heygrc is a compliance-focused GitHub App that reviews pull requests against selected regulatory frameworks to flag control-relevant changes before code is merged.
It provides control-grounded feedback, citing specific clauses from frameworks like SOC 2, ISO 27001, and GDPR to ensure continuous audit readiness.
- 01
Automatic compliance review for pull requests
- 02
Control-grounded findings citing specific framework clauses
- 03
Support for 90+ compliance frameworks
- 04
GitHub App integration with optional branch protection gating
- 05
Compliance scanning for both human and AI-agent-generated code
| StarterEntry plan | $19 | one-time |
| Pro | $99 | one-time |
| Business | $249 | one-time |
Free for public repositories and 25 private reviews per month. Paid plans include Starter ($19/100 reviews), Pro ($99/500 reviews), and Business ($249/2,000 reviews), with optional on-demand reviews at $0.49 each.
Best for
Engineering and security teams heading into their first SOC 2 or ISO 27001 audit who need to maintain continuous compliance alongside AI coding agents.
Not ideal for
Teams looking for runtime security containment, automated bug fixing, or a replacement for traditional code-quality scanners and linters.
An essential shift-left compliance tool that effectively bridges the gap between development speed and audit readiness by treating compliance as a CI check.
Launched in July 2026 as a dedicated compliance-review GitHub App, expanding framework support to over 90 standards and introducing tiered pricing models.
As of
Is heygrc free?+
heygrc is Freemium. Free for public repositories and 25 private reviews per month. Paid plans include Starter ($19/100 reviews), Pro ($99/500 reviews), and Business ($249/2,000 reviews), with optional on-demand reviews at $0.49 each. Check the official site for current plans.
Is heygrc open source?+
heygrc is not listed as open source on ai.dosa.dev - it is Freemium.
How much does heygrc cost?+
Free for public repositories and 25 private reviews per month. Paid plans include Starter ($19/100 reviews), Pro ($99/500 reviews), and Business ($249/2,000 reviews), with optional on-demand reviews at $0.49 each. Pricing changes often - verify on the official site.
Who is heygrc best for?+
Engineering and security teams heading into their first SOC 2 or ISO 27001 audit who need to maintain continuous compliance alongside AI coding agents.
Who is heygrc not ideal for?+
Teams looking for runtime security containment, automated bug fixing, or a replacement for traditional code-quality scanners and linters.
What are the best heygrc alternatives?+
The closest heygrc alternatives on ai.dosa.dev are CodeRabbit, Qodo, Snyk Code - all listed under AI Code Review & Security.
Who makes heygrc?+
heygrc is developed by ISMS Copilot. It is listed in the AI Code Review & Security category on ai.dosa.dev.
Favorite this tool to revisit it later, or Zap it to contribute to the public vote count.