How do I install HOL Guard?

Download Guard Desktop for Mac, Windows, or Linux from this page, then open the app. The command line remains available as a secondary path. Guard configures your AI agent to route tool calls through the local proxy. The entire setup takes under a minute.

Can I download Guard Desktop instead of using the terminal?

Yes. Download the Apple silicon macOS app, Windows x64 MSI, or Linux x86_64 AppImage from the install page when those releases are published. The command line remains available as a secondary path. Guard Desktop is a local control center; Guard Core still makes the security decisions, and Guard Cloud stays optional.

What are the prerequisites for Guard?

Guard requires a supported AI agent and a computer. Desktop installers cover Apple silicon macOS 13+, Windows x64, and Linux x86_64. The command line needs Python 3.10+. No cloud account is needed for the free tier.

What does HOL Guard do before an AI agent acts?

Guard checks supported shell, file, MCP, skill, prompt-sensitive, and package actions before side effects. It blocks denied actions and asks for your decision when policy requires review.

Can HOL Guard stop destructive AI commands?

Yes. Guard can block denied actions and pause risky commands for approval before they run. Your local policy decides which actions need a warning, an approval, or a block.

Does Guard need Guard Cloud to protect my machine?

No. Guard Local enforces policy on your machine without a cloud connection. Guard Cloud is optional for shared history, team policy, dashboards, and connected-device workflows.

Which AI harnesses can I install Guard with?

The install page has guides for Codex, Claude Code, Cursor, Gemini CLI, OpenCode, Hermes, OpenClaw, GitHub Copilot CLI, Antigravity, Kimi, Grok, Pi / Oh My Pi, Zcode.

Will Guard replace my AI tool or its own approvals?

No. Guard adds a local review layer in front of supported harness actions. Your harness stays installed, and its native approval flow remains available where that harness provides one.

What changes when I install Guard?

Guard installs managed launchers or hooks for the harness you choose and keeps local Guard state for decisions. The harness guide on this page lists the files and integration mode for each tool.

How do I update Guard after installing it?

Use the update command shown in the Verify and manage section. Choose the macOS and Linux command or the Windows PowerShell command, then run hol-guard doctor to check the result.

Is HOL Guard free and open source?

Yes. Guard is free and open source. The local runtime can protect your AI harness without a paid plan or cloud account; optional Cloud features add shared workflows.

How do I verify Guard is working?

After installation, trigger any tool call from your AI agent (e.g., a shell command). Guard should display an approval prompt before the action executes. You can also check the Guard status indicator in your terminal.

How do I uninstall Guard?

Run the Guard uninstall command, which removes the proxy and restores the original agent configuration. Your audit log is preserved locally and can be deleted manually.

Get runtime security in under a minute.

Download Guard Desktop, choose your AI harness, and connect Cloud later if you want shared history.

Free and open source. Make your AI ask before destructive commands.

Local protection starts in under a minute

Download Guard Desktop

Local by default

One installer. Local protection. Guard Core still makes every security decision, and Guard Cloud stays optional.

Download Apple silicon 0.1.0-beta.71

Download Linux AppImage

Download for Windows

macOS 13+ on Apple siliconWindows x64 MSILinux x86_64 AppImageDesktop details

Prefer the command line?

Copy a prompt for your coding agent, or run the install command in a terminal.

Already installed? Connect

Platform

Release channel

Install with your AI agent

Copy one prompt, paste it into your local coding agent, and let it run the install.

Optional harness

Finished installing?

Connect a device to unlock shared history, investigations, and team workflows.

Connect a device →

Need pipx?

If you install from the terminal, install pipx once, restart your shell, then run the Guard command.

python3 -m pip install --user pipx && python3 -m pipx ensurepath

Beginner path

Install Guard

Download Guard Desktop from Quick start for Mac, Windows, or Linux. Selecting an AI tool is optional.

Run guided setup

Let Guard find supported harnesses, install managed app commands, connect Guard Cloud if you want shared history, and initialize desktop notifications.

hol-guard init

Confirm protection is active

Review the local daemon, managed harnesses, Cloud connection, and notification readiness from one status view.

hol-guard doctor

Power-user path

Validate before committing and verify your setup with the built-in health check.

Run the health check

hol-guard doctor

Update Guard later - macOS/Linux

set -o pipefail; curl -fsSL https://hol.org/guard/install.sh | bash -s -- --mode refresh

Update Guard later - Windows PowerShell

powershell -NoProfile -ExecutionPolicy Bypass -Command "`$ErrorActionPreference='Stop'; `$scriptPath=Join-Path `$env:TEMP 'hol-guard-install.ps1'; curl.exe -fsSL 'https://hol.org/guard/install.ps1' -o `$scriptPath; if (`$LASTEXITCODE -ne 0) { throw `"curl.exe failed with exit code `$LASTEXITCODE`" }; if (-not (Select-String -Path `$scriptPath -Pattern '^function Install-HolGuard' -Quiet)) { throw 'Installer download blocked or invalid. Open https://hol.org/guard/install for manual steps or use WSL.' }; . `$scriptPath; Install-HolGuard -Mode 'refresh'"

Verify protection

Run these commands to confirm Guard is active and asking before risky actions.

Step 1 — Install and initialize

powershell -NoProfile -ExecutionPolicy Bypass -Command "`$ErrorActionPreference='Stop'; `$scriptPath=Join-Path `$env:TEMP 'hol-guard-install.ps1'; curl.exe -fsSL 'https://hol.org/guard/install.ps1' -o `$scriptPath; if (`$LASTEXITCODE -ne 0) { throw `"curl.exe failed with exit code `$LASTEXITCODE`" }; if (-not (Select-String -Path `$scriptPath -Pattern '^function Install-HolGuard' -Quiet)) { throw 'Installer download blocked or invalid. Open https://hol.org/guard/install for manual steps or use WSL.' }; . `$scriptPath; Install-HolGuard -Mode 'install' -Verify"
hol-guard init

Step 2 — Run the health check

hol-guard doctor

Expected safe output

✓ Guard daemon: running
✓ Intercept layer: active

Expected blocked output (when running a flagged command)

⛔ Action blocked by Guard policy

Platform support

macOS

✓ Supported

Linux

✓ Supported

Windows

Experimental

WSL recommended

Requires Python 3.10+

Verify & manage

Check installed version

hol-guard --version

Update to the latest release - macOS/Linux

set -o pipefail; curl -fsSL https://hol.org/guard/install.sh | bash -s -- --mode refresh

Update to the latest release - Windows PowerShell

powershell -NoProfile -ExecutionPolicy Bypass -Command "`$ErrorActionPreference='Stop'; `$scriptPath=Join-Path `$env:TEMP 'hol-guard-install.ps1'; curl.exe -fsSL 'https://hol.org/guard/install.ps1' -o `$scriptPath; if (`$LASTEXITCODE -ne 0) { throw `"curl.exe failed with exit code `$LASTEXITCODE`" }; if (-not (Select-String -Path `$scriptPath -Pattern '^function Install-HolGuard' -Quiet)) { throw 'Installer download blocked or invalid. Open https://hol.org/guard/install for manual steps or use WSL.' }; . `$scriptPath; Install-HolGuard -Mode 'refresh'"

Uninstall completely

hol-guard daemon stop
pipx uninstall hol-guard

Harness guides

What Guard checks

Agent config files
MCP server declarations
Command and extension surfaces
Previously saved local decisions

What install changes

Wrapper launch entrypoints
Hook entries when needed
Guard-managed local state
Local sensor only; Cloud workspace ties receipts to your account

What connect adds

Shared decision memory across machines
Investigation routing with linked follow-up
Team policy in one workspace
Cloud visibility only when explicitly connected

Get runtime security in under a minute.

Download Guard Desktop, choose your AI harness, and connect Cloud later if you want shared history.

Free and open source. Make your AI ask before destructive commands.

Local protection starts in under a minute

Download Guard Desktop

Local by default

One installer. Local protection. Guard Core still makes every security decision, and Guard Cloud stays optional.

Download Apple silicon 0.1.0-beta.71 Download Linux AppImage Download for Windows

Prefer the command line?

set -o pipefail; curl -fsSL https://hol.org/guard/install.sh | bash -s -- --mode install --verify
hol-guard init

Get runtime security in under a minute.

Download Guard Desktop

Need pipx?

Beginner path

Install Guard

Run guided setup

Confirm protection is active

Power-user path

Verify protection

What if this fails?

Platform support

Verify & manage

Harness guides

Codex

Claude Code

Cursor

Gemini CLI

OpenCode

Hermes

OpenClaw

GitHub Copilot CLI

Antigravity

Kimi

Grok

Pi / Oh My Pi

Zcode

Get runtime security in under a minute.

Download Guard Desktop

Installation FAQ

Get runtime security in under a minute.

Download Guard Desktop

Need pipx?

Beginner path

Install Guard

Run guided setup

Confirm protection is active

Power-user path

Verify protection

What if this fails?

Platform support

Verify & manage

Harness guides

Codex

Claude Code

Cursor

Gemini CLI

OpenCode

Hermes

OpenClaw

GitHub Copilot CLI

Antigravity

Kimi

Grok

Pi / Oh My Pi

Zcode