openclaw.

CVE-2026-25253 let one crafted link take over an OpenClaw gateway, and The Register counted more than 135,000 instances reachable from the internet. What happened, what was exposed, and what to do.

Hermes Agent, Nanobot, NanoClaw, IronClaw and ZeroClaw compared on setup, security model, model support and cost: which OpenClaw alternative fits your threat model.

Migrate from OpenClaw to Hermes Agent with hermes claw migrate: preview, import, what gets archived, where commands run, re-pairing, retiring OpenClaw.

OpenClaw's history from sources: Clawdbot in late 2025, two renames in January 2026, CVE-2026-25253, 135,000 instances exposed, its creator's move to OpenAI and the OpenClaw Foundation of July 2026.

Comprehensive landscape report on self-hosted AI agents in 2026: ecosystem map, vendor analysis, security posture, hosting economics, model integrations and the regulatory environment. Covers OpenClaw, Hermes, Nanobot, NanoClaw, IronClaw, ZeroClaw, Moltworker and the wider category.

Securing an AI agent you host yourself: threat model, sandbox tiers, where credentials belong, Tailscale or SSH instead of a public port, logging, incident response.

Pick the right self-hosted AI agent in 2026 with a six-question decision tree. Covers OpenClaw, Hermes Agent, Nanobot, NanoClaw, IronClaw, ZeroClaw, Moltworker. Practical, vendor-agnostic, no-bullshit.

Third-party add-ons around OpenClaw and Hermes Agent picked up CVEs in October 2026: an unauthenticated prompt-injection port, a skill that deletes your home directory, a config injection that runs shell commands.

Self-hosted AI agent at the centre of the January 2026 security crisis. Its tool sandbox is off by default: the main session's tools run on the host until you configure one.

Small TypeScript agent (MIT) built on Anthropic's Claude Agent SDK. Every agent runs in its own Docker container, on macOS, Linux or Windows through WSL2.

Rust agent from NEAR AI, MIT or Apache-2.0. Untrusted tools run in a WebAssembly sandbox with declared capabilities, and secrets are injected outside them.

Cloudflare's experimental package that runs OpenClaw inside a Cloudflare Sandbox container behind a Worker. Needs the Workers Paid plan.

Managed assistant built on OpenClaw, in Telegram and Discord: $20 a month self-serve, or $100 with setup and a monthly call. AI credits included.

Managed OpenClaw hosting, live on Telegram (Discord and WhatsApp "Soon"). $19 or $49 a month, $14 or $37 billed yearly. Your own model API key.

Managed OpenClaw hosting for Telegram, Discord and WhatsApp. No free plan: $20, $49 or $200 a month, with model usage bought separately as credits.