Registry › Compare › HOL Guard vs REA

HOL Guard vs REA

Both are Grade A and 1.4 points apart, so choose on what you weigh most. HOL Guard leads on supply-chain integrity and transparency; REA leads on adoption.

A HOL Guard 91.3

Open-source antivirus and firewall for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

hashgraph-online/hol-guard · #18 overall · #2 Security & Guardrails · coverage B (3/5)

Choose HOL Guard if supply-chain integrity and transparency matter most.

+5.1Safety / Integrity: 100% of recent commits signed, against 53%
+1.9Transparency: OSSF Scorecard 8.8 against 6.6

A REA 92.7

Reverse engineer anything with agents, from app behavior down to native binaries.

morluto/rea · #8 overall · #1 Security & Guardrails · coverage B (3/5)

Choose REA if adoption matters most.

+7.6Adoption: 362.7k weekly downloads against 6.8k

Where they differ

23.5

Safety / IntegrityHOL Guard +5.1

18.4

16.0

TransparencyHOL Guard +1.9

14.1

12.4

AdoptionREA +7.6

20.0

+1.4

Runtime calibrationREA +0.8

+2.2

2 dimensions identical: Identity 18.0 · Maintenance 20.0 · Full evidence table

An independent, evidence-based trust comparison of HOL Guard and REA, two Security & Guardrails projects in the HVTracker registry. Scores come from public, checkable signals — supply-chain provenance, OSSF Scorecard, maintenance, and adoption — not popularity.

Full evidence

Signal	HOL Guardhashgraph-online/hol-guard	REAmorluto/rea
HVTrust score	91.3	92.7
Evidence grade	A	A
Coverage grade	B	B
Overall rank	#18	#8
Rank in Security & Guardrails	#2	#1
GitHub stars	1.1k	460.2k
Last updated	today	today
Build provenance	Yes	Yes
OSSF Scorecard	8.8 / 10	6.6 / 10
License	Apache-2.0	MIT
Downloads	7k/wk	363k/wk
Trust dimensions (points earned)
Safety / integrity / 25	23.5	18.4
Identity & provenance / 18	18.0	18.0
Transparency / 17	16.0	14.1
Maintenance / 20	20.0	20.0
Adoption / 20	12.4	20.0
Runtime capability surface (full matrix)
MCP server	Implemented	Implemented
External providers	3 — Anthropic, Google Gemini, Multi-provider (LiteLLM)	1 — Anthropic
Requires API keys	No	No
Plugin surface	extensions	plugins
Provenance drift	Match	Match

Open in the live compare tool → HOL Guard profile REA profile More Security & Guardrails →

How to read this: HVTrust (0–100) weighs supply-chain signals (provenance, OSSF Scorecard, signed commits, open license) alongside real-world adoption, scaled by an evidence-confidence factor. Grade bands: A ≥ 80, B ≥ 65, C ≥ 50, D < 50. Signals refresh daily. Full methodology v4.4 →