The 8 pillars.

A vendor-neutral structure that covers every critical dimension of cloud architecture quality, from security and cost to digital sovereignty and agentic operations.

Vendor-neutral 8 pillars · 100+ controls 50+ compliance frameworks

A complete lens for cloud decisions.

Every classic Well-Architected framework stops at six. Wombat adds the two that matter: digital sovereignty and agentic operations — so you can review, build, and prove cloud architecture with a shared, vendor-neutral language.

Explore the framework
8
Pillars
100+
Controls
50+
Compliance frameworks
15+
Countries & regions

Six proven pillars.

The foundations every cloud architecture should be reviewed against, from security to sustainability.

Security

Controls, threat modeling, policy-as-code, and secure defaults across every layer.

Cost Optimization

FinOps, cost transparency, budget guardrails, and right-sizing.

Performance Efficiency

Performance as a product: architecture, scaling, latency, and efficiency.

Reliability

Resilience, HA/DR, error budgets, and tested operating models.

Operational Excellence

Runbooks, incident response, standards, and automation.

Sustainability

Efficiency, resource consumption, and sustainable platform decisions.

Two pillars, unique to Wombat.

Every classic framework stops at six. Wombat adds the two that matter for sovereign, AI-assisted cloud operations.

Sovereign Unique to Wombat

Data sovereignty, compliance, vendor neutrality, and exit strategies — the first plus of Wombat.

Agentic New in v1.1

AI-assisted architecture reviews, autonomous remediation, and policy-aware agents — the second plus of Wombat.

How to use the pillars.

01

Architecture reviews

Evaluate every new platform or cloud architecture against all eight pillars before go-live.

02

Platform standards

Build golden paths, guardrails, and default configurations on top of the pillars.

03

Audit & compliance

Use the pillars as a governance reference mapped to GDPR, BSI C5, ISO 27001, and SOC 2.

Mapped to
GDPR SOC 2 HIPAA BSI C5 BSI C3A ISO 27001 NIS2

Design with all 8 pillars.

Dive into the documentation, validate your infrastructure with WOMBATpass, or join the community to contribute controls and governance feedback.