# OpenClaw Security: Protect the Agent, Not Just the Model

> OpenClaw security means isolating the bot that holds chat bridges and keys. Firecracker per tenant, BYOK, no anti-harness FUD. 30-day money-back.

- Published: 2026-07-28 · Updated: 2026-07-28 · jurniti
- Canonical: https://www.jurniti.com/blog/openclaw-security

**OpenClaw security** is about the bot that bridges Discord, WhatsApp, Telegram, Signal — and holds keys. Model safety features do not replace runtime isolation.

We host OpenClaw. This post is **protect your agent**, never "don't use OpenClaw."

## What people mean by the query

They have seen:

- Exposed agent instances on the public internet  
- CVE chatter around agent stacks  
- Horror stories of bots with over-scoped tokens  

They want a practical answer: **how do I run OpenClaw without making my chat bridges everyone else's problem?**

## Threat model in one screen

| Asset | Risk if shared-kernel / shared host |
| --- | --- |
| Channel tokens | Cross-tenant or host-level leak |
| Model keys | Same |
| Conversation history | Persist on a disk others can mount |
| Plugins / skills | Malicious or buggy code with shell reach |

Shared Docker density is the wrong default for that table.

## The jurniti posture

[OpenClaw on jurniti](/openclaw):

- **One Firecracker microVM per tenant** — KVM boundary, not a shared kernel story  
- **BYOK** — keys inside the guest; no platform model proxy  
- **Persistent workspace** — state survives restart; snapshot/fork when you need a clean golden box  
- **Public TLS subdomain** for the UI without you babysitting certs  

That is managed agent ops for OpenClaw, not a lecture against the project.

## What we will not claim

- That OpenClaw is "insecure" as a brand  
- That any host makes prompt injection impossible  
- That free forever compute is how serious isolation gets paid for  

## Related

- [Self-host OpenClaw guide](/blog/openclaw-hosting) (informational)  
- [MCP security](/blog/mcp-security)  
- [AI agent security](/blog/ai-agent-security)  

From **$25/mo**, **30-day money-back** on first purchase.

## Frequently asked questions

### Is OpenClaw secure?

OpenClaw is software that talks to messaging channels and models. Security depends on where it runs, how keys are stored, and what the agent can reach — not a single yes/no about the project name.

### How should I secure a self-hosted OpenClaw?

Prefer a dedicated machine or microVM, BYOK, least-privilege channel tokens, updates, and no shared kernel with unrelated tenants. jurniti productizes the microVM path.

### Does jurniti host OpenClaw?

Yes. Managed OpenClaw on a Firecracker microVM — we are not anti-OpenClaw. The product is to protect your agent with isolation.

### Is there a free secured OpenClaw tier?

No free tier. Plans start at $25/mo with a 30-day money-back guarantee on first purchase.