Coding agents can run powerful tools without policy checks before execution. HOL Guard checks shell, secrets, MCP, and package installs first, locally.
HOL Guard is a local-first runtime firewall: coding agents still work, but shell, secrets, MCP, and package installs are checked first. Apache-2.0. pipx install hol-guard && hol-guard init. Scan is not a safety guarantee. Maker: HOL.
Have feedback for the maker?
Sign in to leave a review, report a bug, or suggest a feature.
HOL Guard
