to convey to their customers exactly which CWE-identified weaknesses they claim to be able to locate in software. The
word claim is emphasized since neither the CCR itself nor the CWE Compatibility Program verify or otherwise vet these
statements of coverage. The CWE Effectiveness Program will eventually fulfill this role of verification.
The main goal of the CCR is to facilitate the communication of unambiguous statements of the intention of a tool or