Start reviewing every pull request.
Install the GitHub App, then select frameworks in the console. Reviews against SOC 2, HIPAA, ISO 27001, GDPR, and more are available once those IDs are saved. A bare install starts on ISO 27001, SOC 2, and GDPR. Claim the install for a 14-day trial, up to 500 private PR reviews, no credit card.
- 01
Install the GitHub App
One click. Pick the repositories heygrc should review. Public repositories are free, 500 reviews per organization per month.
- 02
Choose your frameworks
SOC 2, HIPAA, ISO 27001, GDPR, and more. Select the ones that apply in the console. Unconfigured installs start on ISO 27001, SOC 2, and GDPR. heygrc grounds each finding in the specific control it touches, at the diff.
- 03
Every pull request gets reviewed
Reviews start immediately on the free tier. Claim your install for a 14-day trial (up to 500 private PR reviews), then free for 10 private pull requests a month. On a paid plan, going over pauses reviews unless an owner turns on extras at $0.49 per PR review. The first time, 25% more is free.
Install heygrc
Add the GitHub App and reviews start on your next pull request. Claim it in the console for a 14-day trial, up to 500 private PR reviews, no credit card.
Then free: 10 private pull requests / month. Public repositories free, 500/org/month.
The kind of change heygrc catches in a diff.
Not generic findings. heygrc reads the pull request and grounds each one in the specific control it touches.
A pull request broadens an IAM role or opens a new access path.
A change removes or quietly weakens an audit log.
A new table starts storing personal data with no retention bound.