Framework · Controls Overview
Controls Showcase
A comprehensive overview of all WAF++ controls, organized by country and regulatory framework coverage. Validate your infrastructure against 83+ controls across 8 pillars.
8
Pillars
83+
Controls
50+
Compliance frameworks
15+
Countries & regions
COUNTRY COVERAGE
Controls by Country / Region
WAF++ controls support compliance with regulations across multiple jurisdictions worldwide.
🇩🇪
Germany (DE)
BSI C5, BSI C3A, IT-Grundschutz, DORA, NIS2, GDPR
29 controls mapped to BSI C3A, DORA, NIS2, GDPR
🇫🇷
France (FR)
ANSSI SecNumCloud, GDPR, DORA, NIS2, EUCS
14 controls mapped to ANSSI, DORA, NIS2, GDPR
🇦🇹
Austria (AT)
BSI C5, GDPR, DORA, NIS2
25 controls mapped to BSI C5, DORA, NIS2, GDPR
🇨🇭
Switzerland (CH)
BSI C5, GDPR, DPDP Act
3 controls mapped to DPDP Act, GDPR
🇳🇱
Netherlands (NL)
BIO, GDPR, DORA, NIS2
14 controls mapped to BIO, DORA, NIS2, GDPR
🇬🇧
United Kingdom (UK)
UK GDPR, UK NCSC CAF, UK Cyber Essentials, NIS2
14 controls mapped to UK GDPR, NCSC, Cyber Essentials, NIS2
🇺🇸
United States (US)
NIST SP 800-53, FedRAMP, CMMC 2.0, HIPAA, CCPA, SOC 2, PCI DSS
15 controls mapped to NIST, FedRAMP, CMMC 2.0, HIPAA, PCI DSS
🇦🇺
Australia
ASD Essential 8, IRAP
13 controls mapped to ASD Essential 8, IRAP
🇨🇦
Canada
PIPEDA
3 controls mapped to PIPEDA
🇸🇬
Singapore
PDPA SG
2 controls mapped to PDPA SG
🇮🇳
India
MEITY CSMP, DPDP Act
3 controls mapped to MEITY CSMP, DPDP Act
🇧🇷
Brazil
LGPD
3 controls mapped to LGPD
Key Regional Frameworks
GDPR (EU/EEA)
NIS2 (EU)
DORA (EU Financial)
BSI C5/C3A (Germany)
ANSSI (France)
UK GDPR/NCSC (UK)
NIST/FedRAMP (US)
ASD Essential 8 (Australia)
PIPEDA (Canada)
PDPA (Singapore)
DPDP Act (India)
LGPD (Brazil)
REGULATORY FRAMEWORKS
All Supported Compliance Frameworks
WAF++ maps controls to regulatory frameworks across security, compliance, and governance domains.
International Standards
🇪🇺
European Frameworks
🇬🇧
United Kingdom
🇺🇸
United States
🌏
Asia-Pacific
Industry Specific
Cloud Frameworks
AWS Well-Architected
Azure Well-Architected
Google Cloud Framework
🇩🇪
Germany Specific
BSI C5:2020
BSI C3A:2026
IT-Grundschutz
DORA
NIS2
🇫🇷
France Specific
ANSSI SecNumCloud
GDPR
DORA
EUCS
🇨🇭
Switzerland Specific
BSI C5:2020
GDPR
DPDP Act
Total: 50+ regulatory frameworks supported
CONTROLS
Controls by Pillar
83+ controls across 8 pillars. Each control includes machine-readable checks for automated validation.
Security (WAF-SEC)
WAF-SEC-010WAF-SEC-020WAF-SEC-030WAF-SEC-040WAF-SEC-050WAF-SEC-060WAF-SEC-070WAF-SEC-080WAF-SEC-090WAF-SEC-100WAF-SEC-110WAF-SEC-120WAF-SEC-130
Cost Optimization (WAF-COST)
WAF-COST-010WAF-COST-020WAF-COST-030WAF-COST-040WAF-COST-050WAF-COST-060WAF-COST-070WAF-COST-080WAF-COST-090WAF-COST-100
Operational Excellence (WAF-OPS)
WAF-OPS-010WAF-OPS-020WAF-OPS-030WAF-OPS-040WAF-OPS-050WAF-OPS-060WAF-OPS-070WAF-OPS-080WAF-OPS-090WAF-OPS-100
Reliability (WAF-REL)
WAF-REL-010WAF-REL-020WAF-REL-030WAF-REL-040WAF-REL-050WAF-REL-060WAF-REL-070WAF-REL-080WAF-REL-090WAF-REL-100
Performance Efficiency (WAF-PERF)
WAF-PERF-010WAF-PERF-020WAF-PERF-030WAF-PERF-040WAF-PERF-050WAF-PERF-060WAF-PERF-070WAF-PERF-080WAF-PERF-090WAF-PERF-100
Sovereign (WAF-SOV)
WAF-SOV-010WAF-SOV-020WAF-SOV-030WAF-SOV-040WAF-SOV-050WAF-SOV-060WAF-SOV-070WAF-SOV-080WAF-SOV-090WAF-SOV-100
Sustainability (WAF-SUS)
WAF-SUS-010WAF-SUS-020WAF-SUS-030WAF-SUS-040WAF-SUS-050WAF-SUS-060WAF-SUS-070WAF-SUS-080WAF-SUS-090WAF-SUS-100
WAFPass · CLI Tool · v1.1.0
Automated controls for every pillar — Terraform, CDK, and more. Static analysis, no cloud credentials required, results in seconds.
✓ PASS
✗ FAIL
– SKIP
Learn about WAFPass →
GET STARTED
Ready to validate your infrastructure?
Dive into the documentation, validate your infrastructure with WAFPass, or join the community to contribute controls.
GDPR
SOC 2
HIPAA
BSI C5
ISO 27001
NIS2