HOL Guard

What it does

Reviews code

PartlyIt does not review a human's diff, but the companion plugin-scanner inspects plugin and skill code in CI for maintainers.Scans bundled skills for prompt injection markers, zero-width characters, dangerous shell commands, and secret leaks.hol.org/guard ↗

Done-for-you service

NoYou install and run the software yourself; only an Enterprise security review is people-delivered, not an operated service.Download Guard Desktop, choose your AI harness, and connect Cloud later if you want shared history.hol.org/guard/install ↗

How much it does unattended

Runs autonomously

PartlyPolicy decides allow or block automatically on covered events, but ambiguous actions are deliberately paused for a human approval.evaluates supported tool calls and local artifacts, blocks known threats, pauses ambiguous actions for approval, and records security receiptshol.org/guard/pricing ↗

Agent permissions

YesThis is the product's core job: a pre-action checkpoint with allow, ask or block outcomes on supported events.Guard gives you a checkpoint before risky actions on supported integrations. It can allow, ask, or block before a covered action runs, and it records…hol.org/guard ↗

Which models it runs on

Claude

YesClaude Code is a stable supported harness with native approval, browser fallback and resume, though prompt events are not surfaced.Prompt events and background agent sessions that run without an active terminal do not surface hook events to Guard.hol.org/guard/security/coverage ↗

GPT

YesOpenAI's Codex harness is listed as supported on the stable channel across shell, prompt, MCP, file-read and tool-result events.Inline file edits applied directly by the model without a tool call are not visible to Guard.hol.org/guard/security/coverage ↗

Model choice

YesGuard sits in front of whichever harness and model you already use, applying one cross-agent policy rather than choosing a model.HOL Guard is the open-source local-runtime option for cross-agent policy, pre-execution review on supported events, approvals, and local evidence.hol.org/guard ↗

Not established: Open models

Where you use it

In your editor

YesCursor and Cline are supported harnesses, though Cursor's built-in terminal escapes Guard unless it runs inside an agent session.Shell commands issued through Cursor's built-in terminal bypass Guard unless the terminal runs inside an agent session.hol.org/guard/security/coverage ↗

On the command line

YesA Python CLI installs, initialises and health-checks Guard, and remains the documented alternative to the desktop app.Guard detects your harnesses, installs managed commands, and sets up notifications. `$ hol-guard init`hol.org/guard/install ↗

In your pipeline

PartlyRuntime Guard is local only; CI gating comes from the separate plugin-scanner GitHub Action for maintainers, not the runtime layer.Use plugin-scanner verify in CI, or the published ai-plugin-scanner action, to gate PRs before release.hol.org/guard ↗

In a browser

PartlyA hosted Guard Cloud console exists for dashboards and history, but it requires a paid plan and adds no enforcement.Adds shared policy, org-wide telemetry, and team dashboards on top of the local enforcement layer. Cloud connectivity is for visibility and…hol.org/guard ↗

Whose machine it runs on

Self-hosted

PartlyEnforcement already runs entirely on your own machine, but a self-hosted or VPC control plane is only an Enterprise review item.This packet does not claim a supported self-hosted or VPC control plane. Confirm deployment prerequisites, ownership, and evidence paths during…hol.org/guard/security/trust ↗

Open source

PartlyThe Guard Local runtime is Apache-2.0 and inspectable, while Guard Cloud is a separately scoped proprietary service.HOL Guard's core Guard Local runtime is open source under Apache-2.0. It can be installed, inspected, and used without a paid plan or cloud accounthol.org/guard ↗

What it costs to run

How it meters

YesPaid plans are flat per-month subscriptions, with Team charged per seat and each tier capping connected devices and storage.Free$0forever | Solo$4.99/mo | Pro$15/mo | Team$30/seat/mohol.org/guard/pricing ↗

Free tier

YesA permanent free tier covers the whole local runtime with no account, no card and no sales call required.The free plan includes the local Guard runtime, real-time approval prompts, local audit log, and support for all supported AI agents. No credit card…hol.org/guard/pricing ↗

API access

PartlyOutbound webhooks with HMAC verification are documented for alert routing, but no public Guard REST API is published.Webhook Configure webhook endpoints, verify HMAC signatures, and handle retry logic.hol.org/guard/docs ↗

MCP server

YesHOL publishes a Guard Cloud MCP endpoint over Streamable HTTP with OAuth metadata, so another agent can query it.the HOL Guard Cloud MCP endpoint uses Streamable HTTP at https://hol.org/api/guard/mcp and advertises OAuth metadata through the well-known resources…hol.org ↗

Bring your own key

PartlyEnforcement already runs on hardware you own, and Enterprise can place the shared control plane inside your own network boundary; no bring-your-own model key applies because Guard calls no model.Keep the shared control plane inside the network and operating boundary your team chooses.hol.org/guard/enterprises ↗

Buying it for a team

A company can buy it

YesA Team plan with shared policy and an Enterprise contact-sales path are both published, so an organisation can buy directly.Team adds shared policy across multiple developers, fleet dashboards, and centralized approval workflows.hol.org/guard/pricing ↗

Seat model

YesOnly Team is priced per seat, at $30 per seat per month, and it ceilings cloud-connected devices at twenty-five.Cloud-connected devices | | 2 | 5 | Up to 25hol.org/guard/pricing ↗

Pooled budget

PartlyTeam storage pools a shared base plus a per-seat allowance, but no shared spend or credit balance is described.Included cloud storage | | 1 GB | 5 GB | 25 GB + 5 GB/seathol.org/guard/pricing ↗

Admin controls

PartlyOrganisation policy that local devices cannot weaken is a Team-tier feature; free and Solo users govern only their own machine.Organization module policy local devices cannot weakenhol.org/guard ↗

Audit log

YesA local audit log of approvals and changes ships free, while searchable cloud decision history is reserved for paid tiers.Local decision trail for approvals and changeshol.org/guard ↗

Single sign-on

PartlySAML federation is real but sits outside the self-serve tiers: the trust packet routes SSO, SAML and SCIM requests to Enterprise billing assistance, and no price is published for it.SSO, SAML, SCIM, SIEM routing, custom retention, and custom feeds should route to Enterprise billing assistance without blocking local self-serve…hol.org/guard/security/trust ↗

What happens to your code

Opt out of training

PartlyThe vendor states local evaluation uploads nothing and cloud sync carries only redacted summaries, but publishes no explicit model-training clause.No for Guard Local. It evaluates actions on the machine. If you enable Guard Cloud, sync stores redacted decision summaries, not your source code or…hol.org/guard/pricing ↗

Data residency

PartlyNothing has to leave the machine, which sidesteps the question for local use, but anything synced is processed in the United States with no region choice offered short of the Enterprise on-premises option.If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data,…hol.org/points/legal/privacy ↗

Getting out

PartlyDowngrading keeps local functionality and evidence export exists on Team, but no data-export format or credit-expiry terms are published.Plans can be changed or cancelled at any time. Downgrading from Pro or Team to the free tier retains local functionality; cloud features are disabled…hol.org/guard/pricing ↗

Certifications

PartlyGDPR and CCPA handling is documented in detail with lawful bases, retention periods and self-serve rights, but no SOC 2 or ISO 27001 attestation is claimed on the pricing, enterprise or security trust pages.If you are a resident of the European Union (EU) and European Economic Area (EEA), you have certain data protection rights covered by the GDPRhol.org/points/legal/privacy ↗