Michael Kantor
HOL Guard runs locally next to Claude Code, Codex and Cursor and stops risky shell commands, secret reads, MCP calls and package installs until you approve them. Instead of trusting the model to behave, it checks each tool call on your own machine before it executes, so you see what the agent is about to do and decide whether it runs. Local Guard is free and open source under the Apache-2.0 license. Guard Cloud is an optional paid add-on for teams that want shared policies and history. Install it with pipx install hol-guard and then run hol-guard init in your project. HOL Guard is not a network gateway or a firewall, and a scan is not a safety guarantee. It is a local approval layer for developers and security teams who let AI coding agents work on real repositories and real credentials. Maker: HOL.
