With HOL Guard, coding agents like Claude Code, Codex and Cursor keep working, but shell commands, secret access, MCP calls and package installs are checked against your policy first. Anything risky waits for your approval.

Local-first, free and open source (Apache-2.0), with optional paid Guard Cloud for teams.

Install: pipx install hol-guard && hol-guard init

Scan is not a safety guarantee. Maker: HOL.