Context, not competition.
AWS Well-Architected, Azure CAF, the GCP Framework and CNCF each solve a real piece of the cloud puzzle. Here's exactly where Wombat adds coverage, and where the others are still the better fit.
Side by side.
Ten criteria across five frameworks. The table shows coverage, not a winner. Pick the right tool for the job.
| Criterion | Wombat v1.1 | AWS WA | Azure CAF | GCP Framework | CNCF |
|---|---|---|---|---|---|
| Vendor-neutral | Yes | No | No | No | Yes |
| Open governance (TSC / Maintainers / WGs) | Yes | No | No | No | Yes |
| Assessment framework & scoring | Yes | Yes | Yes | Yes | No |
| Multi-cloud focus | Yes | Partial | Partial | Partial | Yes |
| Sovereignty & exit capability as a pillar | Yes | No | No | No | Partial |
| Agentic AI controls (identity, guardrails, observability) | Yes | No | No | Partial | Partial |
| Auditability & traceability (evidence, RFCs) | Yes | Partial | Partial | Partial | Partial |
| Open source & open license | Apache 2.0 + CC BY 4.0 | Proprietary | Proprietary | Proprietary | Open |
| CLI assessment tool | WOMBATpass v1.1.0 | Provider tools | Advisor | Partial | No |
| Provider-specific implementation guidance | Cross-provider | Deep | Deep | Deep | No |
Where Wombat stands apart.
Six capabilities no other framework in this comparison covers fully: the reasons Wombat exists alongside them, not instead of them.
Sovereignty Only Wombat
Data residency, vendor lock-in avoidance and exit strategies are not an afterthought. Pillar 7 is sovereign by design and scoreable.
Agentic New in v1.1
Identity, governance, guardrails and observability for autonomous AI agents, covered by WAF-AGN-010 through WAF-AGN-100.
Full auditability via RFCs
Every rule and decision is traceable through a public RFC with evidence. Provider frameworks update silently; Wombat requires justification.
Neutral assessment + open governance
CNCF has open governance but no assessment. Provider frameworks assess, but are vendor-bound. Wombat is the only option with both.
Open-source CLI: WOMBATpass v1.1.0
Run assessments locally, export evidence and track posture over time. Apache 2.0 code, CC BY 4.0 docs, with Docker Compose in minutes.
100+ vendor-neutral controls
Security, cost, operations, reliability, performance, sustainability, sovereign and agentic, all mapped across providers.
What this means in practice.
Pick the right tool for the job, and let Wombat handle the parts the others leave open.
You need provider-specific implementation
AWS WA, Azure CAF and GCP Framework are the right choice for deep, service-aligned guidance within a single provider. They know their products: use that. Wombat is not a replacement.
You need vendor-neutral governance
When architectural decisions span providers, or must survive a future migration, Wombat gives you a neutral lens: principles, evidence and traceable decisions independent of today's provider.
You are adopting agentic AI
Only Wombat ships a dedicated agentic pillar with controls for identity, guardrails and observability. Use it alongside provider AI services to keep autonomy, compliance and accountability in check.
Ready to go deeper?
Read the full positioning context, explore the 8 pillars, or install WOMBATpass locally to run your first assessment.
