Kilter vs. VMware NCM
What replaces VMware NCM? Enter Kilter by BackBox.
Both back up configurations, enforce policy, and push changes at scale. Kilter adds vulnerability remediation: CVEs are matched to your devices, verified against your running configs, and automatically fixed.
Same configuration work, plus the half VMware NCM never had.
Kilter
The network automation platform from BackBox
VMware NCM
VMware Smart Assurance Network Configuration Manager
CVE correlation to device versions
Kilter:IncludedCISA, NVD, NIST, vendor feeds
VMware NCM:Not includedNot offered
Workaround applied without an upgrade
Kilter:IncludedAutomated
VMware NCM:Not includedNot offered
Feature enhancements
Kilter:IncludedActive development
VMware NCM:Not includedNone, per Broadcom notice
Support horizon
Kilter:IncludedOngoing
VMware NCM:Partly includedDec 2028, subject to approval
Fault and performance monitoring
Kilter:Not includedNot offered
VMware NCM:Partly includedSeparate license
VMware NCM details come from Broadcom's End of Support notice for VMware Smart Assurance and the NCM 10.1.x release notes and support matrix, checked September 2026. The December 2028 support date is subject to Broadcom management approval. Product names are trademarks of their owners.
Kilter by BackBox and VMware NCM, row by row
Vulnerability Intelligence & Remediation3 rows
CVE correlation to device versions
- Kilter
IncludedCISA, NVD, NIST, vendor feeds
- VMware NCM
Not includedNot offered
Risk scoring across your estate
- Kilter
IncludedYes
- VMware NCM
Not includedNot offered
Workaround applied without an upgrade
- Kilter
IncludedAutomated
- VMware NCM
Not includedNot offered
Network Configuration & Compliance4 rows
Policy frameworks supported
- Kilter
IncludedNIST, STIG, PCI, DORA
- VMware NCM
IncludedPolicy compliance
Non-compliant device corrected
- Kilter
IncludedAutomatic, evidence retained
- VMware NCM
- Neutral
Policy remediation
Backup validated before restore
- Kilter
IncludedFive-step verification
- VMware NCM
- Neutral
Archive and compare
Multi-vendor OS upgrade automation
- Kilter
Included3,000+ automations, 180+ vendors
- VMware NCM
Partly includedScripted push jobs
Product Direction4 rows
Feature enhancements
- Kilter
IncludedActive development
- VMware NCM
Not includedNone, per Broadcom notice
Named successor product
- Kilter
- Neutral
Not applicable
- VMware NCM
Not includedListed as N/A
New device support
- Kilter
IncludedAdded continuously
- VMware NCM
- Neutral
Drivers ship inside releases
Support horizon
- Kilter
IncludedOngoing
- VMware NCM
Partly includedDec 2028, subject to approval
Scope and platform4 rows
Operator interface
- Kilter
IncludedBrowser and REST API
- VMware NCM
Partly includedJava Web Start client
Scope of the purchase
- Kilter
IncludedConfig, compliance, AI-driven vulnerability intelligence
- VMware NCM
Partly includedSmart Assurance suite
Fault and performance monitoring
- Kilter
Not includedNot offered
- VMware NCM
Partly includedSeparate license
Flow and packet analysis
- Kilter
Not includedNot offered
- VMware NCM
Not includedNot offered
Vulnerability Intelligence & Remediation3 rows
| Capability | KilterNetwork automation by BackBox | VMware NCMVMware Smart Assurance Network Configuration Manager |
|---|---|---|
| CVE correlation to device versions | IncludedCISA, NVD, NIST, vendor feeds | Not includedNot offered |
| Risk scoring across your estate | IncludedYes | Not includedNot offered |
| Workaround applied without an upgrade | IncludedAutomated | Not includedNot offered |
Network Configuration & Compliance4 rows
| Capability | KilterNetwork automation by BackBox | VMware NCMVMware Smart Assurance Network Configuration Manager |
|---|---|---|
| Policy frameworks supported | IncludedNIST, STIG, PCI, DORA | IncludedPolicy compliance |
| Non-compliant device corrected | IncludedAutomatic, evidence retained | Neutral Policy remediation |
| Backup validated before restore | IncludedFive-step verification | Neutral Archive and compare |
| Multi-vendor OS upgrade automation | Included3,000+ automations, 180+ vendors | Partly includedScripted push jobs |
Product Direction4 rows
| Capability | KilterNetwork automation by BackBox | VMware NCMVMware Smart Assurance Network Configuration Manager |
|---|---|---|
| Feature enhancements | IncludedActive development | Not includedNone, per Broadcom notice |
| Named successor product | Neutral Not applicable | Not includedListed as N/A |
| New device support | IncludedAdded continuously | Neutral Drivers ship inside releases |
| Support horizon | IncludedOngoing | Partly includedDec 2028, subject to approval |
Scope and platform4 rows
| Capability | KilterNetwork automation by BackBox | VMware NCMVMware Smart Assurance Network Configuration Manager |
|---|---|---|
| Operator interface | IncludedBrowser and REST API | Partly includedJava Web Start client |
| Scope of the purchase | IncludedConfig, compliance, AI-driven vulnerability intelligence | Partly includedSmart Assurance suite |
| Fault and performance monitoring | Not includedNot offered | Partly includedSeparate license |
| Flow and packet analysis | Not includedNot offered | Not includedNot offered |
VMware NCM details come from Broadcom's End of Support notice for VMware Smart Assurance and the NCM 10.1.x release notes and support matrix, checked September 2026. The December 2028 support date is subject to Broadcom management approval. Product names are trademarks of their owners.
Featured Resources
Switching from VMware NCM
Trusted by network teams at
What network teams say
“BackBox has earned us a much-improved security posture and helped us to eliminate misconfigurations. We can now roll out uniform security policies in new settings much more quickly.”
— Martin R., Cloud Security Operations, Telecommunications “Our entire deployment and onboarding over 200 customers and over 4,000 customer devices occurred in 30 days from initial deployment of service, including integration with ServiceNow, accelerating time to value.”
— VP Managed Services, Global MSP, Enterprise, > 1,000 employees “BackBox simplifies and automates configuration management for network devices, addressing challenges associated with manual processes, diverse vendor environments, efficiency, compliance, risk reduction, and capacity optimization.”
— Martin B., Senior Network Engineer, Information Technology and Services
Kilter and VMware NCM: common questions
Is VMware NCM still being developed?
Broadcom's End of Support notice for VMware Smart Assurance states that no feature or capability enhancements will be added to Network Configuration Manager and lists no successor product. Support is extended through December 2028, subject to Broadcom management approval.
Does VMware NCM match CVEs to my devices?
No. VMware NCM does not correlate CVEs with device versions, score risk, or apply workarounds. Kilter correlates CVE data from CISA, NVD, NIST, and vendor feeds with your device versions, scores risk across your estate, and can apply a workaround without an upgrade.
Does Kilter replace VMware's fault and performance monitoring?
No. Kilter does not offer fault and performance monitoring, which VMware sells under a separate license. Neither Kilter nor VMware NCM provides flow or packet analysis.
How do operators use Kilter?
VMware NCM's operator client runs on Java Web Start, either in a browser or through the REST API.
How does Kilter keep up with new devices?
Kilter ships thousands of pre-written automations across 180+ vendors, and new device support is added continuously. VMware NCM includes device support as drivers in its product releases.
See Kilter on your own network
Bring your VMware NCM questions. We will show you the same jobs, done in Kilter.