Determining customized software recommendations for network devices

A method comprising:

• identifying a first group of network devices in a first device network that share a common functional attribute, wherein individual ones of the first group of network devices are running first software;
• identifying a second group of network devices in a second device network that share the common functional attribute, wherein individual ones of the second group of network devices are running the first software;
• receiving, from a first user account and via a first user device, input data defining first operational preferences associated with the first group of network devices;
• receiving, from a second user account and via a second user device, input data defining second operational preferences associated with the second group of network devices;
• collecting operational data that indicates a first current operating condition associated with the first group of network devices and a second current operating condition associated with the second group of network devices running the first software;
• determining, based at least in part on the first current operating condition, a first risk metric indicating a first measure of risk associated with the first group of network devices running the first software;
• determining, based at least in part on the second current operating condition, a second risk metric indicating a second measure of risk associated with the second group of network devices running the first software;
• determining that the first risk metric violates the first operational preferences;
• determining that the second risk metric does not violate the second operational preferences;
• identifying second software configured for execution by individual ones of the first group of network devices, wherein the second software satisfies the first operational preferences and is associated with the common functional attribute of the first group of network devices;
• determining that running the second software lowers the first measure of risk associated with the first group of network devices as compared to running the first software;
• providing the first user device with access to a first recommendation to run the second software on individual ones of the first group of network devices;
• providing the second user device with access to a second recommendation to continue running the first software on individual ones of the second group of network devices;
• and
• causing the first group of network devices to run the second software.

A system comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to:
• obtain telemetry data associated with a plurality of network devices in a device network;
• analyze the telemetry data to identify, from the plurality of network devices, a first group of network devices that share a first common functional attribute in the device network, and a second group of network devices in the device network that share a second common functional attribute, individual ones of the first group of network devices and the second group of network devices running first software;
• generate a first device policy for the first group of network devices;
• generate a second device policy for the second group of network devices;
• store an indication of the first device policy for the first group of network devices indicating that the first group of network devices share the first common functional attribute in the device network;
• store an indication of the second device policy for the second group of network devices indicating that the second group of network devices share the second common functional attribute in the device network;
• receive, via a user account associated with the first group of network devices and the second group of network devices, input data defining a first operational preferences associated with the first group of network devices and input data defining a second operational preferences associated with the second group of network devices;
• store a first association between the first operational preferences and the first device policy for the first group of network devices and a second association between the second operational preference and the second device policy for the second group of network devices;
• identify second software configured for execution by individual ones of the first group of network devices and second group of network devices, wherein the second software satisfies the first operational preferences and is associated with the first common functional attribute of the first group of network devices;
• determine that running the second software lowers a measure of risk associated with the first group of network devices as compared to running the first software;
• determine that running the second software increases a measure of risk associated with the second group of network devices as compared to running the first software;
• provide the user account with access to a first recommendation to run the second software on individual ones of the first group of network devices;
• provide the user account with access to a second recommendation to continue running the first software on individual ones of the second group of network devices;
• and
• cause the first group of network devices to run the second software.