HOLGuard Desktop

Your command center for local AI protection.

Protect AI tools before they touch sensitive files, commands, credentials, packages, MCP servers, plugins, or skills. Review approvals and evidence in one native app. Guard Cloud remains optional.

Download for macOS

v3.0.140Signed and notarized · Apple silicon · macOS 13+

Other platformsLinuxAppImageWindowsMSI

Intel Mac, another architecture, or prefer a terminal? Use the command line

See every risky action before it runs.

This is the app you open after install. Guard pauses risky actions from your AI tools and waits for your call.

HOL Guard

Guard Desktop review screen showing a paused bun test command from Codex, why it was paused, and approval scope choices.

Approve or block a paused action

When an AI app tries something risky, Guard pauses it first. See exactly what was stopped, then allow it once, remember it for the project, or block it.

Real Guard Desktop screens, shown with demo data.

From download to first approval.

Three steps on the computer you want to protect.

  1. Download the installer

    You get HOL-Guard-Desktop-3.0.140-aarch64-dmg.dmg for macOS. Verify it

  2. Install it

    Open the .dmg and drag HOL Guard Desktop into Applications.

  3. Open the app

    Launch HOL Guard Desktop from Applications. Guard Desktop reviews protection for Claude Code, Codex, Cursor, Antigravity CLI, and OpenCode, and shows what needs your approval. Everything stays on this machine.

Desktop shows the decision. Core makes it.

Desktop is the control surface. Core makes every security decision. The app reads a bounded status view from the local runtime and invokes only fixed, supported actions.

  • No Guard root credentials in browser JavaScript
  • No generic shell, filesystem, or network bridge
  • Fixed native commands with bounded output and timeouts
  • Unknown Core versions fail closed instead of showing protected
  • Cloud connection is optional and visually separate

Verify the installer before you run it.

Check the published checksum for macOS and Linux installers. macOS builds are signed and notarized. Windows installer signed by the verified publisher. This Windows build checks for updates in the app. Using an older Windows beta or a build before 3.0.93? Install the current Windows build from this page first. Older builds cannot rely on in-app self-update.

View checksumsUse the open-source CLI

Check the macOS download

HOL-Guard-Desktop-3.0.140-aarch64-dmg.dmg

shasum -a 256 HOL-Guard-Desktop-3.0.140-aarch64-dmg.dmg

Run it next to the downloaded file, then compare the digest with the published checksums.

Before you install.

Which computers can run Guard Desktop?

Apple silicon Macs on macOS 13 or later, Windows x64, and Linux x86_64 through the AppImage. On an Intel Mac or another architecture, install the open-source CLI instead.

Does the app upload my prompts or code?

No. Desktop telemetry is off by default. Prompts, code, command text, file paths, receipts, policies, and secrets are not uploaded by the app.

Do I need a Guard Cloud account?

No. Guard Core enforces policy on this machine. Guard Cloud is a separate, optional connection for teams that intentionally enable sync.

Which AI tools does it protect?

Claude Code, Codex, Cursor, Antigravity CLI, OpenCode, and other supported AI tools on the same computer.