OpenClaw
Built your way
OpenClaw is an open-source assistant that runs on your own computer and works through the chat apps you already use.
- Cost
- Free softwareplus a server and model costs
- Setup, roughly
- A day or more
- Runs on
- Your own machine
- Works on
- Mac, Windows or Linux
Checked 7 Nov 2026.
You Draft a short summary of this week's open issues for our team channel. Show it to me before you post.
Five issues open. Two need a decision.
- Two orders are waiting on stockDecide: reorder or substituteDecide
- The new starter still needs a loginAsked IT on TuesdayDecide
Our take
Open-source agents like this one give you the most flexibility and room to customise. They also ask more of you, so have someone who can secure it.
Our stake: Navigate helps clients set up agents like this one. Nobody paid for this guide.
What is OpenClaw best at?
- Your own chat appsWhatsApp, Telegram, Slack, Discord, Teams and more than 20 others.
- Any modelBring the model provider you want.
- Custom skillsThe largest skill ecosystem we found.
- Whole teamsShared agents for a department, once it is secured.
See OpenClaw at work
OpenClaw Foundation's own video, on YouTube. Nothing loads from YouTube until you press play.
How much does OpenClaw cost?
Server pricing is a rough guide, from OpenClaw's docs on 7 Nov 2026. Model costs depend entirely on your use. Prices are in US dollars. Checked 7 Nov 2026.
How do I set up OpenClaw safely?
8 steps. Allow a day or more, then a week of checking. We put the approvals on before anything else.
- Use a dedicated machine
- Set a spend limit first
- Keep the gateway private
- Turn on the sandbox
- Give it its own accounts
- Lock the channels
- Give it your house rules
- Know how to stop it
See every step
1. Use a dedicated machine. Run it on a separate machine, virtual machine or rented server (VPS) under its own user, not your main laptop.
2. Set a spend limit first. Before it runs anything, set a monthly spend limit with your model provider, or load only a small prepaid balance.
3. Keep the gateway private. Bind it to the machine itself, and reach it remotely only over a VPN or SSH tunnel. Check this twice in Docker, where OpenClaw's docs say container images are exposed to the network by default.
4. Turn on the sandbox. Turn it on for every agent. It's off by default, so tools run on the host until you do.
5. Give it its own accounts. Use scoped tokens. Never your main email, bank or crypto exchange keys.
6. Lock the channels. Only you and named people should be able to command it.
7. Give it your house rules. Paste these in before it does any real work.
8. Know how to stop it. Stop the OpenClaw service on its machine to halt everything, and revoke its tokens if you need to cut access fast.
Is OpenClaw safe?
Only as safe as the machine you run it on. This is what we would watch.
- Sandboxing is off by defaultTools run on the host for the main session unless you configure sandboxing.
- Marketplace riskResearchers found hundreds of malicious skills on its marketplace in February 2026, and in June 2026 found five that got past its new scans. Read any skill before you install it.
- Treat messages as untrustedAnything that reaches it from outside can carry hidden instructions.
- Upgrades take careBack up before upgrading.
Hundreds of malicious skills found on ClawHub, eSecurityPlanet. Malicious skills that got past the scans, TechRadar
Who should skip OpenClaw?
- You want safe defaults out of the box. Tools run on the host unless you configure sandboxing
- You don't want to run a machine
- You plan to give it broad account access on day one
How has OpenClaw done in tests?
Most tests rank the models you can plug into OpenClaw. A few research benchmarks, such as WildClawBench and Harness-Bench, compare OpenClaw itself with Hermes Agent, Claude Code and Codex, and the best result depends on the model.
- Personal agentsPersonalAgentBench, by micro1. Not tested
- Coding agentsAA Coding Agent Index, by Artificial Analysis. Not tested
- Self-hosted agentsWildClawBench, by InternLM. Tests this product
- Office tasksGDPval-AA, by Artificial Analysis. Not tested
- Running a businessVending-Bench, by Andon Labs. Not tested
- Freelance workRemote Labor Index, by Center for AI Safety and Scale Labs. Not tested
Alternatives to OpenClaw
- Hermes AgentScheduled research and monitoring. Free software.
- Grok BotRepeat jobs you would check anyway. From US$30 a month.
The details
Good to know
Who runs it. You do, on your own machine or a server. It supports macOS, Linux, Windows and WSL2.
Who holds the keys. You do, so treat them with care.
Licence. MIT.
Sources for this page
OpenClaw on GitHub, read 7 Nov 2026
ClawHub malicious skills report (eSecurityPlanet), read 7 Nov 2026
WildClawBench, read 7 Nov 2026
Harness-Bench (arXiv), read 7 Nov 2026
Know better?
Tell us what we've missed at info@navigateagents.com. We'll fix it and credit you if you'd like.
