Why I'm Building This

For ten years, I've led engineering teams in large organizations — financial services, insurance, tech — and the same unanswerable question kept coming up: are we actually getting better, or just faster at shipping on shaky foundations?

We had DORA metrics, velocity dashboards, retros, maturity models, consultants with fancy frameworks. But no objective evidence. No way to prove branch protection was enforced, PR reviews were substantive, secrets weren't leaking, or rollbacks were reliable when things broke.

Every "this time we'll do it right" transformation circled back to the same blind spot.

Then AI coding tools hit every team I worked with — cranking output, but amplifying the exact gaps we couldn't measure. Faster code with weak reviews or missing secrets isn't progress — it's risk compounding.

I looked hard for something that answered the question properly. Waydev, LinearB, Pluralsight Flow measure developer throughput — how fast people work, not whether the practices are sound. Vanta and Drata handle compliance evidence but work from questionnaires and policies, not repo reality. DORA tools give you four release metrics. Consultants with maturity models charge $50K for a point-in-time survey.

Nothing gave continuous, evidence-based answers across the full SDLC — without surveys, without manual effort, without a consulting engagement.

So I built one.

Concordance connects read-only to your repos and trackers — GitHub, GitLab, Bitbucket, Linear, Jira — scans metadata from commits, PRs, branches, workflows, and issues, then scores practices across 50 standards in 6 SDLC phases. No surveys. No opinions. Just what your systems actually show.

Bootstrapping it nights and weekends while still full-time. Because the problem is real, persistent, and the right tool didn't exist.

If you lead an engineering team and this resonates — I'd genuinely value you trying it. Free, no credit card, connects in under 2 minutes. I'm looking for people willing to tell me if the scores reflect what they actually see in their teams. That feedback is worth more to me right now than anything else. getconcordance.com