Guard research desk
Decide with evidence, not vendor claims.
Neutral decision guides and comparisons for AI coding agent security. Each guide states its direct answer, honest limitations, and the sources it was reviewed against — with a visible review expiry.
6 guides3 comparisonsNamed facts expire with each review window
Decision guides
- GuideAI Agent Security LayersAI agent security has four complementary layers: supply chain security (verifying packages before install), runtime guardrails (intercepting actions before execution), audit and evidence (recording what happened), and policy enforcement (defining what is allowed). No single layer is sufficient alone. Runtime guardrails like HOL Guard sit between the AI agent and the tools it wants to run, providing pre-action approval. Supply chain tools verify packages at install time. These approaches work together, not in competition.Reviewed 2026-08-09Read
- GuideMCP Scanning vs Runtime EnforcementMCP scanning and runtime enforcement address different points in the MCP server lifecycle. Scanning evaluates a server definition before it is registered, checking for known patterns, permissions, and configuration risks. Runtime enforcement intercepts tool calls after the server is registered, requiring approval before execution. Scanning is preventive; enforcement is reactive. Both are needed: scanning catches configuration issues, enforcement catches behavioral risks. HOL Guard provides runtime enforcement, not scanning.Reviewed 2026-08-09Read
- GuideRuntime Guardrails and Supply Chain SecurityRuntime guardrails and supply chain security tools address different phases of the software lifecycle. Supply chain tools verify packages at install time, checking for known vulnerabilities, typosquatting, and malicious code. Runtime guardrails intercept the agent when it tries to install, read, or execute something. Supply chain security is preventive (before install); runtime guardrails are reactive (during execution). Both are needed because a verified package can still be used in a risky way, and a runtime guardrail cannot inspect every package before install.Reviewed 2026-08-09Read
- GuideProtect Secrets from AI Coding AgentsAI coding agents can read secrets (.env files, SSH keys, API tokens) if they have file system access. Protection approaches include: environment variable isolation (agents run without secrets in scope), runtime guardrails (intercept file reads before execution), and secret management tools (vaults that agents never touch directly). Runtime guardrails like HOL Guard intercept attempts to read .env, .npmrc, and SSH key files. Environment isolation prevents secrets from being accessible at all. Both approaches are complementary.Reviewed 2026-08-09Read
- GuideSecure MCP for AI Coding AgentsSecuring MCP (Model Context Protocol) servers across multiple AI coding agent harnesses requires a cross-harness approach. Each harness (Codex, Claude Code, Cursor, Gemini CLI, OpenCode) has its own MCP configuration, but the security risks are the same: untrusted servers, excessive permissions, and tool poisoning. A runtime guardrail like HOL Guard provides consistent MCP change interception regardless of harness. Native controls vary by harness. The most robust approach combines native per-harness controls with a cross-harness runtime guardrail.Reviewed 2026-08-09Read
- GuidePrompt Injection ProtectionHOL Guard can reduce impact when influenced reasoning reaches a supported consequential action boundary. On those surfaces it can pause, block, or ask before a supported shell, file, MCP, skill, or package action executes. It does not scrub model context and is not a complete prompt-injection preventer. Model guardrails alone are insufficient. Coverage is harness- and event-specific. A scan is not a safety guarantee. Guard is not a WAF, EDR, or MDM. HOL makes Guard.Reviewed 2026-08-09Read
Comparisons
- ComparisonRuntime Guardrails vs Native Agent ControlsRuntime guardrails and native agent controls both secure AI coding agents, but at different levels. Native controls are built into each harness (Codex, Claude Code, Cursor, Gemini CLI, OpenCode) and vary by implementation. Runtime guardrails like HOL Guard sit between the agent and the OS, providing consistent pre-action interception regardless of harness. The benchmark shows that native defaults allow risky actions; guardrails prevent or prompt. Neither approach is universally superior; native controls are simpler, guardrails are more consistent.Reviewed 2026-08-09Read
- ComparisonAI Coding Agent Security Tools ComparisonAI coding agent security tools fall into three categories: runtime guardrails (HOL Guard), static analysis scanners (Snyk Code, GitHub Advanced Security), and IDE-integrated security (built-in harness controls). Each tool type addresses a different layer. Runtime guardrails intercept actions before execution. Static analysis scans code for vulnerabilities. IDE controls provide per-harness permission prompts. No single tool covers all layers. Compare tools on identical criteria: what they intercept, when they act, what they cover, and what they miss.Reviewed 2026-08-09Read
- ComparisonBest AI Agent Security PlatformsThere is no universal AI agent security platform. The right control depends on the boundary: model traffic, MCP and tool mediation, artifacts, native harness permissions, or runtime actions on a developer machine. Compare these as complementary layers on identical criteria. HOL Guard is local-first runtime policy for supported AI coding-agent action surfaces. It is not a WAF, EDR, MDM, secrets manager, cloud MCP gateway, or universal prompt filter. A scan is not a safety guarantee.Reviewed 2026-08-09Read
Go deeper
Continue into the security hub
Threat explainers, evidence dossiers, and advisories back every recommendation these guides make.