MergeGuide

Embrace AI velocity. Without sacrificing control.

MergeGuide is AI-assisted code governance — go all-in on AI-generated code while keeping every change inside your security and compliance policy. Not a security tool that slows developers down; a velocity enabler that makes compliant code the default.

The third option

AI now writes a large share of the code in files where it's active. It's a brilliant, reckless developer — it ships fast, and it guesses, cuts corners, and hallucinates to get there. The old choice was "let AI run free and accept the risk" or "lock AI down and fall behind." MergeGuide is the third option: governance that enables AI instead of restricting it.

Prevent at creation — four graduated layers

Every change — human- or AI-written — is validated against your policy across four layers that shift detection left (the PolicyMesh):

1. AI assistants (MCP) — inject policy into Claude Code, Cursor & Copilot so AI writes compliant code before it's generated.
2. IDE — real-time feedback as code is written.
3. Git hooks — pre-commit enforcement before code leaves the machine.
4. PR gate — server-side enforcement at merge, with signed, tamper-evident evidence.

A violation caught in the IDE costs seconds; the same one at the PR gate costs a review cycle.

What you get

• Compliant code by default — deterministic policy at the moment of generation, not a report after the fact.
• Govern your whole stack — application code, infrastructure-as-code, dependencies, CI/CD, and supply-chain provenance.
• The frameworks you answer to — SOC 2, PCI-DSS, HIPAA, ISO 27001, NIST SSDF, OWASP ASVS, and more — assessed once and deconflicted across frameworks (PolicyMerge).
• Prove it automatically — signed, tamper-evident compliance evidence, OSCAL output for your GRC stack, plus SBOMs (CycloneDX / SPDX).
• Every SCM — GitHub, GitLab, Bitbucket, Azure DevOps.

Install

pipx install mergeguide      # recommended
# or: pip install mergeguide

Quick start:

mergeguide init              # set up your project
mergeguide hooks install     # add the pre-commit gate
mergeguide check             # scan your code against policy

AI assistants (MCP): npx @mergeguide/mcp-server — plug MergeGuide into Claude Code, Cursor, or Copilot.

Pricing

Three plans — Free / Builder / Enterprise — with no feature gating across tiers. You pay for scale and commitments, never for capability.

See mergeguide.ai.

Links

mergeguide.ai · docs.mergeguide.ai · portal.mergeguide.ai

License

Proprietary