Which frameworks does heygrc cover?

76 and counting, from ISO 27001 and SOC 2 to GDPR, DORA, NIS 2, and the EU AI Act. You choose which apply to your company.

Is there a free tier?

Yes. You get a set number of pull-request reviews for free, then it is usage-based. The same applies to public and private repositories. Final numbers at launch.

Does it block my pull requests?

Only if you want it to. heygrc posts a GitHub check status you can optionally require in branch protection.

How is this different from a bug bot?

Bug bots catch defects. heygrc catches compliance-relevant changes, measured against the frameworks you must comply with.

heygrc is in early access. Join the waitlist and we will reach out as we onboard teams.

heygrc

AI-powered PR reviews that flag security and compliance risks

Development

FREEMIUM

heygrc automatically reviews every pull request as it opens, identifying code changes that put controls at risk. Works with both human-written and AI-generated code. Built by ISMS Copilot, heygrc helps development teams catch security and compliance issues early in the developme...