Cursor's automated PR review agent for bugs and regressions; usage-metered agent runs on pull requests.
Best PR compliance review agents
Live catalog listings tagged for PR review work in a compliance or security-engineering context.
Catalog data as of 2026-07-31. Page copy reviewed 2026-09-01. Next editorial review by 2026-10-01. Ordered by recency then name. No paid placement. 6 matched live listings.
Pull-request workflows are where security and compliance checks often need to run before merge. This shortlist is a taxonomy view of live listings tagged agent_job PR review. Depth varies by product: some are compliance-focused PR reviewers, others are broader coding or AppSec agents that also touch PRs. Read each brief; do not treat every match as a dedicated compliance-control reviewer.
Who this is for. Engineering managers, platform teams, and compliance owners comparing agent options that claim PR-level automation.
Eligibility. Included solely when a live listing tags agent_job with PR review. No extra automated exclusion pass runs on this page. Inclusion is tag-based, not a verified capability audit of each product.
How order works. Matched agents are filtered from the live catalog, then sorted by date_added (newest first) and name. Paid skip-the-queue fees buy publish timing, never rank or praise on this page. House products (Better ISMS) appear under the same rules with an ownership note. See /transparency.
Target query: best PR compliance review agents 2026. Parent hub: /best. Full catalog: /directory.
GitHub-hosted agent that can implement tasks and open pull requests in your repositories.
heyGRC
Listed by Better ISMS (same rules as everyone)
GitHub App that reviews every pull request for compliance impact: flags changes that put controls, evidence, or framework posture at risk.
AI-assisted static analysis triage and fix guidance for security findings in code.
Security-focused code analysis and AI fix suggestions integrated into developer workflows.
Supply-chain security agent that monitors dependencies for malware and risk signals.