OpenClaw Security Guard
The missing security layer for your OpenClaw installation.
What it does
Run openclaw-guard audit to scan your OpenClaw setup across 5 categories:
- Secrets Scanner -- Detects API keys, tokens, passwords across 15+ formats + entropy analysis
- Config Auditor -- Checks sandbox mode, DM policy, gateway binding, rate limiting
- Prompt Injection Detector -- 50+ patterns: instruction overrides, role hijacking, jailbreaks
- Dependency Scanner -- npm CVE scanning
- MCP Server Auditor -- Allowlist-based verification of installed MCP servers
Quick start
npm install -g openclaw-security-guard
# Full audit
openclaw-guard audit
# Fix issues automatically (with backup)
openclaw-guard fix --auto
# Launch live dashboard
openclaw-guard dashboard
Features
- Security Score (0-100) -- one number for your security posture
- Auto-hardening -- interactive, automatic, or dry-run modes
- Live dashboard -- real-time monitoring at localhost:18790
- Pre-commit hooks -- catch secrets before they're committed
- Multi-language -- English, French, Arabic
- Zero telemetry -- no tracking, no network requests, 100% local
Links