OpenClaw security tool

Check Your OpenClaw Security Configuration

Catch common configuration risks before putting an agent gateway online. The first version intentionally stays read-only and browser-local.

Runs in your browser

OpenClaw Configuration Security Checker

Paste a sanitized JSON configuration or audit export. The check runs locally in this page; do not paste credentials or secrets.

Static configuration review only. It cannot see firewall rules, proxy configuration, host compromise, runtime behavior or controls omitted from the export.

Free host-readiness checklist · browser only

Is your OpenClaw host ready for 24/7 operation?

Check only items you personally validated. Nothing is submitted or tested remotely. This operational review complements—does not replace—the configuration security checker.

Supported Node.js and OpenClaw versionsRecord installed versions and compare them with official requirementsPrivate gateway access and authenticationVerify bind address, credential configuration and network reachabilityRestricted agent and tool permissionsUse least privilege, pairing/allowlists and safe sandbox boundariesReliable restart and service supervisionTest restart after a reboot and after an unexpected process exitPrivate backup and recovery procedureTest restoring non-secret configuration and persistent agent state securelyHealth, resource and alert checksRecord uptime, memory, disk capacity, errors, alert routing and recoveryAPI and infrastructure cost limitsTrack model API costs separately from VPS, disk, egress and backups

0/7 checks self-reported

review incomplete. Passing every item does not certify the server, validate software, or prove uptime. Test backups, restarts, firewall rules and alerting on the actual host.

Audit sanitized gateway configuration →Compare OpenClaw hosting →

Read the evidence-backed hardening guide →Compare agent security tools →