates symptoms from root cause, and returns an RCA your team can defend.

Arena uses an isolated live lab. Your production network is not touched unless you choose a guided read-only pilot.

Read-only checks 17+ validation engines 94+ diagnostic atoms Live Arista Arena No training on customer data Evidence trace
Run it yourself — early access

Want the Windows build?

We are approving early access manually while the public license flow is finished. If you want to test Rez in your own lab, send us your details and we will follow up.

Windows build · read-only posture · manual early access.

The Problem

Network incidents still turn into evidence hunts.

Monitoring says something broke. The bridge call asks why. Engineers jump between CLI sessions, firewall policy, SD-WAN dashboards, routing tables, packet captures, and vendor tools. The real work is not seeing the alert; it is proving what caused it.

show ip route firewall policy SD-WAN dashboard BGP / OSPF state PCAP forensics vendor support ticket
How It Works

Rez checks the network and shows its work.

The agent gathers read-only facts. The validation layer checks whether those facts actually explain the incident. If the evidence is weak, Rez says so.

1

Checks the network

Rez reads device and API evidence in read-only mode — pulling the same facts your senior engineer would check first.

read-only SSH / API
2

Separates cause from symptoms

Validation engines check protocol, config, forwarding, firewall, NAT, VPN, and SD-WAN facts so downstream symptoms do not get promoted as the root cause.

17+ engines · 94+ diagnostics
3

Shows the work

Rez returns the root cause, the evidence behind it, confidence, and the competing explanations it rejected.

root cause + evidence + confidence
Three Ways In

Start with the lab. Scope the real network carefully.

You can try Rez without touching production. For customer pilots, we first confirm the vendor, topology, and incident type fit the coverage we can validate today.

Rung 1

Try Rez Arena

A full Rez UI session against a live Arista incident lab. No production credentials — just watch Rez investigate and prove a root cause end to end.

Live Arista lab · no production access
Try Rez Arena
Rung 3

Connect live read-only

When you're ready, grant read-only SSH/API access for actual-path RCA against your real network — allowlisted and fully auditable.

Read-only · auditable
Talk About Live RCA
What You Get Back

A harder case: routes disappear, but BGP is still up.

Example from a validated routing-policy scenario: the session is established, but policy suppresses the prefixes users need.

Rez — RCA Trace
Validated scenario · BGP route policy
Symptom

Store users cannot reach DC app prefixes 10.20.0.0/24 and 10.30.0.0/24.

Evidence path
store edge BGP peer 10.99.1.1 route-map DENY_HQ_OUT DC prefixes
Primary root cause
CP_ROUTE_FILTERED
Confidence 0.93 · validated by BGP policy + route-table evidence
Why-chain
  • The BGP neighbor remains established, so this is not a session-down incident.
  • Outbound route-map DENY_HQ_OUT matches the affected prefixes.
  • Advertised routes drop from three prefixes to one; the receiver no longer learns 10.20.0.0/24 or 10.30.0.0/24.
  • Rez roots at route filtering, not a generic no-route symptom.
Evidence
SSH/API collection read-only
BGP session established
Receiver prefixes missing
Policy line DENY_HQ_OUT out
Root atom CP_ROUTE_FILTERED
Competing hypotheses rejected
BGP session down interface down generic no route firewall deny
For MSP / NOC Teams

Help your NOC get to a defensible RCA faster.

Give every tier the evidence a senior engineer would collect — without putting your best person on every incident.

  • Reduce escalation load on senior staff
  • Cut vendor finger-pointing with defensible evidence
  • Produce client-ready RCA evidence on every ticket
  • Investigate live Arista/Cisco environments today, with firewall and SD-WAN packs moving through validation
  • Keep access read-only and auditable in every client environment
Apply for MSP Pilot
Validated and in-progress coverage
Arista EOS live Arena
Cisco IOS-XE / NX-OS live-lab UCs
Cisco SD-WAN live API parser checks
Fortinet pack in validation
Palo Alto / Meraki packs next
Private validation before support claims
Setting Expectations

What Rez is not.

× Not another dashboard
× Not a chatbot guessing from alerts
× Not a write-automation tool
× Does not ask for production access on first touch
× Does not train on customer network data

Rez investigates read-only evidence and only promotes findings that the validation layer can support.

Security & Trust

Built for skeptical operators.

Control matters more than speed. Rez is designed for read-only access, auditability, and clear boundaries.

Read-only always

Command allowlist + fail-closed safety

Anonymization before reasoning

No model training on customer data

Auditable evidence chain

Designed for enterprise assurance: audit logging, data isolation, encryption, RBAC, and a self-hosted deployment path. Arena uses a live isolated lab; customer evidence review is handled through a guided pilot until self-serve retention controls are deployed.

Read Security & Trust
Pricing

Start small. Prove value before rollout.

Use Arena first. If your vendor and incident type fit current coverage, move to early access or a guided pilot.

Plan Price Best for Included
Free Starter Free Individual engineer / lab Early Windows access, local Packet Analysis, Digital Twin preview, and limited invited RCA credits.
Starter $199/mo Serious individual / small shop 200 incidents/month. Digital Twin, Packet Analysis, Slack/Teams integration, Change Assessment, and full Network Agentic RCA capabilities.
MSP Pilot Contact us NOC / design partner 30–45 day guided pilot with Digital Twin, Packet Analysis, Slack/Teams integration, Change Assessment, and full Network Agentic triage workflow.
Enterprise / MSP Contact for more information Production NOC / MSP Client workspaces, SSO, private deployment, Digital Twin, Packet Analysis, Slack/Teams integration, Change Assessment, and full Network Agentic capabilities.

Production pricing is tied to investigation volume, deployment model, and support needs.

Where Rez Fits

Beyond path visibility: incident RCA your team can send.

Great tools already answer "what exists" and "what changed." Rez answers the bridge-call question: why is this incident happening now?

Buyer question Better fit
What devices and paths exist? IP Fabric / Forward Networks / digital-twin tools
Will this change break policy? Forward / network assurance tools
What changed in traffic? Kentik / flow observability
Why is this incident happening now, and what evidence can I send? Rez
Get Started

Stop proving outages by hand.

Try the live Arena lab, request Windows early access, or scope a supported pilot against your own environment.

Scope a supported pilot

Tell us the vendor mix, symptom, topology size, and available read-only access. If it fits current validated coverage, we will run a guided pilot. If it does not, we will say that upfront.