HOL Guard

hol.org/guard

Visit Website

Local-first runtime firewall for AI coding agents. Intercepts shell, secrets, MCP, and package installs before they run. Apache-2.0. Free.

Why it is useful

Clarity AI Firewall peers (Pipelock egress, Aperion Shield MCP gate, ClawSecure scanners, MintMCP gateways) dominate listicles, but workstation pre-exec policy for coding agents is still rare. HOL Guard is Apache-2.0, local-first, maker HOL: pipx install hol-guard && hol-guard init. Scan is not a safety guarantee. Complements gateways rather than replacing them.