Enterprise Plan
What the Enterprise plan unlocks (the features that read or change a live network) and what stays free.
Rackloom draws one line through its feature set, and it is not "basic vs advanced". It is which direction the tool is facing.
- Forward — free. Everything that turns your drawing into an artefact: the canvas, validation, config generation, AVD YAML, Ansible and Nornir bundles, Terraform and Pulumi, documentation, BOM, cable schedules, firewall analysis, labs.
- Backward — Enterprise. Everything that reaches out and reads or changes a real network.
What Enterprise unlocks#
| Device drift | Compare live running-configs against the intended baseline, on demand or on a schedule, with alerting when a device drifts or goes unreachable. |
| As-built import | Pull a live device and its LLDP neighbours using a saved credential profile, and reconcile the result against the current design. |
| SSH / NAPALM import | Pull a running-config and neighbour table directly off a live device into the canvas. |
| Device diagnostics | Run ping, traceroute, interface, ARP, MAC and BGP queries — and arbitrary read commands — against live equipment. |
| Config push | Dry-run a diff against a device and commit it, with a rollback window. |
What stays free#
Nothing that was free has moved. Designing, validating, generating and documenting are the product, and they remain available to every account — several of them without an account at all. Specifically: the multi-site canvas and Blueprint wizard, the AVD fabric wizard, config generation for every supported vendor, the Ansible and Nornir export bundles, the Azure design and deploy (Terraform or Pulumi), HLD documents, BOM and cable schedules, Firewall Studio, Watchtower monitoring, the Digital Twin lab, sharing and version history.
How it is applied#
The entitlement is a property of the organization, set by Rackloom. Both halves of the product enforce it: the web app hides Enterprise features rather than greying them out, and every corresponding API endpoint independently returns 403 without the entitlement. Hiding alone would not be a gate — the capability would still be reachable by anyone who knew the URL.