HOL Guard

HOL Guard is a Digital listed on Prouct. Ask-before-run control for Claude Code, Codex and Cursor on your machine

AI coding agents can now run shell commands, read files and install packages in your project without stopping to ask. HOL Guard puts a local decision point in front of those actions. It runs on your own machine, inspects risky steps such as shell commands, reads of secrets and credential files, MCP tool calls and new package installs before they happen, and prompts you to allow or deny when a call needs a human. Every decision is written to a local log you can review afterwards. HOL Guard is an open-source Python CLI licensed Apache-2.0 for macOS and Linux; an optional paid Guard Cloud is available for teams, so pricing is freemium. What it is not: a gateway, a network firewall, or a complete prompt-injection defense, and a scan result is not a guarantee of safety. Install: pipx install hol-guard && hol-guard init