Embold

Here’s a detailed overview of the typical implementation process for Embold software and how long it takes:

Implementation Process

1. Account Setup and Sign-In
Users begin by signing up on Embold using their GitHub, Bitbucket, or GitLab account. This links their Embold account to their version control system, making it easy to import repositories. This step takes less than 5 minutes.

2. Creating an Organization
In Embold, an “organization” is a container for repositories. Users can create multiple organizations to manage different projects. Once an organization is created, Embold automatically imports all repositories linked to the Git account. This setup typically takes 5–10 minutes.

3. Linking Repositories
Repositories are automatically linked when an organization is connected. Users can also manually add more repositories. This step is straightforward and takes 5–10 minutes, depending on the number of repositories.

4. Running the First Scan
Once a repository is linked, Embold initiates a static code analysis scan. This scan detects bugs, code smells, anti-patterns, and structural issues. Scans can be triggered manually or automatically. The first scan usually completes within 5–15 minutes, depending on the size of the codebase.

5. Viewing Results and Insights
After the scan, users can view:

• Code quality scores
• Visual code maps
• Anti-pattern detection
• Recommendations for improvement

These insights are available immediately after the scan completes.

6. CI/CD Integration
For enterprise users, Embold integrates into CI/CD pipelines. This allows automatic scans during pull requests or merges. Setup for CI/CD integration may take 30–60 minutes, depending on the complexity of the pipeline.

7. Custom Configuration (Optional)
Advanced users can configure scan settings using a YAML file (embold.yaml). This allows customization of scan parameters, issue suppression, and language-specific rules. This step is optional and may take 15–30 minutes.

Total Time Estimate

• Basic Setup and First Scan: 20–30 minutes

• Full Integration with CI/CD and Custom Configs: 1–2 hours

Embold is designed for rapid onboarding, especially for teams using Git-based workflows. Its intuitive interface and automation features make it easy to implement without extensive technical support.

Embold is highly customizable, especially for enterprise users. The platform is designed to adapt to different business environments, development workflows, and compliance requirements.

Key Customization Capabilities:

• Custom KPIs: Businesses can define and track project-specific KPIs such as maintainability, reusability, and functionality.

• Issue Suppression: Embold allows suppression of false positives, enabling teams to focus on relevant issues.

• CI/CD Integration: Embold integrates seamlessly with CI/CD pipelines and supports third-party plugins, making it adaptable to various DevOps workflows.

• Task & Issue Management: Teams can create and assign tasks directly from detected issues and link them to systems like Jira.

• Custom Dashboards: Visual dashboards can be tailored to show metrics that matter most to a specific team or department.

• Self-Hosted Deployment: For organizations with strict data governance policies, Embold offers on-premise deployment options.

• Language-Specific Configuration: Users can configure scan settings using embold.yaml files to fine-tune analysis per language or repository.

These features make Embold suitable for industries with complex requirements, such as automotive, aerospace, and finance.

Embold’s pricing is transparent and modular, with no hidden setup or maintenance fees for standard cloud usage.

Pricing Overview:

• Free Cloud Package:
  • Includes 5 users, 5 scans, and up to 50,000 lines of code (LOC).
  • Ideal for small teams or open-source projects.

  • Additional LOC and users can be purchased as needed.

• Premium Cloud Package:
  • Costs €8 per month.
  • Includes 10 users, 100,000 LOC, and unlimited scans.

  • Scalable—users can buy more LOC and seats as needed.

Additional Costs:

• Enterprise Plans:
  • Custom pricing based on team size, deployment type (cloud vs. on-premise), and compliance needs.

  • Includes advanced support, onboarding assistance, and SLA guarantees.

• Support Charges:
  • Basic support is included in all plans.

  • Premium support (e.g., dedicated account manager, training) is available for enterprise customers.

• Maintenance Fees:
  • No separate maintenance fees for cloud users.

  • On-premise deployments may involve infrastructure and IT costs, depending on the organization’s setup.

Embold is designed to be cost-effective for small teams while offering scalability and enterprise-grade features for larger organizations.

Embold provides a range of onboarding and support resources to help new users get started quickly and effectively:

• Interactive Onboarding: When users sign up and connect their repositories, Embold guides them through the setup process with intuitive UI prompts and walkthroughs.

• Documentation Portal: Embold offers a comprehensive documentation site that includes setup guides, feature explanations, and troubleshooting tips.

• Issue Management Integration: Users can create and assign tasks directly from detected issues and link them to platforms like Jira, streamlining team collaboration and training workflows.

• IDE Plugins: Embold provides plugins for IntelliJ IDEA, Visual Studio, and Android Studio, allowing developers to receive real-time feedback and training as they code.

• Issue Suppression and Custom Rules: Developers can suppress false positives and configure scan rules, helping teams learn how to tailor the tool to their specific needs.

• Support Channels: Embold offers ticket-based support and help centers for different product lines (e.g., Embold Health and Embold Code Quality), ensuring users can get assistance when needed.

While there is no mention of live training sessions or webinars, the platform is designed to be self-service with strong documentation and embedded guidance.

Embold takes data security seriously and has implemented several robust measures to protect user information:

• Data Hosting: All data is securely stored in a dedicated data center, with a focus on privacy and compliance. For example, Embold’s code quality platform stores data in Amazon’s Frankfurt data center, ensuring it remains within strict European data protection zones.

• Encryption: All communication between the user’s browser and Embold is encrypted using industry-standard SSL certificates, protecting data in transit.

• On-Premise Deployment: For organizations with strict data governance policies, Embold offers a self-hosted version that can be deployed within the company’s own infrastructure.

• Compliance Certifications: Embold is certified by TÜV SÜD for ISO 26262 and IEC 61508, making it suitable for safety-critical industries like automotive and industrial automation.

• Secure Access Tokens: Embold uses Bearer Tokens for API authentication, ensuring secure access to its services.

• Issue Tracking and Audit Trails: The platform maintains logs and issue histories, which can be useful for compliance audits and internal reviews.

These measures make Embold a secure and compliant solution for both small teams and large enterprises.

Embold follows a frequent and structured release cycle, typically rolling out updates monthly or bi-monthly. These updates include new features, performance enhancements, bug fixes, and UI improvements.

Key Data Points:

• Recent Releases: Embold released versions 1.9.31.1, 1.9.31.2, and 1.9.32.0 within a span of two months, indicating a rapid development and deployment cadence.

• Update Scope: Updates often include:
  • Dashboard performance improvements
  • New visualizations (e.g., trend graphs, component tags)
  • Enhanced repository integration flows
  • Pull request flow enhancements

  • Bulk suppression approval/rejection features

• Deployment Method: Updates are available via Docker-based deployment, and upgrade paths are clearly defined (e.g., from version 1.8.5.0 to 1.9.32.0).

• Release Notes: Embold maintains detailed release notes on its documentation portal, helping users track changes and plan upgrades.

This structured release management ensures that users benefit from continuous innovation while maintaining system stability.

Embold maintains a user-centric data ownership policy, ensuring that users retain control over their content and analysis results.

Data Ownership:

• Users own the data they upload and the results generated from scans.
• Embold does not claim intellectual property rights over user code or analysis outputs.

• For enterprise deployments, especially self-hosted setups, organizations have full control over their data storage and access.

Data Portability:

• Embold allows users to export scan results, logs, and reports in standard formats.
• Users can download .tar files containing complete scan logs, including UI, Corona, and GWS components.
• The platform supports integration with external tools like Jira, enabling seamless data flow between systems.

• Embold’s infrastructure supports secure data migration, especially for enterprise clients transitioning between cloud and on-premise environments.

Security and Privacy:

• All data is encrypted using SSL certificates during transmission.
• Data is stored in secure data centers, such as Amazon’s Frankfurt facility for European users.

• Embold complies with ISO 26262 and IEC 61508, ensuring high standards for data protection in safety-critical industries.

In summary, Embold provides robust mechanisms for data ownership, portability, and security, making it a reliable choice for organizations with strict compliance and governance needs.

Embold offers flexible options for scaling both up and down based on your organization’s needs:

• Scaling Up: Users can upgrade their subscription by adding more user seats or increasing the number of lines of code (LOC) analyzed. This is done through the account dashboard, where you can modify your plan and proceed to checkout. Upgrades can include moving from a basic plan to premium or enterprise tiers, which unlock additional features like unlimited scans, advanced analytics, and self-hosted deployment.
• Scaling Down: You can downgrade your subscription at the end of your current contract term. For example, if you're on a premium plan, your account will automatically revert to the free plan upon expiry unless renewed. Downgrading during an active contract is restricted unless explicitly allowed by Embold’s terms.
• Contract Flexibility: While you can upgrade your plan mid-term, changing the contract duration (e.g., from monthly to annual) is typically not allowed until the current term ends.

This flexibility makes Embold suitable for startups, growing teams, and large enterprises alike.

Embold’s contract policies are designed to be transparent and user-friendly:

• Renewal: Contracts can be set to auto-renew monthly or annually. Users can modify renewal settings from their dashboard. Renewal is seamless unless manually disabled.
• Cancellation: You can cancel your contract within 48 hours of purchase for a full refund. After this grace period, cancellation is allowed but may not include a refund for the remaining term. Cancellation must be initiated via the platform or through support channels.
• Modifications: You can upgrade your contract mid-term, but the new contract must exceed the value of the current one. Downgrades typically take effect after the current term ends.

These terms ensure that users have control over their subscriptions while maintaining contractual clarity.

Embold supports a wide range of industry-standard compliance protocols, especially for code quality and security:

• ISO 26262: A functional safety standard for automotive systems, making Embold suitable for safety-critical applications.
• IEC 61508: Covers electrical/electronic/programmable systems, ensuring reliability and safety.
• OWASP Top 10: Embold detects vulnerabilities aligned with OWASP’s most critical web application security risks.
• CWE (Common Weakness Enumeration): Embold identifies and categorizes software weaknesses using CWE standards.
• CERT Secure Coding Standards: Supports secure coding practices for C and C++.
• MISRA C/C++: Ensures compliance with coding standards used in automotive and embedded systems.

These certifications and standards make Embold a trusted solution for industries requiring high levels of security, reliability, and regulatory compliance.