Registry › Compare › HOL Guard vs NeMo Guardrails

HOL Guard vs NeMo Guardrails

HOL Guard leads on trust: 91.3/100 (Grade A) against 74.7/100 (Grade B), a 16.6-point gap. HOL Guard leads on supply-chain integrity and provenance; NeMo Guardrails leads on adoption and rests on broader evidence. Note: HOL Guard's evidence coverage is thinner (coverage B vs A) — its score rests on fewer independent signal types.

A HOL Guard 91.3

Open-source antivirus and firewall for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

hashgraph-online/hol-guard · #18 overall · #2 Security & Guardrails · coverage B (3/5)

Choose HOL Guard if supply-chain integrity and provenance matter most.

  • +9.6Safety / Integrity: OSSF Scorecard 8.8 against 7.1
  • +7.2Identity / Provenance: package provenance attested, against none
  • +1.5Transparency: OSSF Scorecard 8.8 against 7.1

NeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems.

NVIDIA-NeMo/Guardrails · #282 overall · #6 Security & Guardrails · coverage A (4/5)

Choose NeMo Guardrails if adoption matters most.

  • +3.6Adoption: 111.5k weekly downloads against 6.8k
  • A vs BEvidence coverage: 4 of 5 independent signal types, against 3

Where they differ

23.5
Safety / IntegrityHOL Guard +9.6
13.9
18.0
Identity / ProvenanceHOL Guard +7.2
10.8
16.0
TransparencyHOL Guard +1.5
14.5
20.0
MaintenanceHOL Guard +0.2
19.8
12.4
AdoptionNeMo Guardrails +3.6
16.0
+1.4
Runtime calibrationHOL Guard +1.7
-0.3

Full evidence table

An independent, evidence-based trust comparison of HOL Guard and NeMo Guardrails, two Security & Guardrails projects in the HVTracker registry. Scores come from public, checkable signals — supply-chain provenance, OSSF Scorecard, maintenance, and adoption — not popularity.

Full evidence

Signal HOL Guardhashgraph-online/hol-guard NeMo GuardrailsNVIDIA-NeMo/Guardrails
HVTrust score 91.3 74.7
Evidence grade A B
Coverage grade B A
Overall rank #18 #282
Rank in Security & Guardrails #2 #6
GitHub stars 1.1k 7.5k
Last updated today 1d ago
Build provenance Yes No
OSSF Scorecard 8.8 / 10 7.1 / 10
License Apache-2.0 NOASSERTION
Downloads 7k/wk 112k/wk
Trust dimensions (points earned)
Safety / integrity / 25 23.5 13.9
Identity & provenance / 18 18.0 10.8
Transparency / 17 16.0 14.5
Maintenance / 20 20.0 19.8
Adoption / 20 12.4 16.0
Runtime capability surface (full matrix)
MCP server Implemented —
External providers 3 — Anthropic, Google Gemini, Multi-provider (LiteLLM) 1 — OpenAI
Requires API keys No No
Plugin surface extensions plugins
Provenance drift Match Unknown
Open in the live compare tool → HOL Guard profile NeMo Guardrails profile More Security & Guardrails →

How to read this: HVTrust (0–100) weighs supply-chain signals (provenance, OSSF Scorecard, signed commits, open license) alongside real-world adoption, scaled by an evidence-confidence factor. Grade bands: A ≥ 80, B ≥ 65, C ≥ 50, D < 50. Signals refresh daily. Full methodology v4.4 →