8 min read

Introduction to BlueWhale Stack

Platform overview, architecture, and key concepts for cloud architects and IT teams getting started.

OverviewArchitectureGetting Started
01

What is BlueWhale Stack?

BlueWhale Stack is a hyperscaler-neutral cloud management platform (CMP) — a single control plane for unified inventory, AI-native provisioning, bundled observability, cloud migration, and governance across public cloud, on-premises, and hybrid environments.

Where most organisations run five or more separate tools — a CMP, a monitoring platform, an ITSM suite, per-cloud provisioning consoles, and hand-written Terraform — BlueWhale Stack consolidates them into one platform, in one UI, with one audit trail.

See everything

A live, unified map of every asset across six public clouds plus on-prem and hybrid.

Provision without consoles

Governed self-service provisioning with Whale AI sizing — no per-cloud console access needed.

Observe, bundled

Logs, metrics, traces and SLOs with burn-rate alerts — included in the licence, no separate observability contract.

AI-native by design

Whale AI (powered by Anthropic Claude) spans every module with 50+ use cases, grounded in your live inventory, billing and tickets.

02

Key concepts

Control Plane

The control plane is the central layer that reads and acts on every connected environment. It stores a normalised model of all assets, enforces access policies, routes provisioning requests, and holds the full audit trail. It never stores cloud credentials directly — connector tokens are encrypted at rest and scoped to the minimum required permissions.

Modules

The platform core is organised into nine capability families — Management & Delivery (Cloud Connectors, Business Connectors, Partner Connectors, Service Catalog, Landing Zone Builder), Whalenomics · FinOps, Security & Identity (Identity & Access, Security), Governance & Audit (Cloud Audit & Evidence), Whale AI — incl. offline, Migration & Discovery (Inventory & Discovery, Migration Engine), Observability & ITSM (Observe, ITSM), Tenancy & Monetization, and Sovereign Operations — 54 capabilities in all. Modules are gated by edition — see the Editions page for the capability matrix.

Connectors

Connectors link cloud accounts and on-premises environments to the control plane. Each connector uses a least-privilege read (and optionally write) role. For public clouds the connection is direct over HTTPS. For on-premises environments the Edge Agent — installed inside the network — connects outbound-only over HTTPS, so no inbound firewall changes are required.

Edge Agent

A lightweight agent deployed inside your data centre or private cloud (VMware, Nutanix, Hyper-V). It polls the BlueWhale control plane over outbound HTTPS, executes lifecycle actions locally, and proxies telemetry. Credentials never leave the on-premises network.

Whale AI

The AI layer powered by Anthropic Claude. It is horizontal — it runs across every module with 50+ use cases. Three tiers: Spark (fast, entry-level — inventory Q&A, sizing), Tide (deep reasoning — migration planning, IaC drafting), Abyss (multi-step agents for complex cross-module workflows). Sovereign deployments use in-region LLMs only with no call-home.

03

Platform architecture

The platform is a multi-layer architecture: a data ingestion layer (connectors + Edge Agent), a normalisation and storage layer (asset graph, audit log), the AI inference layer (Whale AI), and a presentation layer (web UI + REST API + webhooks).

Note: The control plane itself can be hosted as SaaS (multi-tenant, Singapore), BYOC (deployed inside your own AWS / Azure / GCP account), or fully air-gapped Sovereign (on-premises, no call-home, in-region AI models).
  • Connector layer — polling adapters for 6 public clouds + Edge Agent for on-prem
  • Asset graph — normalised resource model across all environments, updated on each poll cycle
  • Policy engine — RBAC, approval workflows, governance guardrails
  • AI inference — Whale AI Spark / Tide / Abyss, with prompt caching and inline drawers
  • REST API + webhooks — all platform operations are API-first
  • Web UI — single unified interface across all modules
04

Deployment models

SaaS

Fully managed, multi-tenant from Singapore. Fastest time-to-value — no infrastructure overhead. Available on Standard, Enterprise and Telco & Datacenter editions.

BYOC

Bring Your Own Cloud — the control plane runs inside your AWS, Azure, or GCP account. You own the infrastructure; BlueWhale manages the software.

Sovereign

Air-gapped, on-premises deployment with in-region AI models and no call-home. Built for governments, defence, and regulated public sector.

On-premise

Full installation in your data centre, with dedicated support, custom SLAs, and full infrastructure control.

05

Core modules at a glance

  • Inventory & Discovery — live asset map across 6 public clouds + on-prem
  • Cloud Connectors — GA for AWS, Azure, GCP, Oracle, Alibaba, Huawei
  • Business Connectors — two-way ServiceNow & Jira sync, CRM / ERP context (some in beta)
  • Partner Connectors — reseller, MSP & SI partners: licensing, end-customers, consolidated billing
  • Identity & Access — federate 9+ IdPs with auto-provisioning
  • Security — continuous CSPM & vulnerability scanning (CIS · NIST · ISO 27001 · HIPAA)
  • Service Catalog — governed provisioning, AWS live (EC2/S3/RDS/VPC/EFS)
  • ITSM — cloud-ops-native incident, change & problem management
  • Observe — production APM (logs, metrics, traces, SLOs) bundled
  • FinOps — cost visibility, anomaly detection, chargeback (Whale AI use-cases live)
  • Migration Engine — 6R assessment & wave planning (assessment live)
  • Landing Zone Builder — visual designer for AWS Control Tower / Azure CLZ (Beta)
  • Whale AI — horizontal AI layer, 50+ use cases (Spark · Tide · Abyss)
Tip: Module availability is gated by edition. Standard includes Management & Delivery (Inventory, Cloud Connectors, Identity, Service Catalog), Whalenomics essentials, a security baseline with Observe, basic ITSM and Whale AI Spark. Enterprise unlocks all nine capability families; Telco & Datacenter adds Tenancy & Monetization and Government adds Sovereign Operations.
06

Next steps

Ready to connect your first cloud account? Follow the Quick Start guide to spin up your BlueWhale Stack SaaS environment and run your first discovery in minutes.

  • Quick Start — SaaS: connect your first account and run a discovery
  • Cloud Integration: detailed setup for AWS, Azure, GCP and on-prem
  • Identity & Access: federate your IdP and configure RBAC
  • Service Catalog: enable governed provisioning for your teams

Have a question or hit a blocker?

Our support team and account engineers are here to help.

Contact support