Netdata Agent with self-hosted Parents: Monitoring Ledger 2026

Part of the Infrastructure Monitoring Ledger (edition 2026-10-04). How the scores work: methodology.

Snapshot

Tier: Challenger
Owner: Netdata Inc., San Mateo and Athens; venture-backed (Bain Capital Ventures seed 2018, Bessemer-led Series A 2019)
Licence model: GPLv3 until 2.0; NCUCL from 2.0 (2024), free for self-managed use; Netdata Cloud Pro and Business per node per month
Products scored: Netdata Agent and on-premises Parent nodes 2.12 with local dashboards; Netdata Cloud SaaS features excluded
Latest release: Netdata 2.12.0, 2026-09-30
Next signal: No dated milestone; direction is air-gapped multi-parent mesh, eBPF security tracing and MCP tools that run Netdata Functions
Archetype: Per-second agent with on-device ML
Evidence grade: B. Release tags verified, but the release record and AI evidence disagree on the MCP server (official vs community) and on Assistant maturity, and some features may be Cloud-only.

Scorecard

Dimension	Score	Direction
Capability today	65.2 / 100	higher is better
Momentum since end of 2022	+4.8 points	higher is better
Credibility	19.5 / 25	higher is better
Commercial risk	12.0 / 25	lower is better
Technical lock-in	7.0 / 25	lower is better
Integrator fit	5.0 / 20	higher is better
AI leverage	11.0 / 20	higher is better
Ledger Index	60.0 / 100	balanced weights

Capability by domain

Scores 0 to 5 against fixed anchors; total is weighted to 100.

Domain (weight)	2016	2019	2022	Today
Server, virtualization and storage (12)	2	3	3.5	4
Network monitoring (12)	1	2	2.5	2.5
Application and service monitoring (10)	2.5	3	3.5	3.5
Data collection and scale (12)	2.5	3	4	4.5
Alerting and event management (12)	2.5	3	3	3
Visualisation and reporting (8)	2.5	2.5	3	3.5
Logs and traces (8)	0	1	2	2.5
Automation and remediation (8)	1.5	2	2.5	2.5
Security and compliance (8)	1	2	2	2.5
New-platform support (VMware exit) (10)	1	2.5	3.5	3.5
Total / 100	34.2	49.4	60.4	65.2

Year by year: 2016: 34.2 · 2017: 35.4 · 2018: 35.4 · 2019: 49.4 · 2020: 49.4 · 2021: 49.4 · 2022: 60.4 · 2023: 60.4 · 2024: 62.4 · 2025: 64.4 · 2026: 65.2

What moved the score

Year	Domain	Change	Points	Trigger
2017	Alerting and event management	2.5 → 3	+1.2	1.8: health overhaul; Slack, PagerDuty, Opsgenie and webhook transports; hysteresis; no dependencies
2019	Application and service monitoring	2.5 → 3	+1.0	1.19: go.d with 100+ services; httpcheck for response time and certificates
2019	Automation and remediation	1.5 → 2	+0.8	1.19: official Ansible role, Puppet module, Docker images; custom notification scripts
2019	Data collection and scale	2.5 → 3	+1.2	1.19: dbengine v1 stores compressed per-second history on disk; hundreds of children per parent
2019	Logs and traces	0 → 1	+1.6	1.19: web log collectors turn access-log error rates into metrics
2019	Network monitoring	1 → 2	+2.4	1.19: go.d SNMP collector polls switch and router interfaces; no traps, flows or topology
2019	New-platform support (VMware exit)	1 → 2.5	+3.0	1.19: KVM guests via cgroups, vSphere collector, Kubernetes pod detection
2019	Security and compliance	1 → 2	+1.6	1.19: native TLS on dashboard and mutual-certificate streaming; API keys
2019	Server, virtualization and storage	2 → 3	+2.4	1.19: Docker and KVM via cgroups, Ceph and ZFS, IPMI, vSphere collector; Windows only via third-party wmi_exporter
2022	Application and service monitoring	3 → 3.5	+1.0	1.37: automatic service discovery, Prometheus endpoint scraping, eBPF socket tracing; no tracing
2022	Automation and remediation	2 → 2.5	+0.8	1.37: Netdata Functions run diagnostic tools from the UI; webhooks to runbook tools
2022	Data collection and scale	3 → 4	+2.4	1.37: tiered storage and replication; parents take 1,000+ children and 1M+ metrics a second
2022	Logs and traces	1 → 2	+1.6	1.37: systemd-journal viewer with live filtering, single host
2022	Network monitoring	2 → 2.5	+1.2	1.37: multi-target SNMP for Cisco, Arista, Juniper; no NetFlow, NCM or traps
2022	New-platform support (VMware exit)	2.5 → 3.5	+2.0	1.37: Proxmox VE QEMU VMs and LXC out of the box; Kubernetes DaemonSet; AHV via SNMP only
2022	Server, virtualization and storage	3 → 3.5	+1.2	1.37: Proxmox VE VMs and LXC auto-detected on the host; eBPF disk latency; NVMe health
2022	Visualisation and reporting	2.5 → 3	+0.8	1.37: React dashboard with node filtering and anomaly heatmaps; no scheduled reports
2024	Server, virtualization and storage	3.5 → 4	+1.2	2.0: native Windows agent GA; storage arrays via SNMP and REST collectors
2024	Visualisation and reporting	3 → 3.5	+0.8	2.0: multi-node dashboards on Parents, custom dashboards, topology overlays; no SLA reports
2025	Data collection and scale	4 → 4.5	+1.2	2.8: air-gapped multi-parent clustering for HA without Netdata Cloud
2025	Security and compliance	2 → 2.5	+0.8	2.8: air-gapped Parents with TLS 1.3 and bearer tokens; RBAC and SAML only in Netdata Cloud; no KEV entry (the security record)
2026	Logs and traces	2 → 2.5	+0.8	2.10: Windows event log viewer; log bursts shown beside metric anomalies; no central log store

Direction, 2023 to 2026

Each item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).

Date	Item	Theme	Driver
2023-02	Paid Netdata Cloud plans: Community, Pro, Business	D12 Packaging and licensing	P
2023-04	1.39: Metric Correlations GA	D7 AI-assisted operations	V
2023-06	1.40: dbengine v2 cuts RAM and disk I/O about 5x	D4 Collection and scale	C
2023-12	1.44: Go nvidia_smi GPU collector	D1 Server and virtualization	M
2024-11	2.0: NCUCL licence replaces GPLv3; Netdata Assistant	D12 Packaging and licensing	P
2024-11	2.0: native Windows agent GA	D1 Server and virtualization	C
2025-05	2.5: MCP server (official per release record); service map	D7 AI-assisted operations	M
2025-11	2.8: air-gapped multi-parent clustering	D4 Collection and scale	C
2026-02	DCGM GPU collector for tensor and NVLink metrics	D1 Server and virtualization	M
2026-04	2.10: Proxmox VE integration overhaul; Windows event log viewer	D1 Server and virtualization	M
2026-09	2.12: network path latency analyzer; gNMI streaming	D2 Network	C

Centre of gravity: Server and virtualization (4), Packaging and licensing (2), AI-assisted operations (2)
Driver mix: Vision 9%, Customer need 36%, Market window 36%, Upstream 0%, Portfolio 18%

Credibility: 19.5 / 25

Criterion	Score	Basis
Cadence	4.5	Frequent stable releases, 1.40 to 2.12 between 2023 and 2026
Roadmap transparency	3.5	Public GitHub issues and PRs; roadmap from briefings and blogs, not a written roadmap
Say-do	4	5 of 5 items since 2023 delivered, one 2 months late; MCP delivery disputed between research records
Velocity	4.5	Several collectors and features per release
Lifecycle stability	3	2.0 relicensing and dashboard change; Python collectors replaced by Go; only latest release supported

Say-do record, 2023 to 2026: 5 items 2023-2026, all delivered: dbengine v2, GPU collector, Windows agent (2 months late), MCP server (official per release record only), gNMI collector.

Commercial risk: 12.0 / 25 (lower is better)

Criterion	Score	Basis
Price and licence volatility	3.5	Paid Cloud plans introduced 2023; NCUCL licence replaced GPLv3 with 2.0 in 2024
Purchase constraints	1.5	Self-hosted agent free and unlimited; paid tiers per node per month, monthly
Channel and access	1.5	Open downloads and docs; direct sales only, no partner channel
Owner stability	3	Small venture-backed company; funding after 2019 not in the research; monetisation through Cloud
Cost of staying supported	2.5	Agent updates free; RBAC, SSO, audit and support require a paid Cloud plan

Security record of the product itself: None found in the KEV catalogue (the security record). No product CVEs recorded in the research.

Technical lock-in: 7.0 / 25 (lower is better)

Criterion	Score	Basis
Formats	2.5	Proprietary dbengine files readable only through the Netdata API; plain-text config
Export path	1	Streams to Prometheus Remote Write, Graphite, OpenTSDB, InfluxDB, Kafka; history via REST
Stack coupling	1.5	Own agent required; scrapes Prometheus endpoints and SNMP; no external database
Hardware / cloud coupling	1	Any hardware and offline; access control and SSO tied to Netdata Cloud
Skills and tooling coupling	1	Little configuration needed; standard skills

Integrator fit: 5.0 / 20

Criterion	Score	Basis
Partner programme openness	0.5	No partner programme; direct sales and community support
Multi-tenancy and self-service	1	No multi-tenancy on-premises; spaces and rooms only in Netdata Cloud
API and infrastructure-as-code	3	REST API v1-v3, Prometheus endpoint, official Ansible role and Helm chart; no Terraform described
Skills and certification	0.5	No training or certification

AI leverage: 11.0 / 20

Strand	Today	Latest step
AIOps on monitoring data	4	2023: 1.39: Metric Correlations rank anomalous metrics during an incident
AI platform stack	2.5	2024: 2.0: Netdata Assistant summarises anomalies in plain English
AI-assisted operations	2.5	2024: 2.0: Netdata Assistant, read-only; GA per AI evidence, preview per release table
Agent openness	2	2019: 1.19: documented REST API v1 with JSON, CSV and Prometheus formats

AI say-do: 2 tracked, 2 delivered GA (2.0 Assistant, DCGM collector), 0 dropped, average lag 1.5 months. ML is per-metric local anomaly detection; the Assistant only explains.

Reading

Netdata is building a zero-configuration, per-second monitoring agent with machine learning on every metric, and moving management and access control into its paid Cloud. The record shows fast releases and delivered promises, plus a 2024 licence change away from GPLv3. Buyers get strong host, container and Proxmox coverage for free, but network, logs, multi-tenancy and on-premises access control are thin.

Open questions and evidence caveats

release record says an official MCP server shipped in 2.5.0; the AI evidence finds only a community server. Agent openness scored 2 pending a check.
NCUCL dated 2024-09-19 in the release record, but 2.0 was tagged 2024-11-07; which components moved licence needs checking.
Some dashboards and the Assistant may depend on Netdata Cloud; self-hosted scope was assumed where the research is silent.