PluginStatsheyGRC installs statistics
By Better ISMS (3 listings) · GitHub Marketplace
Compliance review for pull requests. Cites the specific control at the diff. Runs alongside your reviewer, never blocks
heyGRC has 30 recorded installs on GitHub Marketplace.
It ranks #763 of 1,393 tracked GitHub Marketplace listings by installs.
PluginStats has 1 daily observations since Oct 16, 2026; the latest is from Oct 16, 2026.
About heyGRC
heyGRC is compliance review for pull requests: it reads every PR against the frameworks your company must meet (SOC 2, ISO 27001, GDPR, and 70+ more) and comments the specific control a change puts at risk, at the diff.
Clean, working, secure code can still be a compliance gap. It runs alongside your code reviewer and security scanner, and never blocks a merge. Free for public repos and 25 private reviews/month, plus a 14-day trial. By ISMS Copilot.
Compliance review, on every pull request
Your code reviewer checks whether a change is correct. Your security scanner checks whether it is safe. heyGRC checks the third thing neither is looking for: whether the change touches a control you are audited on.
It reads each pull request against the frameworks your company must comply with, SOC 2, ISO 27001, GDPR, the EU AI Act, and 70+ more, and posts a review that cites the specific control a change puts at risk, right at the diff. A widened IAM policy that is a SOC 2 CC6.1 gap. A weakened audit log that touches ISO 27001:2022 A.8.15. A new personal-data column with no retention bound that runs into GDPR Art. 5(1)(e). Clean, working, secure code can still be a compliance gap, and that is the gap heyGRC is built to catch.
It runs alongside your reviewer, it does not replace it
heyGRC is complementary to the code-review and security bots you already use. Those answer "is this code good and safe?" heyGRC answers "does this change affect what we are audited on?" Different question, same pull request. Use them together.
It never blocks a merge
Findings are a neutral GitHub Checks status and inline comments, never a required gate. heyGRC informs the humans and agents shipping the code; it does not stand between them and merge.
Grounded in your obligations, not generic advice
Configure your company context and frameworks once (one small REST API call your coding agent can make), and every review is measured against your specific controls, not boilerplate.
Pricing
• Free for public repositories, always. • Free for private repos: 25 reviews per month. • 14-day trial: every new install gets 14 days of unlimited private reviews, no credit card. • Starter: $19/org/month, 100 reviews included, then $0.49/review. A review is never blocked.
Full setup at heygrc.com. By ISMS Copilot.
Description from the GitHub Marketplace listing.
- Code review
- AI Assisted
Where heyGRC sits in the listing
Each band is one page of 20. Installs on a log scale. Placement is projected from installs, so it can differ from the marketplace's own sort order. Hover a dot to see the listing.
Charts
Images: 30d · 1y · all time · 1600×900 dark
Adoption over time
7/30/90-day growth
Filled points are observed values; hollow points come from Internet Archive snapshots of the listing page. Dashed segments span periods with no observations — values between points are not interpolated.
Recent observations
Full history (1)Similar GitHub Marketplace plugins
Data source
Install counts (installations of each GitHub App across accounts and organizations) are read from public GitHub Marketplace listing pages. GitHub does not publish ratings. Category positions reflect GitHub's own popularity sort.
Listing: https://github.com/marketplace/heygrc. First seen Oct 16, 2026; last successful collection Oct 16, 2026. See the methodology.