Why not X?

Strong frameworks already exist, and that's a good thing. Wombat does not replace them: it makes governance, traceability and vendor-neutral, multi-cloud decision-making a first-class objective, with 8 pillars, 100+ controls and an open-source CLI.

AWS Well-Architected Azure CAF GCP Framework CNCF ISO 27001 BSI C5
8
Pillars
100+
Controls
50+
Frameworks mapped
15+
Countries & regions

When Wombat belongs in your stack.

Three signals that Wombat is the right addition, regardless of what else you already use.

You decide across providers

If architectural decisions don't happen within a single cloud provider, or you take exit capability seriously, you need a neutral lens. Wombat is multi-cloud by design, not by accident.

You want decisions to be auditable

Wombat relies on evidence, RFCs and transparent trade-offs. Architecture decisions become traceable artifacts, not tribal knowledge, which makes reviews, audits and long-term operations easier.

You need governance that scales

Maintainers, working groups and a TSC are part of the system, not "maybe later". Wombat ships with community governance out of the box, so the framework evolves with your organization.

An overlay, not a replacement.

Many teams already use AWS Well-Architected, Azure CAF or GCP frameworks, and should keep doing so. Wombat sits on top as a governance, sovereignty and assessment layer.

Vendor-neutral assessment

Wombat applies a consistent lens across any cloud. Provider-specific guidance feeds into it, not the other way around.

RFC-driven governance

Every change to the framework goes through a documented, reviewable RFC. No silent updates, no opaque vendor decisions.

Sovereignty as a first-class pillar

Data residency, vendor neutrality and exit strategies are built into the framework, not bolted on as an afterthought.

Agentic controls for AI autonomy

New in v1.1: a dedicated pillar for identity, guardrails and observability of autonomous agents, something no provider framework covers end to end.

Framework stack
Wombat v1.1 · overlay
Governance · Sovereignty · Multi-cloud assessment · Agentic AI
works alongside ↓
AWS WA
Well-Architected
Azure CAF
Cloud Adoption
GCP
Architecture Framework
and maps to ↓
CNCF
Ecosystem
ISO 27001
Standards
BSI C5
Compliance

Wombat is additive. Your existing frameworks keep doing what they do well.

Where each one excels.

No framework-bashing. Each has a role, and a practical way to use it together with Wombat.

Provider frameworks

AWS WA · Azure CAF · GCP

Concrete, product-aligned recommendations within a single ecosystem: rich tooling, many quick wins, deep service guidance.

Together

Use them for concrete service and implementation guidance, they know their products best. Use Wombat as the neutral assessment overlay: governance, sovereignty and multi-cloud consistency sit here.

Open-source ecosystem

CNCF

Standards, best practices and proven project governance across the cloud-native landscape: TAGs, working groups and a rich reference ecosystem.

Together

Use CNCF for ecosystem standards, project maturity and cloud-native best practices. Use Wombat for scoring and the governance process that turns those practices into auditable architecture decisions.

Compliance standards

ISO 27001 · NIST · BSI C5

Long-established, audit-ready standards with broad regulatory acceptance: a foundation for controls, compliance terminology and risk management.

Together

Use ISO, NIST and BSI as the control and compliance foundation, the legally accepted terminology. Use Wombat to operationalize those controls for architecture and platform teams day to day.

See where Wombat clearly differs.

The comparison page shows a side-by-side breakdown, or jump straight into the 8 pillars to understand what Wombat covers in practice.