What OpenClaw does
OpenClaw is a personal AI assistant created by Peter Steinberger that started as a weekend project called "WhatsApp Relay" in late 2025 and rapidly grew to over 100,000 GitHub stars. Unlike cloud-only AI assistants, OpenClaw runs on your own hardware — laptop, homelab, or VPS — giving you full control over your data.
The core idea: you message your assistant through the chat apps you already use, and it carries out actions on your computer. Clear your inbox, manage your calendar, check into flights, generate documents, control smart home devices, or run shell commands — all from a WhatsApp message.
How it works
OpenClaw runs as a persistent local process that connects to your chosen language model (Claude, GPT, or open-source alternatives). It maintains memory across sessions, learns your preferences, and can run scheduled tasks in the background. Over 50 integrations are available through ClawHub, its community skill marketplace.
The platform supports full or sandboxed system access — you choose how much control the agent gets. It can browse the web, automate forms, read and write files, and even write its own extensions when it needs a capability it doesn't have yet.
Security considerations
Running an AI agent with system access requires care. OpenClaw's self-hosted model means your data stays on your machine, but misconfigured instances exposed to the internet have been a documented risk — over 40,000 were found publicly accessible in early 2026, with 63% vulnerable to remote code execution. Proper network configuration and sandboxing are essential.
The ClawHub marketplace has also been a vector for attack. In early 2026, security researchers identified 341 malicious skills — roughly 12% of the marketplace at the time — many disguised as popular tools like crypto trackers and Google Workspace integrations. Attackers used prompt injection techniques to embed malicious instructions that appeared benign during installation but activated later, a pattern Palo Alto Networks described as "time-shifted prompt injection." Always audit skills before installing them and stick to verified publishers.
OpenClaw for businesses
For SMBs, OpenClaw represents a new category of tool: an AI agent that sits on your infrastructure and automates tasks across multiple platforms. It's particularly interesting for teams that need automation but want to keep data local. We can help you evaluate whether OpenClaw fits your automation stack — see our AI consultancy.