OpenClaw publishes its security roadmap
Published its security roadmap — fs-safe path escape prevention, Proxyline SSRF defenses, ClawHub trust signals, 148 OpenGrep rules. At the same time stated explicitly that this is not a sandbox and that native modules and raw sockets can get around it
Why it matters
A public admission by the maintainers that agent runtimes cannot be defended with language-level guardrails
Source — Primary sources first; secondary reports are labelled “Press”
Officialopenclaw.aihttps://openclaw.ai/blog/where-openclaw-security-is-headingAdded in Week 35, 2026 · See that week