Skip to main content

Welcome to Scapius

Scapius is an Enterprise Architecture as Code framework designed to model, analyze, and visualize complex digital ecosystems using a declarative Domain-Specific Language (.ea) strictly aligned with The Open Group ArchiMate and TOGAF standards.

workspace corporate_it "Enterprise IT Landscape" {
    layer "Application Layer" {
        system payment_hub "Payment Gateway" {
            description "Central payment routing & settlement engine"
            tier "Tier-1"
            internet_facing true

            app payment_api "Payment API" {
                technology "ASP.NET Core"
                api_type "REST"
            }
        }
    }
}

Why Architecture as Code?​

Traditional Enterprise Architecture tools often trap architectural knowledge in proprietary repositories or static drawing tools. Scapius treats architecture models like software source code:

  • Version Controlled: Store architecture files (.ea) in Git alongside software codebases.
  • Diffable & Reviewable: Track architectural changes, deprecations, and migrations via standard Pull Requests.
  • ArchiMate & Open Group Aligned: Standardized vocabulary across Business, Application, Technology, Strategy, and Motivation/Security layers.
  • Syntactically & Semantically Validated: Real-time error detection for illegal relationships, orphaned capabilities, duplicate IDs, and governance violations.
  • Decoupled Styling: Visual styles, icons, shapes, and CSS classes are defined in declarative style rules with predicate selectors rather than hardcoded on domain entities.

Core Capabilities​

  1. 21 First-Class Architectural Entities: Model capabilities, value streams, software systems, runtime infrastructure, threat landscapes, AI agents, and governance policies.

  2. 16 Strict Relationship Verbs: Verbs like composed_of, realizes, flows_to, targets, and mitigates map directly to ArchiMate relations (Composition, Realization, Flow, Access, etc.).

  3. Zero-Dependency Docker Execution: Validate and compile models in CI/CD or local terminals using the official Scapius Docker image.

  4. Native Security & Threat Modeling: Native primitives for STRIDE threat modeling, control effectiveness, and compliance policies (PCI-DSS, SOC 2, ISO 27001).

Next Steps​