WAF++ is an open framework for everyone who wants to design cloud architectures intentionally, securely, and vendor-neutral.
Trusted by security & platform teams
WAF++ structures cloud architecture across seven pillars — from Security to Sovereign. This creates a vendor-neutral framework that brings together multi-cloud reality, sovereignty, and regulatory requirements.
Each pillar provides principles and guiding questions to identify risks early — such as misconfiguration, lock-in, and lack of transparency — and to act with sovereignty.
WAF++ is built openly, transparently, and iteratively. Governance ensures consistency, quality, and transparency — so community contributions scale without drifting into proprietary patterns.
Start with the fundamentals, use checklists, and work your way step by step through the pillars and PASS. Documentation is your central entry point.
“WAF++ provides a stable foundation for digital applications and shows how technical precision and design sensitivity can be successfully combined. The chosen color palette — with a solid, modern base tone and a fresh accent — conveys reliability while creating a visual identity that is both scalable and appealing.”
“WAF++ has great potential to become the perfect answer to real-world everyday questions from the technology, cloud & developer community. With increasing dynamics and the tension between the drive for innovation, technology overload, and sovereignty, companies and technology experts are under growing pressure and have so far found mostly fragmented or sales-driven answers. WAF++ starts a movement that brings together genuine hands-on expertise from the field — and can evolve it further.”
Iterate rules in minutes, reduce noise, and keep policies traceable.
Compliance
