OpenClaw intel for builders — signal, not hype.
OpenClaw is an open-source AI agent platform that can autonomously operate your computer — browsing the web, running apps, managing files, and executing multi-step workflows on your behalf. It was originally released as "Clawdbot," later rebranded to Moltbot, and is now known as OpenClaw.
OpenClaw can be installed via npm (npm install -g openclaw), Docker, or by cloning the GitHub repo. See our full installation guide for step-by-step instructions on every platform.
Yes. OpenClaw is fully open-source under the Apache 2.0 license. You can use, modify, and distribute it freely. Some cloud-hosted versions or premium ClawHub skills may have separate pricing.
OpenClaw grants broad system permissions by design, so caution is warranted. The project has integrated VirusTotal scanning for ClawHub skills, but security researchers continue to find malicious packages. Always review a skill's source, limit permissions, and keep OpenClaw updated. See our troubleshooting guide for security tips.
Skills are plugin-like extensions distributed via ClawHub that add new capabilities to your OpenClaw agent — like browsing the web, managing cloud infrastructure, or interacting with APIs. Think of them like npm packages but for agent actions.
In February 2026, OpenClaw creator Peter Steinberger joined OpenAI. OpenClaw remains open-source under a community foundation, and OpenAI has committed to keeping it that way. Read our timeline for details.
OpenClaw competes with platforms like BitBuddies, Adept, and Moltbot/Emergent. Its key differentiators are the open-source model, the ClawHub skill ecosystem, and broad OS-level control. See our alternatives comparison.
Check out our ELI5 explainer for a beginner-friendly overview, our usage & tutorials page for hands-on guides, and our glossary for key terms.
The newest release removes deprecated Qwen portal auth, stops auto-migrating very old configs, moves the bundled xAI provider to the Responses API with x_search, adds MiniMax image generation, unifies Slack/Teams/Google Chat file uploads, and introduces openclaw config schema plus stronger plugin approval hooks. It also ships numerous fixes across Anthropic, OpenAI Codex image tools, WhatsApp, and Telegram delivery. (github.com)
A high‑severity issue in remote onboarding could save an attacker‑controlled discovery URL and capture future gateway credentials; patched in 2026.3.28. (github.com)
An image download path allowed server‑side request forgery; fixed in 2026.3.28. (github.com)
A flaw in Discord exec approvals let non‑approvers resolve pending approvals; patched in 2026.3.28. (github.com)
Inbound Zalo media was fetched to disk before DM/pairing checks; corrected in 2026.3.28. (github.com)
Low‑privilege operators could approve malicious nodes due to scope validation gaps; fixed in 2026.3.28. (github.com)
Active sessions could persist after device/token revocation; addressed in the latest release. (github.com)
This release expands OpenAI-compatible endpoints (/v1/models, /v1/embeddings), overhauls the Tools view to show what an agent can use “right now,” and brings UI/routing improvements for better reliability, alongside beta builds that eased Node version requirements and hardened update flows. (github.com)
Android Central says Tecno’s “EllaClaw” will bring OpenClaw‑based, system‑level automation and cross‑app workflows to future phones, with a public beta “in the coming months.” (androidcentral.com)
- OpenClaw AI Browser Agents + Lossless Claw + Kimi K2.5 + Nvidia + Ollama — URL: `https://www.youtube.com/watch?v=qFILijjQK0Y` — Channel: Julian Goldie SEO — Upload date: March 22, 2026 — A practical demo showing OpenClaw’s new live Chrome control plus memory upgrades and model options, with setup steps and safety tips. (videohighlight.com)
- Building AI Agents that actually work (Full Course) — URL: `https://www.youtube.com/watch?v=eA9Zf2-qYYM` — Channel: Greg Isenberg — Upload date: March 21, 2026 — A long‑form, beginner‑friendly course that builds working agents and covers context files, memory, MCP tools, skills, and migration to OpenClaw. (videohighlight.com)
- Anthropic just BANNED OpenClaw… — URL: `https://www.youtube.com/watch?v=2HiHDIFStzg` — Channel: Matthew Berman — Upload date: March 17, 2026 — Opinionated news take on vendor policy shifts around agents and what it means for OpenClaw users and alternatives. (videohighlight.com)
- Mac Mini Agents: OpenClaw is a NIGHTMARE… Use these SKILLS instead — URL: `https://www.youtube.com/watch?v=LOazLNQnB80` — Channel: Agentic Engineer — Upload date: March 16, 2026 — A critical security‑minded breakdown arguing for a minimal, auditable skill stack while live‑demoing a safer Mac‑mini agent workflow. (videohighlight.com)
- How OpenClaw Works: The Architecture Behind the “Magic” — URL: `https://www.youtube.com/watch?v=CAbrRTu5xcw` — Channel: Damian Galarza — Upload date: March 13, 2026 — A clear architecture explainer that demystifies OpenClaw’s gateway, input types, looping behavior, and security realities. (videohighlight.com)
Tom’s Hardware reports Nvidia is preparing “NemoClaw” for enterprise use and could reveal more at GTC, positioning it against OpenClaw amid rising agent adoption. (tomshardware.com)
AP notes Meta’s purchase of Moltbook, which runs on top of OpenClaw, and adds that OpenAI recently hired OpenClaw’s creator as the agent race accelerates. (apnews.com)
Malwarebytes corroborates the campaign and advises victims to assume compromise if they grabbed installers via Bing in early February, noting Vidar and GhostSocks payloads. (malwarebytes.com)
- ClawdBot Full Tutorial for Beginners: How to Use & Set up ClawdBot (Openclaw) — URL: `https://www.youtube.com/watch?v=a63dUwXUgDo` — Channel: Mikey No Code — Upload date: March 4, 2026 — A beginner-friendly, step‑by‑step install and setup walk‑through covering requirements, Quick Start, Telegram integration, and first workflows with OpenClaw/ClawdBot. (videohighlight.com)
Attackers seeded fake “OpenClaw Windows” installers on GitHub that Bing’s AI surfaced to users, delivering Vidar infostealers and GhostSocks proxy malware before takedown. (theregister.com)
TechRadar reports a high‑severity weakness that allowed websites to brute‑force local gateway auth and seize control, with a fix landing within 24 hours and users urged to update. (techradar.com)
WinBuzzer reports OpenClaw surpassed React to become the most‑starred software repo on GitHub, underscoring explosive community momentum despite mounting security scrutiny. (winbuzzer.com)
- Claude Can Now Do “OpenClaw” Natively (Remote Control + Scheduled Tasks) — URL: `https://www.youtube.com/watch?v=Sg74Di2Yc88` — Channel: Jered Blu — Upload date: March 2, 2026 — A feature comparison and demos showing Claude Code’s remote control and scheduling, framed against OpenClaw‑style use cases. (videohighlight.com)
- OpenClaw Explained: Baby AGI, Security Threats, Mac Mini Became Everyone’s Supercomputer | #237 — URL: `https://www.youtube.com/watch?v=qP73cGLQmCU` — Channel: Alex Finn — Upload date: February 28, 2026 — Fast‑paced explainer that introduces OpenClaw, highlights security trade‑offs, and shares real‑world prototyping tips. (videohighlight.com)
Researchers detailed a localhost WebSocket brute‑force chain that let any website quietly register as a trusted device and control an agent; OpenClaw shipped a fix within a day and urged upgrades. (prnewswire.com)
Microsoft’s security team warns the agent’s design blends untrusted instructions with executable actions under valid credentials, recommending strict isolation if tested at all. (techradar.com)
Versions prior to 2026.2.13 logged unsanitized headers, creating a downstream AI‑log poisoning vector if logs feed LLMs or automation; the issue was patched in 2026.2.13. (esecurityplanet.com)
Axios highlights Moltbook’s rapid growth to millions of agent accounts built on OpenClaw and surveys the security risks of agents acting with real autonomy across systems. (axios.com)
Tom’s Hardware covers researchers finding multiple crypto‑themed “skills” on ClawHub that posed as trading/wallet tools but aimed to deliver malware to Windows and macOS users. (tomshardware.com)
OpenClaw is an open-source AI agent platform that can autonomously operate your computer — browsing the web, running apps, managing files, and executing multi-step workflows on your behalf. Originally released under a different name, OpenClaw has rapidly become one of the most talked-about projects in the AI-agent space thanks to its extensible "skill" system (distributed via ClawHub) and its ability to chain actions across local and cloud environments.
Peter Steinberger releases Clawdbot, a personal AI-agent experiment that can control a desktop computer autonomously. The project garners early attention from the hacker community.
Word-of-mouth spreads fast. The project rebrands to Moltbot as download counts surge. Developers start building third-party "skills" — plugin-like extensions that chain agent actions.
A companion product, Moltbook, is teased for notebook-style agent workflows. Soon after, the entire project rebrands again to OpenClaw, emphasizing its open-source ethos and the new ClawHub skill marketplace.
Critical vulnerabilities surface — including CVE-2026-25253 (one-click RCE via Control UI) — prompting rapid patches and VirusTotal integration for ClawHub skills. Security researchers begin auditing the ecosystem extensively.
Reports emerge that multiple Big Tech companies, including OpenAI and Google, are in discussions about acquiring or integrating OpenClaw. The AI-agent space heats up as competitors race to match OpenClaw's capabilities.
OpenClaw creator Peter Steinberger joins OpenAI. Crucially, OpenClaw remains open-source under a community foundation — OpenAI commits to supporting, not acquiring, the project. The Verge, Financial Times, and Business Insider all cover the story.
A news hub that aggregates the latest OpenClaw updates, security advisories, release notes, and community chatter. We focus on signal over hype.
No. This is an independent publication. We are not affiliated with, endorsed by, or sponsored by the OpenClaw project or its maintainers.
ClawHub is OpenClaw's community marketplace for "skills" — plugin-like extensions that add capabilities to the agent. Think of it like a package registry (npm, PyPI) but for agent actions.
OpenClaw grants broad system permissions by design. The project has integrated VirusTotal scanning for ClawHub skills, but security researchers continue to find malicious packages. Always review a skill's source, limit permissions, and keep OpenClaw updated.
Content is refreshed periodically based on news flow. Check the "Last updated" timestamp at the top of the news section.
A critical remote-code-execution bug in OpenClaw's Control UI that allowed one-click token exfiltration via a malicious link. It was patched in v2026.1.29 (January 30, 2026). All users should update immediately.
Not yet — we're a static v0 site. Future versions may accept community submissions. For now, all content is manually curated and reviewed before each update.
We aggregate recent coverage from major tech and security outlets, then compile it into a structured feed.