heyGRC
ChatGPT pluginGRC review for your PRs
heyGRC reviews each pull request against the frameworks your company must comply with, grounded in your company profile. It posts inline findings, a neutral check run, and one sticky summary. This plugin does not review code locally. It walks you through installing the heyGRC GitHub App so reviews run server-side. Public repositories are free.
- Featured
- No
not on the featured shelf
Movement
From our daily snapshots over the last 30 days.
Rank by placement
Rank in Developer tools
In its category
How this plugin compares with others in the same category. Positions are counted within the category, not across the whole directory.
Developer tools418th of 742 by placement
| # | Plugin | Position | 7d |
|---|---|---|---|
| 416 | #5039 | 23places up | |
| 417 | #5053 | 185places up | |
| 418 | #5057 | 33places up | |
| 419 | #5060 | 359places up | |
| 420 | #5062 | 29places up |
Example prompts
- “Set up heyGRC compliance review on this repository.”
- “Install the heyGRC GitHub App and configure ISO 27001, SOC 2, and GDPR on our PRs.”
- “How do I get compliance findings on this pull request without blocking the merge?”
Skills
heyGRC Compliance Review
Set up and run heyGRC compliance review on a repository's pull requests. Use when the user wants GRC or security compliance review of their code changes against ISO 27001, SOC 2, GDPR, DORA, NIS 2, or the EU AI Act, including installing the heyGRC GitHub App, configuring the company profile and frameworks as code, and choosing how often reviews run.
- Categories
- Made by
- BETTER ISMS · Website
- Sign-in
- On Install
- Capabilities
- Read
- Availability
- Available
- Version
- 0.1.1
- Keywords
- grc, compliance, security, code-review, pull-request, iso-27001, soc-2, gdpr, eu-ai-act
- Created
- August 21, 2026
- More info
- Sponsorship
- Promote this plugin