HOL Guard

AI coding agents can run shell commands, open secret files, call MCP servers and install packages faster than you can read the transcript. HOL Guard is local-first runtime control that runs on your own machine alongside Claude Code, Codex and Cursor. It checks those actions against your policy, lets routine work continue, and pauses the risky ones until you approve or deny them. Local HOL Guard is free and open source under Apache-2.0; Guard Cloud is an optional paid add-on for teams. Install with: pipx install hol-guard && hol-guard init. HOL Guard is not a gateway or network firewall and does not claim to stop every prompt injection; Scan is not a safety guarantee. Made by HOL.