diff --git a/policy/admin.py b/policy/admin.py
index 645f3b9e..ba9d52a3 100755
--- a/policy/admin.py
+++ b/policy/admin.py
@@ -23,9 +23,12 @@
 from dje.admin import dejacode_site
 from dje.list_display import AsColored
 from policy.forms import AssociatedPolicyForm
+from policy.forms import PolicyRuleForm
 from policy.forms import UsagePolicyForm
 from policy.models import AssociatedPolicy
+from policy.models import PolicyRule
 from policy.models import UsagePolicy
+from policy.rules import RULE_REGISTRY
 
 License = apps.get_model("license_library", "license")
 
@@ -159,3 +162,37 @@ def download_license_dump_view(self, request):
         response["Content-Disposition"] = 'attachment; filename="license_policies.yml"'
 
         return response
+
+
+@admin.register(PolicyRule, site=dejacode_site)
+class PolicyRuleAdmin(DataspacedAdmin):
+    form = PolicyRuleForm
+    list_display = ("name", "rule_type", "threshold", "is_active", "get_dataspace")
+    list_filter = DataspacedAdmin.list_filter + ("rule_type", "is_active")
+    readonly_fields = DataspacedAdmin.readonly_fields + ("parameters_schema_hint",)
+    activity_log = False
+    actions = []
+    actions_to_remove = ["copy_to", "compare_with"]
+    email_notification_on = ()
+
+    short_description = (
+        "You can define Policy Rules that automatically detect compliance violations "
+        "across your products and trigger notifications."
+    )
+
+    long_description = linebreaksbr(
+        "A Policy Rule defines a type of automated check to run against your products. "
+        "When the number of detected issues exceeds the configured threshold, a "
+        "ProductPolicyViolation is recorded.\n"
+        "Set the rule type to match a registered evaluation handler and configure the "
+        "threshold (0 means any violation triggers the rule). "
+    )
+
+    def parameters_schema_hint(self, obj):
+        handler = RULE_REGISTRY.get(obj.rule_type)
+        if not handler or not handler.parameters_schema:
+            return "No parameters supported for this rule type."
+        lines = [f"{key}: {desc}" for key, desc in handler.parameters_schema.items()]
+        return mark_safe("<br>".join(lines))
+
+    parameters_schema_hint.short_description = "Supported parameters"
diff --git a/policy/engine.py b/policy/engine.py
new file mode 100644
index 00000000..2e623848
--- /dev/null
+++ b/policy/engine.py
@@ -0,0 +1,58 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# DejaCode is a trademark of nexB Inc.
+# SPDX-License-Identifier: AGPL-3.0-only
+# See https://github.com/aboutcode-org/dejacode for support or download.
+# See https://aboutcode.org for more information about AboutCode FOSS projects.
+#
+
+from django.utils import timezone
+
+from policy.models import PolicyRule
+from policy.rules import RULE_REGISTRY
+from product_portfolio.models import ProductPolicyViolation
+
+
+def evaluate_rule(policy_rule, product):
+    """
+    Evaluate a single PolicyRule against a product, create or update the
+    ProductPolicyViolation record.
+    Returns the ProductPolicyViolation instance, or None if no violation exists.
+    """
+    rule_handler = RULE_REGISTRY.get(policy_rule.rule_type)
+    if not rule_handler:
+        return
+
+    violation_count = rule_handler.count_violations(policy_rule, product)
+
+    lookup = {"policy_rule": policy_rule, "product": product, "resolved": False}
+
+    if violation_count > 0:
+        violation, created = ProductPolicyViolation.objects.get_or_create(
+            **lookup,
+            defaults={"dataspace": policy_rule.dataspace, "violation_count": violation_count},
+        )
+        if not created:
+            violation.violation_count = violation_count
+            violation.save()
+        return violation
+    else:
+        ProductPolicyViolation.objects.filter(**lookup).update(
+            resolved=True,
+            resolved_date=timezone.now(),
+        )
+        return
+
+
+def evaluate_rules(product):
+    """
+    Evaluate all active PolicyRules for the given product.
+    Returns the list of active ProductPolicyViolation instances.
+    """
+    violations = []
+    for policy_rule in PolicyRule.objects.scope(product.dataspace).active():
+        violation = evaluate_rule(policy_rule, product)
+        if violation:
+            violations.append(violation)
+
+    return violations
diff --git a/policy/forms.py b/policy/forms.py
index 4049d4b3..562629b1 100644
--- a/policy/forms.py
+++ b/policy/forms.py
@@ -11,6 +11,8 @@
 
 from dje.forms import ColorCodeFormMixin
 from dje.forms import DataspacedAdminForm
+from policy.models import PolicyRule
+from policy.rules import RULE_REGISTRY
 
 
 class UsagePolicyForm(ColorCodeFormMixin, DataspacedAdminForm):
@@ -92,3 +94,21 @@ def get_ct(app_label, model):
             self.add_error("to_policy", msg)
 
         return cleaned_data
+
+
+class PolicyRuleForm(DataspacedAdminForm):
+    class Meta:
+        model = PolicyRule
+        fields = "__all__"
+
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+        self.fields["rule_type"].widget = forms.Select(
+            choices=[(key, handler.label) for key, handler in RULE_REGISTRY.items()]
+        )
+
+    def clean_rule_type(self):
+        value = self.cleaned_data["rule_type"]
+        if value not in RULE_REGISTRY:
+            raise forms.ValidationError(f"Unknown rule type: {value}")
+        return value
diff --git a/policy/migrations/0003_policyrule.py b/policy/migrations/0003_policyrule.py
new file mode 100644
index 00000000..41558ab5
--- /dev/null
+++ b/policy/migrations/0003_policyrule.py
@@ -0,0 +1,35 @@
+# Generated by Django 6.0.6 on 2026-07-08 08:39
+
+import django.db.models.deletion
+import dje.models
+import uuid
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('dje', '0015_alter_dataspaceconfiguration_purldb_api_key_and_more'),
+        ('policy', '0002_initial'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='PolicyRule',
+            fields=[
+                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('uuid', models.UUIDField(default=uuid.uuid4, editable=False, verbose_name='UUID')),
+                ('name', models.CharField(help_text='Descriptive name for this policy rule.', max_length=100)),
+                ('rule_type', models.CharField(help_text='The type of evaluation performed by this rule.', max_length=50)),
+                ('threshold', models.PositiveIntegerField(default=0, help_text='Minimum number of violations required to trigger this rule (0 means any).')),
+                ('is_active', models.BooleanField(default=True, help_text='Only active rules are evaluated.')),
+                ('parameters', models.JSONField(blank=True, default=dict, help_text='Optional rule-specific parameters as a JSON object. Supported keys depend on the chosen rule type.')),
+                ('dataspace', models.ForeignKey(editable=False, help_text='A Dataspace is an independent, exclusive set of DejaCode data, which can be either nexB master reference data or installation-specific data.', on_delete=django.db.models.deletion.PROTECT, to='dje.dataspace')),
+            ],
+            options={
+                'ordering': ['name'],
+                'unique_together': {('dataspace', 'name'), ('dataspace', 'uuid')},
+            },
+            bases=(dje.models.DataspaceForeignKeyValidationMixin, models.Model),
+        ),
+    ]
diff --git a/policy/models.py b/policy/models.py
index cc731855..36a433a9 100755
--- a/policy/models.py
+++ b/policy/models.py
@@ -20,6 +20,7 @@
 from dje.models import DataspacedModel
 from dje.models import DataspacedQuerySet
 from dje.models import colored_icon_mixin_factory
+from policy.rules import RULE_REGISTRY
 
 ColoredIconMixin = colored_icon_mixin_factory(
     verbose_name="usage policy",
@@ -244,3 +245,83 @@ def save(self, *args, **kwargs):
         if self.from_policy.content_type == self.to_policy.content_type:
             raise AssertionError
         super().save(*args, **kwargs)
+
+
+class PolicyRuleQuerySet(DataspacedQuerySet):
+    def active(self):
+        return self.filter(is_active=True)
+
+
+class PolicyRule(DataspacedModel):
+    name = models.CharField(
+        max_length=100,
+        help_text=_("Descriptive name for this policy rule."),
+    )
+    rule_type = models.CharField(
+        max_length=50,
+        help_text=_("The type of evaluation performed by this rule."),
+    )
+    threshold = models.PositiveIntegerField(
+        default=0,
+        help_text=_("Minimum number of violations required to trigger this rule (0 means any)."),
+    )
+    is_active = models.BooleanField(
+        default=True,
+        help_text=_("Only active rules are evaluated."),
+    )
+    parameters = models.JSONField(
+        blank=True,
+        default=dict,
+        help_text=_(
+            "Optional rule-specific parameters as a JSON object. "
+            "Supported keys depend on the chosen rule type."
+        ),
+    )
+
+    objects = PolicyRuleQuerySet.as_manager()
+
+    class Meta:
+        unique_together = (("dataspace", "uuid"), ("dataspace", "name"))
+        ordering = ["name"]
+
+    def __str__(self):
+        return self.name
+
+    @property
+    def rule_label(self):
+        handler = RULE_REGISTRY.get(self.rule_type)
+        return handler.label if handler else self.rule_type
+
+    @property
+    def rule_description(self):
+        handler = RULE_REGISTRY.get(self.rule_type)
+        return handler.description if handler else ""
+
+
+class AbstractPolicyViolation(models.Model):
+    """Shared fields for all concrete policy violation models. No DB table."""
+
+    violation_count = models.PositiveIntegerField(
+        default=0,
+        help_text=_("Number of objects currently violating the rule."),
+    )
+    detected_date = models.DateTimeField(
+        auto_now_add=True,
+        help_text=_("The date and time when this violation was first detected."),
+    )
+    last_checked = models.DateTimeField(
+        auto_now=True,
+        help_text=_("The date and time of the last evaluation."),
+    )
+    resolved = models.BooleanField(
+        default=False,
+        help_text=_("Indicates whether this violation has been resolved."),
+    )
+    resolved_date = models.DateTimeField(
+        null=True,
+        blank=True,
+        help_text=_("The date and time when this violation was resolved."),
+    )
+
+    class Meta:
+        abstract = True
diff --git a/policy/rules.py b/policy/rules.py
new file mode 100644
index 00000000..1dd0e4d3
--- /dev/null
+++ b/policy/rules.py
@@ -0,0 +1,97 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# DejaCode is a trademark of nexB Inc.
+# SPDX-License-Identifier: AGPL-3.0-only
+# See https://github.com/aboutcode-org/dejacode for support or download.
+# See https://aboutcode.org for more information about AboutCode FOSS projects.
+#
+
+from django.apps import apps
+
+
+class BaseRule:
+    """Base class for policy rule handlers."""
+
+    rule_type = None
+    label = None
+    description = None
+    parameters_schema = {}
+
+    def count_violations(self, policy_rule, product):
+        """Count objects violating the rule for the given product."""
+        raise NotImplementedError
+
+
+class PackageBaseRule(BaseRule):
+    """Base for rules that count packages matching a fixed filter within a product."""
+
+    package_filter = {}
+
+    def count_violations(self, policy_rule, product):
+        Package = apps.get_model("component_catalog", "package")
+
+        count = Package.objects.filter(
+            productpackages__product=product,
+            **self.package_filter,
+        ).count()
+
+        return count if count > policy_rule.threshold else 0
+
+
+class LicensePolicyErrorRule(PackageBaseRule):
+    rule_type = "license_policy_error"
+    label = "License Policy Error"
+    description = (
+        "Detects packages assigned a usage policy with a compliance alert level of 'error'."
+    )
+    package_filter = {"usage_policy__compliance_alert": "error"}
+
+
+class LicensePolicyWarningRule(PackageBaseRule):
+    rule_type = "license_policy_warning"
+    label = "License Policy Warning"
+    description = (
+        "Detects packages assigned a usage policy with a compliance alert level of 'warning'."
+    )
+    package_filter = {"usage_policy__compliance_alert": "warning"}
+
+
+class LicenseCoverageGapRule(PackageBaseRule):
+    rule_type = "license_coverage_gap"
+    label = "License Coverage Gap"
+    description = (
+        "Detects packages with no license expression, indicating a gap in license coverage."
+    )
+    package_filter = {"license_expression": ""}
+
+
+class VulnerabilityDetectedRule(BaseRule):
+    rule_type = "vulnerability_detected"
+    label = "Vulnerability Detected"
+    description = "Detects packages with at least one known vulnerability (non-null risk score)."
+    parameters_schema = {
+        "min_risk_score": "Minimum risk score (0.0-10.0). Default: any vulnerability.",
+    }
+
+    def count_violations(self, policy_rule, product):
+        Package = apps.get_model("component_catalog", "package")
+
+        packages = Package.objects.filter(
+            productpackages__product=product,
+            risk_score__isnull=False,
+        )
+
+        min_risk_score = policy_rule.parameters.get("min_risk_score")
+        if min_risk_score is not None:
+            packages = packages.filter(risk_score__gte=min_risk_score)
+
+        count = packages.count()
+        return count if count > policy_rule.threshold else 0
+
+
+RULE_REGISTRY = {
+    LicensePolicyErrorRule.rule_type: LicensePolicyErrorRule(),
+    LicensePolicyWarningRule.rule_type: LicensePolicyWarningRule(),
+    LicenseCoverageGapRule.rule_type: LicenseCoverageGapRule(),
+    VulnerabilityDetectedRule.rule_type: VulnerabilityDetectedRule(),
+}
diff --git a/policy/tasks.py b/policy/tasks.py
new file mode 100644
index 00000000..b6523449
--- /dev/null
+++ b/policy/tasks.py
@@ -0,0 +1,39 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# DejaCode is a trademark of nexB Inc.
+# SPDX-License-Identifier: AGPL-3.0-only
+# See https://github.com/aboutcode-org/dejacode for support or download.
+# See https://aboutcode.org for more information about AboutCode FOSS projects.
+#
+
+from django.apps import apps
+
+from django_rq import job
+
+from policy.engine import evaluate_rules
+
+
+@job
+def evaluate_product_rules_task(product_uuid):
+    """Evaluate all active PolicyRules for the given product."""
+    Product = apps.get_model("product_portfolio", "product")
+
+    try:
+        product = Product.objects.select_related("dataspace").get(uuid=product_uuid)
+    except Product.DoesNotExist:
+        return
+
+    evaluate_rules(product)
+
+
+@job
+def evaluate_all_products_rules_task(include_locked=False):
+    """Enqueue evaluate_product_rules_task for every product, skipping locked ones by default."""
+    Product = apps.get_model("product_portfolio", "product")
+
+    products = Product.objects.select_related("dataspace")
+    if not include_locked:
+        products = products.exclude_locked()
+
+    for product in products:
+        evaluate_product_rules_task.delay(product_uuid=product.uuid)
diff --git a/product_portfolio/admin.py b/product_portfolio/admin.py
index c9624c07..7e9a9f6f 100644
--- a/product_portfolio/admin.py
+++ b/product_portfolio/admin.py
@@ -384,7 +384,7 @@ class ProductAdmin(
         ProductPackageInline,
     ]
     form = ProductAdminForm
-    actions = []
+    actions = ["evaluate_policy_rules"]
     actions_to_remove = ["copy_to", "compare_with", "delete_selected"]
     navigation_buttons = True
     activity_log = False
@@ -395,6 +395,16 @@ class ProductAdmin(
     awesomplete_data = {"primary_language": PROGRAMMING_LANGUAGES}
     readonly_fields = DataspacedAdmin.readonly_fields + ("get_feature_datalist",)
 
+    def evaluate_policy_rules(self, request, queryset):
+        from policy.tasks import evaluate_product_rules_task
+
+        count = queryset.count()
+        for product in queryset:
+            evaluate_product_rules_task.delay(product_uuid=product.uuid)
+        self.message_user(request, f"Policy rules evaluation enqueued for {count} product(s).")
+
+    evaluate_policy_rules.short_description = _("Evaluate policy rules")
+
     def get_feature_datalist(self, obj):
         if obj.pk:
             return obj.get_feature_datalist()
diff --git a/product_portfolio/filters.py b/product_portfolio/filters.py
index 98f6f369..846d6d8b 100644
--- a/product_portfolio/filters.py
+++ b/product_portfolio/filters.py
@@ -36,6 +36,7 @@
 from product_portfolio.models import ProductComponent
 from product_portfolio.models import ProductDependency
 from product_portfolio.models import ProductPackage
+from product_portfolio.models import ProductPolicyViolation
 from product_portfolio.models import ProductStatus
 from vulnerabilities.filters import ScoreRangeFilter
 from vulnerabilities.models import RISK_SCORE_RANGES
@@ -149,6 +150,10 @@ class ProductFilterSet(DataspacedFilterSet):
         label=_("License issues"),
         method="filter_license_compliance_issues",
     )
+    policy_violations = django_filters.BooleanFilter(
+        label=_("Policy violations"),
+        method="filter_policy_violations",
+    )
 
     class Meta:
         model = Product
@@ -189,6 +194,16 @@ def filter_license_compliance_issues(self, queryset, name, value):
         condition = Exists(has_alert)
         return queryset.filter(condition if value else ~condition)
 
+    def filter_policy_violations(self, queryset, name, value):
+        if value is None:
+            return queryset
+        has_violation = ProductPolicyViolation.objects.filter(
+            product_id=OuterRef("pk"),
+            resolved=False,
+        )
+        condition = Exists(has_violation)
+        return queryset.filter(condition if value else ~condition)
+
 
 class BaseProductRelationFilterSet(DataspacedFilterSet):
     field_name_prefix = None
diff --git a/product_portfolio/migrations/0018_productpolicyviolation.py b/product_portfolio/migrations/0018_productpolicyviolation.py
new file mode 100644
index 00000000..2558daaa
--- /dev/null
+++ b/product_portfolio/migrations/0018_productpolicyviolation.py
@@ -0,0 +1,38 @@
+# Generated by Django 6.0.6 on 2026-07-08 08:39
+
+import django.db.models.deletion
+import dje.models
+import uuid
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('dje', '0015_alter_dataspaceconfiguration_purldb_api_key_and_more'),
+        ('policy', '0003_policyrule'),
+        ('product_portfolio', '0017_scancodeproject_import_options'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='ProductPolicyViolation',
+            fields=[
+                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('uuid', models.UUIDField(default=uuid.uuid4, editable=False, verbose_name='UUID')),
+                ('violation_count', models.PositiveIntegerField(default=0, help_text='Number of objects currently violating the rule.')),
+                ('detected_date', models.DateTimeField(auto_now_add=True, help_text='The date and time when this violation was first detected.')),
+                ('last_checked', models.DateTimeField(auto_now=True, help_text='The date and time of the last evaluation.')),
+                ('resolved', models.BooleanField(default=False, help_text='Indicates whether this violation has been resolved.')),
+                ('resolved_date', models.DateTimeField(blank=True, help_text='The date and time when this violation was resolved.', null=True)),
+                ('dataspace', models.ForeignKey(editable=False, help_text='A Dataspace is an independent, exclusive set of DejaCode data, which can be either nexB master reference data or installation-specific data.', on_delete=django.db.models.deletion.PROTECT, to='dje.dataspace')),
+                ('policy_rule', models.ForeignKey(help_text='The policy rule that triggered this violation.', on_delete=django.db.models.deletion.CASCADE, related_name='product_violations', to='policy.policyrule')),
+                ('product', models.ForeignKey(help_text='The product in the context of which this violation was detected.', on_delete=django.db.models.deletion.CASCADE, related_name='policy_violations', to='product_portfolio.product')),
+            ],
+            options={
+                'ordering': ['-detected_date'],
+                'unique_together': {('dataspace', 'uuid'), ('policy_rule', 'product')},
+            },
+            bases=(dje.models.DataspaceForeignKeyValidationMixin, models.Model),
+        ),
+    ]
diff --git a/product_portfolio/models.py b/product_portfolio/models.py
index 9fb8e6c9..211f3d32 100644
--- a/product_portfolio/models.py
+++ b/product_portfolio/models.py
@@ -24,6 +24,7 @@
 from django.db.models import Max
 from django.db.models import OuterRef
 from django.db.models import Q
+from django.db.models import Subquery
 from django.db.models import Value
 from django.db.models import When
 from django.db.models.functions import Coalesce
@@ -56,6 +57,7 @@
 from dje.validators import generic_uri_validator
 from dje.validators import validate_url_segment
 from dje.validators import validate_version
+from policy.models import AbstractPolicyViolation
 from vulnerabilities.fetch import fetch_for_packages
 from vulnerabilities.models import AffectedByVulnerabilityMixin
 from vulnerabilities.models import AffectedByVulnerabilityRelationship
@@ -139,6 +141,9 @@ class Meta(BaseStatusMixin.Meta):
 
 
 class ProductQuerySet(DataspacedQuerySet):
+    def exclude_locked(self):
+        return self.exclude(configuration_status__is_locked=True)
+
     def with_risk_threshold(self):
         return self.annotate(
             risk_threshold=Coalesce(
@@ -240,6 +245,15 @@ def with_has_vulnerable_packages(self):
             has_vulnerable_packages=Exists(vulnerable_productpackage_qs),
         )
 
+    def with_policy_violation_count(self):
+        subquery = ProductPolicyViolation.objects.filter(
+            product=OuterRef("pk"),
+            resolved=False,
+        ).values("product").annotate(violation_count=models.Count("id")).values("violation_count")
+        return self.annotate(
+            policy_violation_count=Subquery(subquery, output_field=models.IntegerField()),
+        )
+
 
 class ProductSecuredManager(DataspacedManager):
     """
@@ -286,7 +300,7 @@ def get_queryset(
         ).scope(user.dataspace)
 
         if exclude_locked:
-            queryset = queryset.exclude(configuration_status__is_locked=True)
+            queryset = queryset.exclude_locked()
 
         if include_inactive:
             return queryset
@@ -422,6 +436,10 @@ def save(self, *args, **kwargs):
         if self.has_changed("configuration_status_id"):
             self.actions_on_status_change()
 
+        from policy.tasks import evaluate_product_rules_task
+
+        evaluate_product_rules_task.delay(product_uuid=self.uuid)
+
     def get_attribution_url(self):
         return self.get_url("attribution")
 
@@ -1901,3 +1919,34 @@ def save(self, *args, **kwargs):
                     "The 'for_package' cannot be the same as 'resolved_to_package'."
                 )
         super().save(*args, **kwargs)
+
+
+class ProductPolicyViolationQuerySet(ProductSecuredQuerySet):
+    def unresolved(self):
+        return self.filter(resolved=False)
+
+
+class ProductPolicyViolation(DataspacedModel, AbstractPolicyViolation):
+    """Concrete policy violation scoped to a product."""
+
+    product = models.ForeignKey(
+        to="product_portfolio.Product",
+        on_delete=models.CASCADE,
+        related_name="policy_violations",
+        help_text=_("The product in the context of which this violation was detected."),
+    )
+    policy_rule = models.ForeignKey(
+        to="policy.PolicyRule",
+        on_delete=models.CASCADE,
+        related_name="product_violations",
+        help_text=_("The policy rule that triggered this violation."),
+    )
+
+    objects = DataspacedManager.from_queryset(ProductPolicyViolationQuerySet)()
+
+    class Meta:
+        unique_together = (("dataspace", "uuid"), ("policy_rule", "product"))
+        ordering = ["-detected_date"]
+
+    def __str__(self):
+        return f"{self.policy_rule} / {self.product}: {self.violation_count} violation(s)"
diff --git a/product_portfolio/templates/product_portfolio/compliance/compliance_dashboard.html b/product_portfolio/templates/product_portfolio/compliance/compliance_dashboard.html
index bd258e85..77a99961 100644
--- a/product_portfolio/templates/product_portfolio/compliance/compliance_dashboard.html
+++ b/product_portfolio/templates/product_portfolio/compliance/compliance_dashboard.html
@@ -68,7 +68,7 @@ <h1 class="h3 mb-0">
     </div>
     <div class="col-6 col-md-3">
       <div class="bg-body-secondary rounded-3 p-3">
-        <div class="small text-body-secondary mb-1">{% trans "License issues" %}</div>
+        <div class="small text-body-secondary mb-1">{% trans "License compliance" %}</div>
         {% if products_with_license_issues %}
           <a href="?license_compliance_issues=true" class="fs-4 fw-medium lh-sm text-danger">
             {{ products_with_license_issues }}
@@ -80,28 +80,13 @@ <h1 class="h3 mb-0">
         {% endif %}
         <div class="text-body-tertiary fs-xs mt-1">
           {% if products_with_license_issues %}
-            {% trans "products with policy violations" %}
+            {% trans "products with license compliance alerts" %}
           {% else %}
             {% trans "All products within policy" %}
           {% endif %}
         </div>
       </div>
     </div>
-    <div class="col-6 col-md-3">
-      <div class="bg-body-secondary rounded-3 p-3">
-        <div class="small text-body-secondary mb-1">{% trans "Security issues" %}</div>
-        <div class="fs-4 fw-medium lh-sm {% if products_with_critical_or_high %}text-danger{% elif products_with_vulnerabilities %}text-warning-orange{% else %}text-success{% endif %}">
-          {{ products_with_critical_or_high }}
-        </div>
-        <div class="text-body-tertiary fs-xs mt-1">
-          {% if products_with_critical_or_high %}
-            {% trans "products with critical/high vulnerabilities" %}
-          {% else %}
-            {% trans "No critical or high vulnerabilities" %}
-          {% endif %}
-        </div>
-      </div>
-    </div>
     <div class="col-6 col-md-3">
       <div class="bg-body-secondary rounded-3 p-3">
         <div class="small text-body-secondary mb-1">{% trans "Total vulnerabilities" %}</div>
@@ -119,6 +104,27 @@ <h1 class="h3 mb-0">
         </div>
       </div>
     </div>
+    <div class="col-6 col-md-3">
+      <div class="bg-body-secondary rounded-3 p-3">
+        <div class="small text-body-secondary mb-1">{% trans "Policy violations" %}</div>
+        {% if products_with_policy_violations %}
+          <a href="?policy_violations=true" class="fs-4 fw-medium lh-sm text-danger">
+            {{ products_with_policy_violations }}
+          </a>
+        {% else %}
+          <div class="fs-4 fw-medium lh-sm text-success">
+            {{ products_with_policy_violations }}
+          </div>
+        {% endif %}
+        <div class="text-body-tertiary fs-xs mt-1">
+          {% if products_with_policy_violations %}
+            {% trans "products with active rule violations" %}
+          {% else %}
+            {% trans "No active policy violations" %}
+          {% endif %}
+        </div>
+      </div>
+    </div>
   </div>
 
   <div class="border rounded-3 p-3 pt-2 mb-3">
@@ -128,8 +134,8 @@ <h1 class="h3 mb-0">
           <th class="fw-medium">{% trans "Product" %}</th>
           <th class="fw-medium text-end">{% trans "Packages" %}</th>
           <th class="fw-medium text-end">{% trans "License compliance" %}</th>
-          <th class="fw-medium text-end">{% trans "Security compliance" %}</th>
           <th class="fw-medium text-end">{% trans "Vulnerabilities" %}</th>
+          <th class="fw-medium text-end">{% trans "Policy violations" %}</th>
         </tr>
       </thead>
       <tbody>
@@ -161,19 +167,6 @@ <h1 class="h3 mb-0">
                 <a href="{{ product_url }}#licenses" class="badge bg-success-subtle text-success-emphasis">{% trans "OK" %}</a>
               {% endif %}
             </td>
-            <td class="text-end">
-              {% if product.max_risk_level == "critical" %}
-                <span class="badge bg-danger-subtle text-danger-emphasis">{% trans "Critical" %}</span>
-              {% elif product.max_risk_level == "high" %}
-                <span class="badge bg-warning-orange-subtle text-warning-orange">{% trans "High" %}</span>
-              {% elif product.max_risk_level == "medium" %}
-                <span class="badge bg-warning-subtle text-warning-emphasis">{% trans "Medium" %}</span>
-              {% elif product.max_risk_level == "low" %}
-                <span class="badge bg-info-subtle text-info-emphasis">{% trans "Low" %}</span>
-              {% else %}
-                <span class="badge bg-success-subtle text-success-emphasis">{% trans "OK" %}</span>
-              {% endif %}
-            </td>
             <td class="text-end">
               {% if product.risk_threshold and product.vulnerability_count %}
                 <span class="text-body-tertiary fs-xs" data-bs-toggle="tooltip" title="{% trans 'Risk threshold' %}">
@@ -196,6 +189,15 @@ <h1 class="h3 mb-0">
                 <span class="text-body-tertiary small">{% trans "None" %}</span>
               {% endif %}
             </td>
+            <td class="text-end">
+              {% if product.policy_violation_count %}
+                <a href="{{ product_url }}#compliance" class="badge bg-danger-subtle text-danger-emphasis text-decoration-none">
+                  {{ product.policy_violation_count }} {% trans "rule" %}{{ product.policy_violation_count|pluralize }} {% trans "triggered" %}
+                </a>
+              {% else %}
+                <span class="text-body-tertiary small">{% trans "None" %}</span>
+              {% endif %}
+            </td>
           </tr>
         {% endwith %}
         {% empty %}
diff --git a/product_portfolio/templates/product_portfolio/compliance/compliance_panels.html b/product_portfolio/templates/product_portfolio/compliance/compliance_panels.html
index 92c0fe29..bcf5c2cb 100644
--- a/product_portfolio/templates/product_portfolio/compliance/compliance_panels.html
+++ b/product_portfolio/templates/product_portfolio/compliance/compliance_panels.html
@@ -214,4 +214,42 @@ <h3 class="fs-6 fw-medium mb-0">{% trans "Security compliance" %}</h3>
       {% endif %}
     </div>
   </div>
-</div>
\ No newline at end of file
+</div>
+
+{% if policy_violations %}
+  <div id="policy-violations" class="row g-4 mb-4">
+    <div class="col-12">
+      <div class="border rounded-3 p-3">
+        <div class="d-flex justify-content-between align-items-center mb-3">
+          <h3 class="fs-6 fw-medium mb-0">{% trans "Policy violations" %}</h3>
+          <span class="badge bg-danger-subtle text-danger-emphasis">
+            {{ policy_violation_count }} {% trans "active" %}
+          </span>
+        </div>
+        <table class="table table-sm mb-0">
+          <thead>
+            <tr>
+              <th class="fw-medium">{% trans "Rule" %}</th>
+              <th class="fw-medium">{% trans "Description" %}</th>
+              <th class="fw-medium">{% trans "Objects in violation" %}</th>
+              <th class="fw-medium">{% trans "Detected" %}</th>
+            </tr>
+          </thead>
+          <tbody>
+            {% for violation in policy_violations %}
+            <tr>
+              <td>
+                <div>{{ violation.policy_rule.name }}</div>
+                <div class="text-body-secondary small">{{ violation.policy_rule.rule_label }}</div>
+              </td>
+              <td class="text-body-secondary small">{{ violation.policy_rule.rule_description }}</td>
+              <td>{{ violation.violation_count }}</td>
+              <td class="text-body-tertiary small">{{ violation.detected_date|date:"N j, Y" }}</td>
+            </tr>
+            {% endfor %}
+          </tbody>
+        </table>
+      </div>
+    </div>
+  </div>
+{% endif %}
\ No newline at end of file
diff --git a/product_portfolio/templates/product_portfolio/compliance/metric_cards.html b/product_portfolio/templates/product_portfolio/compliance/metric_cards.html
index 05a4ecba..1ba1a329 100644
--- a/product_portfolio/templates/product_portfolio/compliance/metric_cards.html
+++ b/product_portfolio/templates/product_portfolio/compliance/metric_cards.html
@@ -1,6 +1,6 @@
 {% load i18n humanize %}
 <div class="row g-3 mb-4">
-  <div class="col-6 col-md-3">
+  <div class="col-6 col-md">
     <div class="bg-body-secondary rounded-3 p-3">
       <div class="small text-body-secondary mb-1">{% trans "Total packages" %}</div>
       <div class="fs-4 fw-medium lh-sm">{{ total_packages|intcomma }}</div>
@@ -15,7 +15,7 @@
       </div>
     </div>
   </div>
-  <div class="col-6 col-md-3">
+  <div class="col-6 col-md">
     <div class="bg-body-secondary rounded-3 p-3">
       <div class="small text-body-secondary mb-1">{% trans "License compliance" %}</div>
       <div class="fs-4 fw-medium lh-sm {% if license_compliance_pct == 100 %}text-success{% elif license_compliance_pct >= 90 %}text-warning-orange{% else %}text-danger{% endif %}">
@@ -32,7 +32,7 @@
       </div>
     </div>
   </div>
-  <div class="col-6 col-md-3">
+  <div class="col-6 col-md">
     <div class="bg-body-secondary rounded-3 p-3">
       <div class="small text-body-secondary mb-1">{% trans "License coverage" %}</div>
       <div class="fs-4 fw-medium lh-sm {% if license_coverage_pct == 100 %}text-success{% elif license_coverage_pct >= 90 %}text-warning-orange{% else %}text-danger{% endif %}">
@@ -49,7 +49,7 @@
       </div>
     </div>
   </div>
-  <div class="col-6 col-md-3">
+  <div class="col-6 col-md">
     <div class="bg-body-secondary rounded-3 p-3">
       <div class="small text-body-secondary mb-1">{% trans "Vulnerabilities" %}</div>
       {% if vulnerability_count == 0 %}
@@ -75,4 +75,18 @@
       {% endif %}
     </div>
   </div>
+  <div class="col-6 col-md">
+    <div class="bg-body-secondary rounded-3 p-3">
+      <div class="small text-body-secondary mb-1">{% trans "Policy violations" %}</div>
+      {% if policy_violation_count == 0 %}
+        <div class="fs-4 fw-medium lh-sm text-success">0</div>
+        <div class="text-body-tertiary fs-xs mt-1">{% trans "No active violations" %}</div>
+      {% else %}
+        <div class="fs-4 fw-medium lh-sm text-danger">{{ policy_violation_count }}</div>
+        <div class="text-body-tertiary fs-xs mt-1">
+          {{ policy_violation_count }} {% trans "rule" %}{{ policy_violation_count|pluralize }} {% trans "triggered" %}
+        </div>
+      {% endif %}
+    </div>
+  </div>
 </div>
\ No newline at end of file
diff --git a/product_portfolio/views.py b/product_portfolio/views.py
index f8e50d5f..80d3688d 100644
--- a/product_portfolio/views.py
+++ b/product_portfolio/views.py
@@ -2772,6 +2772,7 @@ def get_context_data(self, **kwargs):
                 **self.get_package_compliance_context(productpackages),
                 **self.get_license_compliance_context(licenses),
                 **self.get_security_compliance_context(product),
+                **self.get_policy_compliance_context(product),
             }
         )
 
@@ -2842,6 +2843,17 @@ def get_license_compliance_context(licenses, distribution_limit=10):
             "remaining_license_count": max(0, len(license_distribution) - distribution_limit),
         }
 
+    @staticmethod
+    @staticmethod
+    def get_policy_compliance_context(product):
+        policy_violations = (
+            product.policy_violations.filter(resolved=False).select_related("policy_rule")
+        )
+        return {
+            "policy_violations": policy_violations,
+            "policy_violation_count": policy_violations.count(),
+        }
+
     @staticmethod
     def get_security_compliance_context(product, display_limit=10):
         risk_threshold = product.get_vulnerabilities_risk_threshold()
@@ -3042,35 +3054,41 @@ class ComplianceDashboardView(LoginRequiredMixin, ExportComplianceMixin, Dataspa
         "package_count": "Packages",
         "license_error_count": "License errors",
         "license_warning_count": "License warnings",
-        "max_risk_level": "Max risk level",
         "risk_threshold": "Risk threshold",
         "critical_count": "Critical",
         "high_count": "High",
         "medium_count": "Medium",
         "low_count": "Low",
         "vulnerability_count": "Total vulnerabilities",
+        "policy_violation_count": "Policy violations",
     }
 
     def get_queryset(self):
         return (
             get_viewable_products(self.request.user)
             .with_compliance_data()
-            .with_max_risk_level()
             .with_has_vulnerable_packages()
+            .with_policy_violation_count()
         )
 
     def get_context_data(self, **kwargs):
         context = super().get_context_data(**kwargs)
 
         products = self.object_list
-        products_with_issues = products.with_compliance_issues().count()
+        products_with_issues = products.filter(
+            Q(license_error_count__gt=0)
+            | Q(license_warning_count__gt=0)
+            | Q(critical_count__gt=0)
+            | Q(high_count__gt=0)
+            | Q(policy_violation_count__gt=0)
+        ).count()
 
         products_with_license_issues = products.filter(
             Q(license_error_count__gt=0) | Q(license_warning_count__gt=0)
         ).count()
 
-        products_with_critical_or_high = products.filter(
-            Q(critical_count__gt=0) | Q(high_count__gt=0)
+        products_with_policy_violations = products.filter(
+            policy_violation_count__gt=0
         ).count()
 
         totals = products.aggregate(
@@ -3086,7 +3104,7 @@ def get_context_data(self, **kwargs):
                 "total_products": context["paginator"].count,
                 "products_with_issues": products_with_issues,
                 "products_with_license_issues": products_with_license_issues,
-                "products_with_critical_or_high": products_with_critical_or_high,
+                "products_with_policy_violations": products_with_policy_violations,
                 "total_vulnerabilities": totals["total_vulnerabilities"] or 0,
                 "total_critical": totals["total_critical"] or 0,
                 "total_high": totals["total_high"] or 0,