HOL Guard

AI coding agents like Claude Code, Codex and Cursor can run shell commands, call MCP tools, read secret files and install packages on your laptop. HOL Guard runs locally and evaluates each of those tool calls before it executes, applying your allow, block or ask rules and keeping a log of what was decided. The core is Apache-2.0 open source and installs with `pipx install hol-guard && hol-guard init` (a signed Windows MSI is also available). Teams that want a hosted, fully managed setup can add Guard Cloud, a paid option. Guard is not a gateway or network firewall, and it is not a complete defense against prompt injection. Made by HOL.