HOL Guard

HOL Guard is a local-first runtime control plane for AI coding agents. Before an agent runs a shell command, reads a secret, calls an MCP server, or installs a package, Guard checks the action against your policy and can block it or ask for review. The CLI is open source under Apache-2.0 and installs with `pipx install hol-guard && hol-guard init`. Teams that want a hosted option can add Guard Cloud, an optional, fully managed paid service. HOL Guard is not a gateway or network firewall and does not claim to prevent every prompt injection.