Multi-VCS compliance automation
Automate Repository Governance
Across GitHub, GitLab & Bitbucket
Set rules once. Runs on schedule. Zero manual effort.
140+ compliance rules for repo standards, org settings, audit logs, tokens, and more. Each type is labeled Verdict (pass/fail per target) or Evidence (who or what failed).
Free trial coming soon
Works with
Sample Compliance Report
Findings
Verdict rule
Verdict rule
Evidence · admin → former-contractor · org.remove_member
Platform Breakdown
How It Works
Three steps from connection to compliance report.
Connect Your Repos
Link GitHub, GitLab, or Bitbucket — OAuth or personal token, no extra setup.
Define Rules
Write compliance rules by hand or let AI generate them from a plain-language prompt.
Run & Report
Schedule automated scans, review verdict and evidence findings, and act from reports.
Repository Governance Features
Multi-Platform Support
Seamlessly integrate with GitHub, GitLab, and Bitbucket. One dashboard for all your repositories.
- • Single connection model for GitHub, GitLab, and Bitbucket
- • One dashboard to browse targets and run policies
- • Consistent checks across providers without rewriting rules
Smart Rule Engine
Create custom compliance rules for naming, branch policies, required files, org settings, audit logs, and credential inventory.
- • Verdict rules: one pass/fail per repo, org, team, or member
- • Evidence rules: actors, events, tokens, and overlap details in findings
- • Filter by output kind in the rule picker and public catalog
Policies
One scheduled unit: your rules, filters, and VCS connections together.
- • Hand-built rules (docs, naming, branches)
- • AI policy: @mention connections → preview → multi-provider compile
- • Cron-style schedules per policy bundle
Automated Reports
Get detailed compliance reports with actionable insights. Track progress over time and identify problem areas.
- • Per-repo and org-wide compliance summaries
- • Evidence lines under targets in Findings (audit actors, tokens, CIDRs)
- • Trend views and export-friendly results for audits
Flexible Filtering
Target specific repositories with include/exclude filters. Focus on what matters most to your organization.
- • Organization-wide and team-scoped targets
- • Custom include/exclude patterns
- • Exclude archived or template repos
Real-time Monitoring
Continuous monitoring ensures your repositories stay compliant. Get alerts when issues arise.
- • Latest pass/fail per policy run without hopping between UIs
- • Notifications when scans surface new violations
- • See which repos regressed since the last run
Guided or AI policies
Create policies with a step-by-step wizard or describe what you want in plain language. All checks stay read-only.
Read the docsGuided setup
Presets or from scratch — connection, target scope, rule parameters, and schedule in form steps.
- Connection
- Target scope
- Rule parameters
- Schedule
VCS connection
GitHub · acme-platform
Target scope
Organization: acme-platform
Include all repos · exclude archived
Rule parameters
OSS naming convention
Case sensitive: Off
Schedule
Next step — e.g. weekly on Monday
AI policy
Name, schedule, then describe what to enforce. Type @ to target GitHub, GitLab, or Bitbucket connections — several in one prompt — and preview generated rules before saving.
- Name & schedule
- Prompt
Mentioned connections
@GitHub · acme-platform@GitLab · platform-engineering
Prompt
@GitHub · acme-platform require README and LICENSE on every repo. @GitLab · platform-engineering require CODEOWNERS on all group projects.
GitCompliance generates concrete rules — preview before you save.