diff --git a/certbot-nginx/tests/boulder-integration.sh b/certbot-nginx/tests/boulder-integration.sh
index d6bd767ce..980b5d45a 100755
--- a/certbot-nginx/tests/boulder-integration.sh
+++ b/certbot-nginx/tests/boulder-integration.sh
@@ -62,3 +62,5 @@ test_deployment_and_rollback nginx6.wtf
 # note: not reached if anything above fails, hence "killall" at the
 # top
 nginx -c $nginx_root/nginx.conf -s stop
+
+coverage report --fail-under 75 --include 'certbot-nginx/*' --show-missing
diff --git a/tests/boulder-integration.sh b/tests/boulder-integration.sh
index ef611e743..2f9130489 100755
--- a/tests/boulder-integration.sh
+++ b/tests/boulder-integration.sh
@@ -486,11 +486,11 @@ if [ "${BOULDER_INTEGRATION:-v1}" = "v2" ]; then
         --manual-cleanup-hook ./tests/manual-dns-cleanup.sh
 fi
 
+coverage report --fail-under 65 --include 'certbot/*' --show-missing
+
 # Most CI systems set this variable to true.
 # If the tests are running as part of CI, Nginx should be available.
 if ${CI:-false} || type nginx;
 then
     . ./certbot-nginx/tests/boulder-integration.sh
 fi
-
-coverage report --fail-under 67 -m