WAF Assessment¶
Availability: Pro and Enterprise · Tenant-scoped
See the Tier & Scope Matrix for how this is enforced today.
The Well-Architected Framework (WAF) Assessment evaluates your cloud infrastructure against five architectural pillars and delivers a scored, RAG-rated view of your posture.
Pillars¶
| Pillar | What it measures |
|---|---|
| Operational Excellence | Monitoring, alerting, deployment practices, runbooks |
| Reliability | Redundancy, backups, failover, recovery time |
| Performance Efficiency | Resource sizing, auto-scaling, caching, latency |
| Cost Optimization | Idle resources, over-provisioned instances, reserved capacity |
| Sustainability | Resource efficiency, carbon footprint, right-sizing |
RAG ratings¶
Each pillar receives a RAG (Red / Amber / Green) rating based on its score:
| Rating | Score | Meaning |
|---|---|---|
| 🟢 Green | ≥ 75 | Well-architected. Minor improvements possible. |
| 🟡 Amber | 50–74 | Significant gaps. Address before next review cycle. |
| 🔴 Red | < 50 | Critical architectural issues. Immediate attention needed. |
| ⬜ Grey | - | Not assessed (no cloud accounts scanned for this provider) |
Scoring model¶
Each pillar starts at 100. Findings reduce the score:
| Severity | Deduction |
|---|---|
| Critical | −25 |
| High | −15 |
| Medium | −8 |
| Low | −3 |
| Informational | −1 |
Minimum score is 0.
LLM recommendations¶
When LLM is enabled by your administrator, each pillar includes an AI-generated recommendation - a short paragraph prioritising the most impactful remediations for that pillar.
Overall score¶
The Overall WAF Score is the average of the five pillar scores and follows the same RAG thresholds.
Drilling into findings¶
Each pillar card shows:
- Score - numeric score (0–100) with a colour-coded progress bar
- Critical / High counts - finding counts at the two highest severities, highlighted in red and orange respectively
- Total findings - total finding count for that pillar
- Recommendation - click to expand the AI-generated advisory (requires LLM to be configured)
- View N Findings → - click to jump directly to the Findings tab filtered to findings from that pillar
The findings link pre-applies the waf_pillar filter and opens in All Findings (flat list) view - pattern grouping is hidden for WAF findings since each finding maps to a specific resource rather than a repeating pattern.
WAF trend¶
On the Schedule Detail page, the WAF Trend chart shows how your overall score has changed across the last 30 days of scheduled runs.