Screen shot of AI Canvas interface

Cisco AI Canvas

The workspace for AgenticOps

Bring cross-domain telemetry, teams, and agents into one generative workspace. Agents investigate and propose solutions. Operators supervise and approve execution.

A shared, generative canvas for cross-domain operations

Launch AI Canvas directly from Meraki, Splunk, or Cisco Cloud Control. Instantly build an incident-specific workspace, pre-populated with relevant alerts and affected systems.

Stop writing complex queries for every single tool. AI Canvas unifies signals across your stack through the Model Context Protocol (MCP). Just ask, "Why is the VPN slow?" to get immediate, cross-domain correlations.

Move beyond static dashboards. AI Canvas dynamically generates custom charts, tables, and timelines, tailored specifically to the incident you are investigating.

Pin widgets and artifacts to the workspace so evidence stays intact through handoffs and escalations.

Share a single workspace link. Operational teams see the same evidence, conclusions, and next steps, eliminating the need for live re-briefings.

AI Canvas proposes the solution; you authorize the action. The agent executes the fix instantly and logs what's changed.

What AI Canvas makes possible

Accelerate resolution (MTTR)

Slash the time spent gathering context and chasing dead ends. Move from detection to remediation in record time.

Quicker time to innocence

Eliminate unaffected services and teams sooner with evidence-backed correlation. Stop the blame game and focus only on what's actually impacted.

Higher operator leverage

Agents retrieve and correlate cross-domain signals so your team can focus on decision-making. One operator can now manage the scope of work that used to require a full team.

Reduced cognitive load

Replace the swivel chair workflow of fragmented dashboards and scattered notes. Teams share one persistent workspace that acts as the single source of truth for the entire incident.


Operations slow when context is siloed

75% of MTTR*

Is spent finding the problem. The rest is fixing it.

The issue isn't data volume–it's turning signals into decisions when context is fragmented across consoles and handoffs.

*MTTR: mean time to resolution


 

Powered by the Cisco Deep Network Model

Domain intelligence built for operations

AI Canvas is grounded in the Cisco Deep Network Model, trained on 40 plus years of Cisco expertise and refined with live telemetry plus TAC/CX insights to match real network behavior.


 

One workspace. All of your telemetry.

Pull relevant telemetry and context across your Cisco domains. Expand to third-party products over time.

Cisco Catalyst Center

Take advantage of powerful campus and branch switching and wireless management that leverages AI to connect, secure, and automate network operations.

Cisco Nexus Hyperfabric

Scale data center fabrics anywhere, for any size, with a cloud-managed solution and simplify every step: design, order, deploy, manage, and scale.

Cisco Intersight

Cloud operations and infrastructure lifecycle management provides a unified, real-time view of converged and hyperconverged infrastructure in one dashboard.

Cisco Meraki

This cloud-managed wireless, switching, and SD-WAN solution provides a unified platform from a single web-based dashboard.

Cisco Nexus Dashboard

Unified on-premises data center networking analytics, management, and automation platform for NX-OS VXLAN EVPN, ACI and SONiC fabrics.

Cisco SD-WAN

Gain WAN connectivity with centralized policy and control.

Cisco Cyber Vision

Strengthen your OT security posture and protect operations with deep asset visibility, adaptive segmentation, and zero-trust access enabled through Cisco's security architecture.

Cisco ThousandEyes

Detect issues faster, understand impact, and validate with visibility and control from user to cloud—across owned and unowned networks.

Cisco Duo

Stop identity-based attacks with a security-first identity and access management (IAM) solution built to protect against unauthorized access and breaches.

Cisco Identity Intelligence

Improve identity security using AI-driven identity signals and analytics to detect risky behavior, connect authentication to access decisions, and surface threats across your identity stack.

Cisco Identity Services Engine (ISE)

Enforce network access control with a central policy engine that uses identity, device context, and posture to apply zero-trust access and segmentation across the network.

Cisco Secure Access

Utilize a cloud-delivered security service edge (SSE) solution, grounded in zero trust, for secure, seamless access from any user or device to any application, anywhere.

Cisco Secure Firewall

Stop threats and segment networks with next-generation firewall and intrusion prevention, supported by centralized policy management, threat intelligence, and actionable visibility.

Splunk Enterprise Security

Remove barriers between data and action using security information and event management (SIEM) for monitoring and investigation.

Cisco XDR

Detect and respond faster by correlating telemetry across endpoint, network, email, identity, DNS, and cloud, then prioritizing incidents by impact with guided response.

Webex Contact Center

Deliver modern customer experiences with a cloud contact center that supports omnichannel engagement, AI assisted agents, and rapid deployment without heavy infrastructure.

Webex Control Hub

Centralize administration and analytics for Webex services with a single console to manage users' device security settings and experiences across meetings, calls, and contact centers.

Splunk Cloud Platform

Collect index and analyze machine data from any source to power operational intelligence security monitoring and faster investigation using Splunk as a service.

Splunk IT Service Intelligence

Apply AIOps to monitor service health. Predict incidents and reduce downtime by correlating events metrics and KPIs across complex IT environments.

Splunk Observability Cloud

Unify metrics logs and traces in a cloud-native observability platform that reduces blind spots, accelerates troubleshooting, and improves service reliability at scale.

Cisco Crosswork Network Automation

Simplify services management and operations and gain capital efficiency while spending less time deploying services.

ServiceNow

ServiceNow offers everything-as-a-service cloud computing for IT service management workflows and ticketing.

Third-party products

External operational tools supported in Cisco environments serve various purposes, including network and security management, data collection, and AI security.


Cisco AI Canvas

Discover Cisco AI innovations

See how Cisco applies AI across networking, security, and operations to help teams move faster with more confidence.

Explore AgenticOps

AgenticOps is Cisco's model for agent-first operations. Agents carry work forward. Humans govern decisions, approvals, and risk.