How mature is your CI/CD?
A self-assessment across eight areas, from source control to delivery metrics. You get a score per area and concrete recommendations. Your answers never leave your browser.
Choose a length
Answer for one team or service at a time, not for the whole organization.
Quick
16 questions, about 8 minutes. Two questions per area.
Full
37 questions, about 20 minutes. The whole picture.
How it works
- You answer questions about how you build, test, secure and release software, one question at a time.
- You get a score and a maturity level, overall and for each area.
- You get a prioritized list of concrete actions and a plan for the next 30, 60 and 90 days.
Your answers stay with you
Answers are stored only in this browser and are not sent to us. You can start over, and delete them, at any time.
What it covers
- Source control and branching
- Branching strategy, pull requests, code review and branch protection.
- Build and continuous integration
- Build automation, speed, reproducibility, artifacts and failure notifications.
- Testing and quality gates
- Automated tests at each level, tests in the pipeline, quality gates and flaky tests.
- Security in the pipeline
- Secret, dependency and code scanning, image scanning, SBOMs, signed artifacts and pipeline identities.
- Release and deployment
- Deployment automation and strategy, approvals, rollback, feature flags and frequency.
- Environments and infrastructure as code
- Infrastructure as code, environment parity, drift detection and short-lived environments.
- Observability and feedback
- Monitoring after release, alerting, deployment tracking and feeding incidents back into the backlog.
- Governance, flow and culture
- Approvals and automated policy, technical debt, ownership and delivery metrics.