
HOL Guard
Local-first runtime firewall for AI coding agents
Visit Website
September 16, 2026
HOL Guard: local runtime firewall for Cursor/Claude coding agents
I built HOL Guard — a local-first runtime firewall for AI coding agents (Cursor, Claude Code, and similar).
It sits on your machine and can intercept shell, secrets/file reads, MCP server changes, and package installs before they hit the OS. Open source (Apache-2.0). Maker: HOL.
Install: pipx install hol-guard && hol-guard init
Honest limits: scan is not a safety guarantee. It is not a cloud MCP gateway, WAF, or EDR.
More: https://hol.org/guard
About
By HOL: local-first coding-agent firewall intercepts shell, secrets, MCP changes, package installs pre-side effects. Apache-2.0; free local + optional Guard Cloud. Scan ≠ safety guarantee; not WAF/EDR/cloud MCP gateway.

Comment