Pay for the pull requests you review.
heygrc reviews your pull requests for compliance frameworks. Install, then claim your install in the console for a 14-day trial, up to 500 private PR reviews, no credit card. After that, pick a plan. Plans count PR reviews: one per pull request per billing period, however often you push to it. The first time you go over, 25% more is free, once. After that, reviews pause unless an owner turned on extras ($0.49 per PR review) or you upgrade. Existing subscriptions move to PR counting at their next renewal. No seats. Public repositories are free, 500 reviews per organization per month.
Start with a 14-day trial, up to 500 private PR reviews.
Claim your install in the console and get a 14-day trial with up to 500 private PR reviews, no credit card. Re-pushes to a pull request during the trial do not count again, up to 20 automatic reviews per PR. After that, comment /heygrc to request another. Unclaimed installs keep running on Free. When the trial ends, heygrc drops to Free automatically. You only pay if you choose to upgrade.
Free
Always free10 private pull requests / month (hard cap)
- Up to 5 reviews per pull request
- Public repositories free, 500/org/month
- Inline findings + GitHub check status
- Review against SOC 2, HIPAA, ISO 27001, GDPR, and more
Starter
For teams100 PR reviews included; re-pushes do not count again
- 100 PR reviews / month, up to 20 automatic reviews per PR
- Optional extras at $0.49 per PR review, with a monthly cap
- All private repositories
- All compliance frameworks
- Inline findings + GitHub check status
Pro
500 PR reviews included; re-pushes do not count again
- 500 PR reviews / month, up to 20 automatic reviews per PR
- Optional extras at $0.49 per PR review, with a monthly cap
- All private repositories
- All compliance frameworks
- Same review depth as Free and Starter
Business
2,000 PR reviews included; re-pushes do not count again
- 2,000 PR reviews / month, up to 20 automatic reviews per PR
- Optional extras at $0.49 per PR review, with a monthly cap
- All private repositories
- All compliance frameworks
- Self-serve upgrade in the console
Included with ISMS Copilot
On ISMS Copilot Standard, Pro, Business or Unlimited? heygrc is included: 100 private PR reviews a month (2,000 on Unlimited) on one org. Activate it in the console: app.heygrc.com/settings.
Buying for a team? Pay by invoice or purchase order, no credit card needed. Talk to us.
Going over your plan
Each paid plan includes a fixed number of PR reviews per billing period. The first time your organization goes over, it gets 25% more PR reviews free, once, never billed. After that, heygrc pauses reviews on private PRs until the next period, with a neutral check on the PR explaining why, unless you upgrade to a larger plan or an owner turns on extras (on-demand reviews) at $0.49 per PR review past your plan. Extras are off unless an owner turns them on, at checkout or later in the console. Public repositories are free, 500 reviews per organization per month either way.
When extras are turned on at checkout, the monthly cap defaults to the plan price and can be changed in the console. At the cap, extra private reviews pause and GitHub shows a neutral check. Included reviews and public repositories do not count toward the cap.
Manage plan, extras, and the cap in the console: app.heygrc.com/billing.
What does included with ISMS Copilot cover?
An active ISMS Copilot Standard, Pro, Business or Unlimited subscription includes heygrc: 100 private PR reviews a month (2,000 on Unlimited), counted once per pull request, on one GitHub or Origin organization at a time. Activate it in the console with the same account you use for ISMS Copilot. Past the included PR reviews, private reviews pause until the next month or until you pick a heygrc plan, because on-demand does not apply to the inclusion. Public repositories are free, 500 reviews per organization per month. The inclusion pauses if the ISMS Copilot subscription lapses, and ISMS Copilot trials do not qualify.
Why not per seat?
A PR review is the unit of value: one pull request checked against your frameworks, counted once per billing period. On paid plans, re-pushes to that pull request are reviewed again without counting again, up to 20 automatic reviews per PR. After that, comment /heygrc to request another. No counting engineers, no per-repository upsell.
Prices are per organization, in USD. Existing subscriptions keep their price. Public repositories are free, 500 reviews per organization per month. Fair use: hourly and daily limits apply, higher on paid plans.
Comparing costs? Run the math at your review volume, against each vendor's own published pricing.