HOL Guard

HOL Guard, from HOL, is a local-first runtime control plane for AI coding agents such as Claude Code, Cursor and Codex. Before a shell command, secret read, MCP tool call or package install reaches your operating system, Guard reviews it on your machine and lets you allow or block it. The core is open source under Apache-2.0. Get started with: pipx install hol-guard && hol-guard init. Teams that want a hosted, fully managed option can add the optional paid Guard Cloud. To be clear about scope: HOL Guard is not a gateway, not a network firewall, and not a complete prompt-injection preventer, and its scans are not a safety guarantee. It is a local review layer for agent actions.