Pull Request Security & Compliance Officer
Keep your AI code reviewers and your shipping speed. A named, background-checked, US-based Officer reads every PR against a model of your codebase and signs it on GitHub, so you meet the separation-of-duties requirements of SOC 2, ISO 27001, PCI DSS and HIPAA. From $500 a month.
jane-okafor-psco requested changes
Forbidden pattern in infra/**: TLS verification disabled on the KMS call. Use the pinned CA bundle from settings. Everything else in this hunk meets the model.
jane-okafor-psco approved these changes
Pinned CA bundle in place. Required checks green. Read infra/deploy in full. Meets Security & Compliance Model v3. attestation · officer PSCO-0147 · tier deep · 2026-11-09 14:30 ET · signed
Auditors sample merged PRs and look for a qualified person other than the author who approved the change. Copilot, Claude, Codex, CodeRabbit and Greptile can find bugs; none of them can be accountable.
Until now your options were to pull senior engineers back into review or to accept the audit exception. Since September 2026 GitHub lets Copilot approvals count toward required approvals. Auditors have not followed.
How it works
Install the PSCO GitHub App, pick the repos in scope, and see your price from your actual PR volume.
On one kickoff call we build your Security & Compliance Model: what matters in your codebase, which paths are sensitive, which checks must be green.
frameworks: [soc2, iso27001] sensitive_paths: auth/**: deep infra/**: deep required_checks: [ci, tests, sast, secrets] forbidden: [hardcoded_secret, tls_verify_off]
A named Officer reviews every PR against your model, in near real time, and signs it on GitHub. Merge it yourself or let your automation merge it.
The Approved Review
A pull request review in state Approve, posted from the Officer's own account, a required status check, and an attestation comment recording the commit, model version, Officer, tier and a signed digest. New commits dismiss it, as with any human reviewer.
acme/platformfeat/key-rotation→main· 2 commits · 6 files changed · +148 −61
coderabbit[bot] reviewed · 2 findings, both addressed in commit 2 · folded into the Officer's packet
copilot[bot] reviewed · 1 suggestion · cannot count as the independent approver
psco assigned jane-okafor-psco · Deep tier · sensitive path infra/deploy
jane-okafor-psco requested changes on commit 1 · Model §4.2 · TLS verification disabled · fixed in commit 2
jane-okafor-psco approved these changes
Reviewed against Security & Compliance Model v3. Required checks green. Read infra/deploy in full: the KMS call now pins the CA bundle, rotation is gated behind the existing KMS role, and the old key is revoked in the same release. Meets the model.
attestation · commit a3f9c1e · model v3 · officer PSCO-0147 · tier deep · 2026-11-09 14:30 ET · digest sha256:9b2e…41c7
The Officers
Every account gets a primary and a backup Officer. US citizens and permanent residents, working in the US, background-checked every year, five or more years of engineering with security work or a CSSLP, OSWE, GWEB or CISSP. Their names appear on your PRs; their profiles go in your audit binder.
Works with every AI code reviewer
PSCO reads what your AI reviewer posts and your Officer sees it before deciding. Point your reviewer at the same model and the robot and the human check the same rules.
The guarantee · in the contract
If an auditor rejects PSCO Approved Reviews as evidence of independent code review, we work the finding with them directly, and if it stands we refund every dollar for that audit period. Miss our SLA and you get 10% back per incident.
If the finding stands, 100% of fees paid for that audit period are refunded.
Every in-scope PR is decided by a named human before psco/approved turns green. Coverage published monthly.
A missed SLA earns a 10% credit per incident, capped at 50% of the month.
Pricing
Connect GitHub and get your exact number before you talk to anyone. Set from your real PR history, fixed for the quarter. Priority tier ×1.3, Always-on ×1.6.