Coverity Policy Manager

Development
Metrics

Policy Manager allows you to define and enforce a consistent standard for code quality, security and testing across your organization and supply chain. Select the development metrics and thresholds that align to your objectives with flexibility to modify them throughout the course of your project.

Sample out of the box metrics include:

Create customized metrics and import third party data to monitor and assess your adherence to multiple types of policies.

Common Usage
Scenarios

Development Adoption

Monitor the adoption of development testing throughout your organization and its impact on quality, security and testing over time. Get visibility into whether issues are being addressed in a timely manner and manage technical debt. Assess your return on investment. Uncover potential areas of risk or skills gaps within your teams.

Time to Market

Get visibility into critical issues, either newly identified or still outstanding, as a project nears its release deadline. Drill down into development hot spots and allocate resources appropriately to fix open issues and avoid costly schedule delays.

Supply Chain Management

Establish clear and specific code quality and security acceptance criteria with your supply chain partners. Validate third-party code meets your defined criteria by notifying suppliers of policy violations which must be addressed before acceptance or mandating that suppliers build development testing into their process to self-certify code prior to submission.

Compliance
Templates

FDA Compliance

Out-of-the-box policy management and reporting enables compliance with FDA guidelines for software validation. Pinpoint quality, safety and security risks in medical device software as code is tested and identify improvement areas. Provide a snapshot of compliance posture to include in FDA Premarket Approval (PMA) submission or use for ongoing software validation. Follow regulatory guidelines while continuously improving overall software quality throughout the software development lifecycle.

DISA STIG Compliance

Out-of-the-box policy management and reporting enables compliance with the Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG). Pinpoint quality, safety and security risks as code is tested and provide a snapshot of compliance posture aligned to the DISA guidelines throughout the software development lifecycle.

Get
Started