heygrc is a compliance-focused code review tool that acts as a GitHub App to audit pull requests against specific compliance frameworks like SOC 2, HIPAA, and GDPR.
Follow heygrc to get an email when its listing changes, such as new pricing or features. One digest a day at most, and you can unsubscribe anytime.
It grounds its findings in specific control clauses rather than general code quality, providing context for auditors and security teams.
- 01
Control-grounded compliance findings
- 02
Automated GitHub check status
- 03
Support for major frameworks (SOC 2, ISO 27001, GDPR, NIST, etc.)
- 04
Configurable review settings via API or console
- 05
Multilingual review comment support
| StarterEntry plan | $39 | per month |
| Pro | $149 | per month |
| Business | $399 | per month |
Free for public repos (500 reviews/org/month) and 10 private PR reviews/month. Paid tiers include Starter ($39/mo, 100 reviews), Pro ($149/mo, 500 reviews), and Business ($399/mo, 2000 reviews). Extras are $0.49/PR review if enabled.
Best for
Engineering and security teams in SaaS companies navigating audits like SOC 2, HIPAA, or ISO 27001 who need to shift compliance checks into the pull request process.
Not ideal for
Teams seeking general code-quality bug detection, runtime security containment, or a full GRC platform for certifications; it does not replace human auditors or certification bodies.
An effective shift-left compliance tool that bridges the gap between code changes and audit evidence, best used alongside dedicated bug-finding bots.
Launched in July 2026 as a dedicated compliance reviewer for pull requests.
As of
Is heygrc free?+
heygrc is Freemium. Free for public repos (500 reviews/org/month) and 10 private PR reviews/month. Paid tiers include Starter ($39/mo, 100 reviews), Pro ($149/mo, 500 reviews), and Business ($399/mo, 2000 reviews). Extras are $0.49/PR review if enabled. Check the official site for current plans.
Is heygrc open source?+
heygrc is not listed as open source on ai.dosa.dev - it is Freemium.
How much does heygrc cost?+
Free for public repos (500 reviews/org/month) and 10 private PR reviews/month. Paid tiers include Starter ($39/mo, 100 reviews), Pro ($149/mo, 500 reviews), and Business ($399/mo, 2000 reviews). Extras are $0.49/PR review if enabled. Pricing changes often - verify on the official site.
Who is heygrc best for?+
Engineering and security teams in SaaS companies navigating audits like SOC 2, HIPAA, or ISO 27001 who need to shift compliance checks into the pull request process.
Who is heygrc not ideal for?+
Teams seeking general code-quality bug detection, runtime security containment, or a full GRC platform for certifications; it does not replace human auditors or certification bodies.
What are the best heygrc alternatives?+
The closest heygrc alternatives on ai.dosa.dev are CodeRabbit, Qodo, Snyk Code - all listed under AI Code Review & Security.
Who makes heygrc?+
heygrc is developed by Better ISMS. It is listed in the AI Code Review & Security category on ai.dosa.dev.
Favorite this tool to revisit it later, or Zap it to contribute to the public vote count.