Most routine PRs are decided within an hour on the Standard tier; Priority is one hour, Always-on is thirty minutes, around the clock, US-based.

Can we auto-merge after approval?

Yes. Key your automation to the psco/approved check. PSCO never merges.

From your PR history: $500 includes 100 PRs a month, then $3 to 2,000 and $2.50 beyond, with Priority and Always-on tiers at 1.3 and 1.6 times.

What is the guarantee?

Audit acceptance, coverage of every in-scope PR, and SLA credits, all in the contract.

SOC 2 for startups · seed to Series B

Your first SOC 2 shouldn't slow down your shipping.

You are eight engineers using Claude Code and Cursor, and your auditor just asked who approves pull requests. The honest answer is "the bot". PSCO gives you a named human approver on every PR from $500 a month, no hiring, no engineer time lost to review, and a guarantee the auditor accepts it. Connect GitHub, see your price, be covered by tomorrow.

Get a quote in 2 minutes Book a meeting

100% US-based OfficersNamed on every PRNear real-time, 7 days a weekWorks with every AI code reviewerAudit Acceptance Guarantee

The awkward moment in the readiness review.

A customer's security questionnaire or your auditor's readiness review asks who approves PRs. Your agents open them, CodeRabbit comments on them, and the same engineer merges them. Auditors are not accepting AI-only approval, even though GitHub now counts Copilot approvals toward required approvals.

The alternatives are to pull your two senior engineers back into reviewing every PR, or to accept the audit exception and explain it to every customer who asks. PSCO is the third option: a named, background-checked, US-based Officer on every PR, priced per PR, with the evidence already assembled.

What it looks like

Request Changes, fix, push, approved. An hour, not a day.

Most routine PRs are decided within an hour on the Standard tier. Findings cite the clause of your model they violate; only the new diff is re-reviewed after a push.

infra/deploy/rotate_keys.py · #482 · commit 1 · +2 −0deep tier · sensitive path infra/**

4141def rotate_key(kms, key_id):42+ resp = requests.post(KMS_URL, json={"key": key_id}, verify=False)43+ audit.log("rotate", key_id=key_id)4244 return resp.json()

jane-okafor-psco requested changes

Line 42 · Model §4.2

Forbidden pattern in infra/**: TLS verification disabled on the KMS call. Use the pinned CA bundle from settings. Everything else in this hunk meets the model.

infra/deploy/rotate_keys.py · #482 · commit 2 · a3f9c1eonly the new diff re-reviewed

4141def rotate_key(kms, key_id):42- resp = requests.post(KMS_URL, json={"key": key_id}, verify=False)42+ resp = requests.post(KMS_URL, json={"key": key_id}, verify=CA_BUNDLE)4343 audit.log("rotate", key_id=key_id)

jane-okafor-psco approved these changes

psco/approved

Pinned CA bundle in place. Required checks green. Read infra/deploy in full. Meets Security & Compliance Model v3. attestation · officer PSCO-0147 · tier deep · 2026-11-09 14:30 ET · signed

Is it really a person?

Yes. Here is one.

Every approval is posted by a named Officer from their own GitHub account. Their public profile goes in your audit binder; the Officer Dossier covers background checks, US residency, qualifications and training.

J. Okaforjane-okafor-psco

PSCO Officer · sample

RolePrimary Officer
LocationUnited States
Background checkIdentity · criminal · employment · education, annual
Experience5+ years, security work
CredentialCSSLP
ConfidentialitySigned per customer

Public profile for your auditor

Pricing

At 30 to 300 PRs a month, the $500 floor usually applies.

$500 a month includes 100 PRs. Beyond that, $3 a PR to 2,000. The price is set from your real PR history and fixed for the quarter. Less than one engineer-hour a week spent on review.

first 100 PRs / month$500 flat
PRs 101 – 2,000$3.00 each
beyond 2,000$2.50 each
deep review add-on$35 / deep-tier PR

Questions founders ask

Short answers.

Is it really a person?: Yes. Every approval is posted by a named Officer from their own GitHub account, and their profile and credentials are available to your auditor.
How fast?: Most routine PRs are decided within an hour on the Standard tier; Priority is one hour, Always-on is thirty minutes, around the clock, US-based.
Can we auto-merge after approval?: Yes. Key your automation to the psco/approved check. PSCO never merges.
How is price set?: From your PR history: $500 includes 100 PRs a month, then $3 to 2,000 and $2.50 beyond, with Priority and Always-on tiers at 1.3 and 1.6 times.
What is the guarantee?: Audit acceptance, coverage of every in-scope PR, and SLA credits, all in the contract.

Ship with agents.
Pass with people.