What is OpenClaw?
OpenClaw is an open-source personal assistant built around one local Gateway, the control plane for sessions, tools, events and channel connections. You talk to it through WhatsApp, Telegram, Slack, Discord, Google Chat, Signal, iMessage, Teams and more than 20 other channels. It also has a Control UI, a CLI, a TUI and companion apps for macOS, iOS, Android, Windows and Linux. Models and agent harnesses, including Claude, Codex and local models, are swappable plugins. Skills come from the ClawHub registry.
It is the most-starred project in this section, at about 393,500 GitHub stars for a repo created in November 2025. The npm package openclaw had about 3.44 million downloads in the week to 29 October 2026. It is MIT-licensed TypeScript, stewarded by the OpenClaw Foundation (a 501(c)(3)), with no paid tier, hosted service or token. Releases are date-versioned and frequent; v2026.10.9 shipped on 29 October 2026.
Is OpenClaw worth it?
OpenClaw is the reference point for always-on personal agents. It reaches more chat platforms than its rivals, has native device apps and a skills registry, and has an install base measured in millions of weekly npm downloads. One Gateway on a laptop or server gives the same assistant to your WhatsApp, Slack and phone, with memory and credentials kept on your own hardware. The project says plainly that by default it phones home only for a daily version check, with anonymous feature statistics opt-in.
The flip side of that reach is power. The README states that tools run on the host for the main session unless you configure sandboxing. An assistant reachable from a chat app can therefore run commands with your user's rights. Inbound messages are untrusted, and DM channels pair unknown senders by default, but every message the agent reads, every web page and every third-party skill is a possible prompt-injection route into that shell.
The security record reflects how much surface there is. The repository has published well over 100 GitHub security advisories. Of the 100 the API returns first, 51 are rated high, 44 medium and 5 low, covering things like media-policy bypasses and credentials exposed in logs. Fixing them in public is to the project's credit. The count still means an install left unpatched for a month is probably exposed to something.
The pace cuts both ways. Releases land every few days, and the issue and pull-request queue stands at about 7,900, so features and fixes arrive fast while configuration and plugin behaviour shift underneath you. Compared with nanobot and Hermes Agent, OpenClaw offers more channels, apps and community skills, at the cost of more moving parts to secure and keep current.
Where it earns its place
A freelance developer who lives in Telegram and WhatsApp
Ask for reminders, file lookups and quick scripts from the phone while away from the desk
Install with the script, run openclaw onboard --install-daemon, and pair the phone's chat accounts. Software is free; model use is the bill, and sandboxing should be on before the agent can touch the home directory from chat.
A five-person agency sharing one assistant in Slack
Have a team assistant that drafts client updates and pulls files from a shared drive
Run the Gateway on a small server as a team deployment, connect Slack, and restrict tools with the sandboxing guide and pairing approvals. Plan time each week to apply releases, given the advisory count.
A security engineer asked to approve OpenClaw on staff laptops
Decide what configuration makes it acceptable
Read the security guide and exposure runbook, require sandboxing, disable unneeded channels and skills, set update.checkOnStart according to policy, and track advisories. The software costs nothing; the review and patching time is the real cost.
Before you commit
- Setup
- curl -fsSL https://openclaw.ai/install.sh | bash (or the PowerShell script), which provisions Node and starts onboarding; or npm install -g openclaw@latest on Node 24.22.1+ or 26.12.1+. Onboarding checks model access, creates the workspace and configures the Gateway; then open the Control UI.
- Integrations
- WhatsApp, Telegram, Slack, Discord, Google Chat, Signal, iMessage, Teams and 20+ more channels; apps for macOS, iOS, Android, Windows and Linux; hosted and local model providers; tools, skills, plugins and the ClawHub registry.
- Data and privacy
- State, memory and credentials stay on your hardware; prompts go to the model and chat platforms you configure. A daily version check is on by default and feature stats are opt-in. Well over 100 GitHub security advisories have been published.
- Cost at scale
- No paid edition. Cost is model usage plus a machine to run the Gateway around the clock, from an existing laptop to a small cloud VM for a team.
- Limits
- Main-session tools run unsandboxed by default. Plain npm install at the repo root is unsupported for source builds (pnpm workspace). Rapid releases mean frequent configuration changes.
What’s good
- 20+ chat channels plus native desktop and mobile apps
- Models and harnesses swap as plugins, including local models
- State and credentials stay on your hardware
- Foundation-stewarded, MIT, no paid tier
What’s not
- Tools run on the host unless you configure sandboxing
- Well over 100 published security advisories
- Very fast release cadence; config and plugins shift
- About 7,900 open issues and pull requests
Best for
Technical users and small teams who want one assistant across their chat apps and devices and will run it sandboxed and patched.
OpenClaw alternatives
OpenClaw: common questions
- Is OpenClaw worth it?
- OpenClaw is the personal agent everyone else is measured against, and it hands a model your shell by default, so it rewards owners who read the security guide first. We rate it 4.3 out of 5.
- How much does OpenClaw cost?
- Free and open source (MIT). No paid tier; you pay your model provider.
- What are the downsides of OpenClaw?
- Tools run on the host unless you configure sandboxing; well over 100 published security advisories; very fast release cadence; config and plugins shift; about 7,900 open issues and pull requests.
- Who is OpenClaw best for?
- Technical users and small teams who want one assistant across their chat apps and devices and will run it sandboxed and patched.
- How much does OpenClaw cost for a team or in production?
- No paid edition. Cost is model usage plus a machine to run the Gateway around the clock, from an existing laptop to a small cloud VM for a team.
- Is OpenClaw safe for company data?
- State, memory and credentials stay on your hardware; prompts go to the model and chat platforms you configure. A daily version check is on by default and feature stats are opt-in. Well over 100 GitHub security advisories have been published.
- What are the best OpenClaw alternatives?
- The closest alternatives we have reviewed are Hermes Agent, nanobot, OpenBot and goose.
Answers checked Oct 31, 2026.
Make OpenClaw? Show this rating on your site
