heygrc and What The Diff

Different jobs, same pull request.

What The Diff turns a diff into a readable summary, so reviewers can see what changed at a glance. heygrc reads the same diff for the compliance control it touches. A change can be easy to summarize and still expose sensitive data that should be masked.

Get early access by ISMS Copilot

What The Diff

What The Diff is an AI tool that writes pull request summaries and changelogs from a diff.

heygrc

heygrc reviews each pull request against the compliance frameworks your company must meet (ISO 27001, SOC 2, GDPR, and more) and cites the specific control a change touches. It is built for compliance, not code quality.

Where they do not overlap

A simple change that returns an unmasked account number.

This change returns the full bank account number in an API response instead of the masked last four. It is a one-line change, and it works.

accounts/serialize.ts+1 −1

return {-  account: maskAllButLast4(a.number),+  account: a.number,}

heygrcISO 27001 A.8.11

The response is valid and easy to describe. But returning the full account number instead of the masked value removes the data masking that protects sensitive data on display, which is ISO 27001 A.8.11. heygrc is built to read a change like this against your frameworks and cite the control it touches.

Use them together

Keep What The Diff. Add the compliance layer.

This is not a question of which tool wins. What The Diff catches the bugs and quality problems heygrc never looks for, and heygrc catches the compliance issues a code review is not built to see. Running both means a pull request is checked for whether the code is good and for whether the change is compliant, two different kinds of risk, on the same diff.

heygrc does not replace your code review, and it does not certify you. It reviews changes against your frameworks and cites the control, so the compliance question is answered where the change is made. heygrc is in early access.

Get early access ← Where heygrc fits

Questions

heygrc and What The Diff, common questions.

Is heygrc an alternative to What The Diff?

Not exactly. What The Diff reviews your code; heygrc reviews each change for compliance against the frameworks your company must meet (ISO 27001, SOC 2, GDPR, and more) and cites the specific control it touches. They answer different questions about the same pull request, so heygrc is designed to run alongside it, not replace it.

Can I use heygrc and What The Diff together?

Yes. They look at different kinds of risk on the same diff: What The Diff on the code, heygrc on the compliance control a change touches. heygrc does not replace your code review.

What does heygrc check on a pull request?

heygrc reviews each pull request against the frameworks your company selected and cites the specific control a change touches, so the compliance question is answered in code review. heygrc does not certify you and is in early access.