Your antivirus has never heard of the things that actually reach your machine.
- Hound blocks a binary before it runs, and reads your lockfiles against - 235,577 packages that exist only to be malware. Built for people who - ship software, on the machines they ship it from. + Hound refuses a malicious binary at launch and reads your lockfiles against + 235,577 packages that exist only to attack you — the poisoned + dependency, the model file that runs code when it loads, the install script that + fires before you have imported a line. Built for the machines you ship software from.
$ hound supply-chain ~/src/dashboard - -✘ 2 critical, 1 warning across 1,284 packages - -CRITICAL @vue/cli-plugin-babe1@1.0.2 - node_modules/@vue/cli-plugin-babe1/package.json - Its "postinstall" step runs automatically when the - package is installed — before you have used any of - its code — and it downloads a script from the - internet and runs it immediately. - → Do not install this package. If it is already - installed, rotate any credentials it could read. - -CRITICAL mcp-github-tools@0.3.1 - ~/.config/mcp/servers.json - Handed GITHUB_TOKEN, and its code is downloaded - fresh from the internet on every launch. - -WARNING CLAUDE.md - vendor/awesome-agents/CLAUDE.md - Contains instructions aimed at your assistant - rather than at you. --
The Linux desktop threat is not a Windows virus.
+What compromises a Linux dev machine is not a Windows virus.
- Traditional antivirus databases are overwhelmingly Windows malware — useful if you are a - file server passing infections along, irrelevant to the laptop you write code on. What - actually reaches a developer machine is a dependency, a model file, or a repository. + Every other scanner is looking for the wrong thing. Their databases are overwhelmingly + Windows malware — useful on a file server relaying infections, irrelevant to the laptop + you write code on. What actually reaches a developer machine arrives through a dependency, + a model file, or a repository you cloned. That is what Hound is built to catch.
Dependencies that are malware
-Typosquats, and the newer problem: names an AI invented that somebody then registered. Hound reads your lockfiles — so it catches what will be installed, before the payload runs during installation.
+A typosquat one keystroke off a real package. A name your AI assistant hallucinated that an attacker then registered and filled with a payload. Hound reads the lockfile, so it catches what will be installed — before the install script ever runs.
Refused before it runs
-Real-time protection that denies execve rather than reporting it afterwards. Built on fanotify, with a watchdog that fails open — a bug in Hound must never be able to freeze your machine.
+Stopped at launch, not flagged after
+Most tools tell you about the malware that already ran. Hound denies the execve itself, in about two milliseconds, built on fanotify. A watchdog fails the gate open — a bug in your antivirus must never be the thing that freezes your machine.
Weights that are programs
-A pickle-based .pt or .ckpt executes code the moment it loads. Downloading weights is a code-execution decision, and Hound reads the opcodes before you find out the hard way.
+Weights that are really programs
+A pickle-based .pt or .ckpt runs arbitrary code the moment you load it — torch.load is a code-execution decision most people make by reflex. Hound reads the pickle opcodes and tells you before you find out the hard way.
Your assistant can ask Hound first.
+Your coding assistant can ask Hound before it trusts anything.
- Hound ships an MCP server. Point Claude, Cursor, VS Code or anything else that speaks MCP - at it, and your assistant can check a repository before it installs its dependencies or - starts working in it. + You have handed an AI agent the keys to your machine and pointed it at the open internet. + Hound ships an MCP server, so Claude, Cursor, VS Code — anything that speaks MCP — can + check a repository, a package or a model file before it installs or runs a thing.
The scanner is free. The blocking and the intelligence are not.
+The scanner is free. The blocking and the feed are not.
- A free tier that cannot protect anything is a bad first impression, so real-time file - protection is in the free build. The line is drawn at refusing execution, and at the - threat feed. + Everything that runs on your own machine — scanning, quarantine, the supply-chain and + agent-era checks, the MCP server — is free forever, no account and no expiry. What you pay + for is the part that costs real money to build and serve: refusing execution at launch, and + the full malicious-package feed.
Pro
-One machine, for someone who builds software on it.
-
@@ -640,8 +658,8 @@ footer { border-top: 1px solid var(--line); padding: 40px 0 56px; color: var(--f
- Everything in Pro, on every machine @@ -651,7 +669,7 @@ footer { border-top: 1px solid var(--line); padding: 40px 0 56px; color: var(--f
- Priority support and a named contact
Fleet
-Up to 10 seats, then $15 each. Annual at ten months' price.
+3-seat minimum. Annual billing at 10 months' price.
Over 20 seats? We will quote you.
+Over 25 seats? Volume pricing available.
Privacy Policy
+Last updated: August 21, 2026
+ +Hound is built by people who care about privacy. This policy explains what data the Hound agent and the houndav.com website collect, and what they do not.
+ +1. The Hound Agent
+The Hound agent runs locally on your machine. It does not collect telemetry, usage analytics, or crash reports. It does not transmit the contents of your files, scan results, quarantine events, or any information about your system to us or to any third party.
+The only network request the agent makes is fetching signed definition packs from defs.houndav.com (or a mirror you configure). These requests contain:
+-
+
- Your IP address (visible to the server as with any HTTPS request) +
- The definition version you currently have (so the server can send only what is new) +
- The Hound agent version (sent as a User-Agent header) +
We do not correlate definition update requests to individual users, and we do not build profiles from them. Server access logs are retained for up to 30 days for operational purposes (debugging, abuse prevention) and then deleted.
+You can run Hound fully offline by importing definitions from a file. In this mode, no network requests are made at all.
+ +2. The Website (houndav.com)
+The houndav.com website is a static site. It does not use cookies, tracking pixels, analytics services, or third-party scripts that monitor your behavior. We do not use Google Analytics, Meta Pixel, or similar tools.
+The web server (Caddy) writes standard access logs that include your IP address, the page you requested, and your browser's User-Agent string. These logs are used solely for operational monitoring and are retained for up to 30 days.
+The website loads fonts from Google Fonts. Google's privacy policy governs those requests.
+ +3. Downloads (dl.houndav.com)
+Package downloads are served as static files. The same access logging described above applies. We do not require an account, email address, or any personal information to download Hound.
+ +4. Paid Subscriptions
+If you purchase a Pro or Fleet subscription, we collect the information necessary to process your payment and deliver the service: your email address, billing information, and a license key tied to your account. Payment processing is handled by a third-party provider; we do not store full credit card numbers.
+We use your email address to send you license keys, billing receipts, and critical security notices. We do not send marketing emails unless you explicitly opt in.
+ +5. What We Do Not Do
+-
+
- We do not sell, rent, or share your personal information with third parties for marketing purposes. +
- We do not build behavioral profiles or fingerprint your browser. +
- We do not serve ads. +
- We do not collect or transmit your scan results, file contents, or system configuration. +
6. Data Retention
+Server access logs: up to 30 days. Subscription account data: retained while your account is active and for a reasonable period afterward as required for billing records and legal obligations. You can request deletion of your account data by contacting us.
+ +7. Your Rights
+Depending on your jurisdiction, you may have the right to access, correct, or delete personal data we hold about you. Because we collect very little, in most cases there is little to nothing to disclose. Contact us and we will respond within 30 days.
+ +8. Children
+Hound is not directed at children under 13. We do not knowingly collect personal information from children.
+ +9. Changes
+If we change this policy in a material way, we will update the date at the top and note the change on the website. We will not retroactively reduce your privacy protections without your consent.
+ +10. Contact
+For privacy questions or data requests: privacy@houndav.com
+ +Terms of Service
+Last updated: August 21, 2026
+ +These terms govern your use of the Hound software agent, the houndav.com website, and any related services (collectively, the "Service"). By installing, downloading, or using Hound, you agree to these terms. If you do not agree, do not use the Service.
+ +1. The Software
+The Hound agent is open-source software released under the Apache License 2.0. Your use of the agent source code is governed by that license. These terms govern the Service as a whole, including the definition feeds, paid subscriptions, website, and support.
+ +2. Free Tier
+The free tier provides on-demand scanning, real-time file protection, quarantine, and the MCP server at no cost and with no account required. We may change the features included in the free tier at any time. We will not retroactively remove protections from systems that already have the free tier installed without providing reasonable notice.
+ +3. Paid Subscriptions
+Pro and Fleet subscriptions are billed as described at the time of purchase. All fees are non-refundable except where required by applicable law. We may change pricing for future billing periods with 30 days' notice. If you cancel, your subscription remains active until the end of the current billing period.
+Fleet subscriptions include a specified number of seats. Additional seats are billed as described at purchase. You are responsible for managing seat assignments within your organization.
+ +4. Acceptable Use
+You agree not to:
+-
+
- Reverse-engineer, redistribute, or resell the signed definition packs or threat feeds +
- Use the Service to develop a competing security product that incorporates our definition data +
- Attempt to circumvent license key validation or subscription enforcement +
- Use the Service in any way that violates applicable law +
The open-source agent itself may be forked, modified, and redistributed under the Apache 2.0 license. This restriction applies to the proprietary definition feeds and paid services, not to the agent code.
+ +5. Definitions and Updates
+Definition packs are cryptographically signed. We make reasonable efforts to ensure definitions are accurate, but we do not guarantee that every malicious package, binary, or threat will be detected, or that every detection will be correct. False positives and false negatives are inherent to security software.
+ +6. Disclaimer of Warranties
+THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. WE DISCLAIM ALL WARRANTIES, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
+WE DO NOT WARRANT THAT THE SERVICE WILL DETECT ALL THREATS, PREVENT ALL SECURITY INCIDENTS, OR OPERATE WITHOUT INTERRUPTION OR ERROR. NO SECURITY SOFTWARE CAN GUARANTEE COMPLETE PROTECTION. HOUND IS ONE LAYER OF A SECURITY STRATEGY, NOT A SUBSTITUTE FOR ONE.
+ +7. Limitation of Liability
+TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL HOUND, ITS DEVELOPERS, CONTRIBUTORS, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF DATA, LOSS OF PROFITS, BUSINESS INTERRUPTION, SECURITY BREACHES, OR SYSTEM DAMAGE, ARISING OUT OF OR RELATED TO YOUR USE OF OR INABILITY TO USE THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS RELATED TO THE SERVICE SHALL NOT EXCEED THE AMOUNT YOU PAID US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR FIFTY U.S. DOLLARS ($50), WHICHEVER IS GREATER.
+ +8. Indemnification
+You agree to indemnify and hold harmless Hound and its developers from any claims, damages, losses, or expenses (including reasonable legal fees) arising from your use of the Service, your violation of these terms, or your violation of any third-party rights.
+ +9. The Execution Gate
+The execution gate operates by intercepting process execution at the kernel level using fanotify. It is designed to fail open: if the Hound agent crashes, becomes unresponsive, or is stopped, pending executions are released and the system continues to operate normally. Despite this design, you acknowledge that any software operating at this level carries inherent risk, and you accept that risk by enabling the execution gate.
+ +10. Third-Party Content
+Hound's definition data draws from public sources including the OpenSSF Malicious Packages feed. We are not responsible for the accuracy of upstream data sources. Detection identifiers and threat names may reference third-party research; inclusion does not imply endorsement.
+ +11. Termination
+You may stop using the Service at any time by uninstalling the agent. We may suspend or terminate your access to paid features if you violate these terms or fail to pay applicable fees. The open-source agent will continue to function for local scanning regardless of account status.
+ +12. Changes to These Terms
+We may update these terms from time to time. Material changes will be noted on the website with an updated date. Continued use of the Service after changes constitutes acceptance of the revised terms.
+ +13. Governing Law
+These terms are governed by the laws of the State of Tennessee, United States, without regard to conflict-of-law provisions. Any disputes shall be resolved in the courts of Davidson County, Tennessee.
+ +14. Severability
+If any provision of these terms is found to be unenforceable, the remaining provisions continue in full force and effect.
+ +15. Contact
+Questions about these terms: legal@houndav.com
+ +