Registry › Compare › HOL Guard vs REA

HOL Guard vs REA

HOL Guard leads on trust: 92.2/100 (Grade A) against 79.1/100 (Grade B), a 13.1-point gap. HOL Guard leads on supply-chain integrity and transparency.

A HOL Guard 92.2

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

hashgraph-online/hol-guard · #7 overall · #1 Security & Guardrails · coverage B (3/5)

Choose HOL Guard if supply-chain integrity and transparency matter most.

+10.7Safety / Integrity: 98% of recent commits signed, against 3%
+4.1Transparency: OSSF Scorecard 9.6 against 4.8
+2.9Adoption: 9.1k weekly downloads against 142

B REA 79.1

Reverse engineer anything with agents, from app behavior down to native binaries.

morluto/rea · #162 overall · #3 Security & Guardrails · coverage B (3/5)

REA doesn't lead on any scored dimension in this pair.

Where they differ

24.4

Safety / IntegrityHOL Guard +10.7

13.7

16.7

TransparencyHOL Guard +4.1

12.6

20.0

MaintenanceHOL Guard +0.1

19.9

12.1

AdoptionHOL Guard +2.9

9.2

+1.0

Runtime calibrationREA +4.7

+5.7

1 dimension identical: Identity 18.0 · Full evidence table

An independent, evidence-based trust comparison of HOL Guard and REA, two Security & Guardrails projects in the HVTracker registry. Scores come from public, checkable signals — supply-chain provenance, OSSF Scorecard, maintenance, and adoption — not popularity.

Full evidence

Signal	HOL Guardhashgraph-online/hol-guard	REAmorluto/rea
HVTrust score	92.2	79.1
Evidence grade	A	B
Coverage grade	B	B
Overall rank	#7	#162
Rank in Security & Guardrails	#1	#3
GitHub stars	683	421
Last updated	today	1d ago
Build provenance	Yes	Yes
OSSF Scorecard	9.6 / 10	4.8 / 10
License	Apache-2.0	MIT
Downloads	9k/wk	142/wk
Trust dimensions (points earned)
Safety / integrity / 25	24.4	13.7
Identity & provenance / 18	18.0	18.0
Transparency / 17	16.7	12.6
Maintenance / 20	20.0	19.9
Adoption / 20	12.1	9.2
Runtime capability surface (full matrix)
MCP server	Implemented	Implemented
External providers	3 — Anthropic, Google Gemini, Multi-provider (LiteLLM)	—
Requires API keys	No	No
Plugin surface	extensions	—
Provenance drift	Match	Match

Open in the live compare tool → HOL Guard profile REA profile More Security & Guardrails →

How to read this: HVTrust (0–100) weighs supply-chain signals (provenance, OSSF Scorecard, signed commits, open license) alongside real-world adoption, scaled by an evidence-confidence factor. Grade bands: A ≥ 80, B ≥ 65, C ≥ 50, D < 50. Signals refresh daily. Full methodology v4.4 →