How do I secure OpenClaw?

Enable authentication on the gateway and never leave auth_mode set to none on a public interface.

EXPOSURE OpenClaw
SEVERITY CRITICAL
PROBE GET :18789/__openclaw/control-ui-config.json

CRITICAL

Is your OpenClaw exposed?

Q: How many OpenClaw instances are exposed?

41,286 OpenClaw instances are reachable in the Shodan index (source: Shodan count · `http.title:"Clawdbot Control","Moltbot Control","OpenClaw Control"`, 2026-08); that is a fingerprint match, not a verified zero-auth count.

Personal agent gateway control UI on the internet: strangers driving your tools and skills.

Scan a host you own → Fix card Census

Why it matters

OpenClaw (also seen as Clawdbot/Moltbot) is a personal AI agent gateway. A public control UI — especially with auth_mode none — lets strangers drive the agent, its tools, and its skills.

How common is it?

41,286 OpenClaw instances are reachable in the Shodan index. Fingerprint match, not a verified zero-auth count · src: Shodan count · `http.title:"Clawdbot Control","Moltbot Control","OpenClaw Control"` · 2026-08

Counts are population-level, from third-party indexes and my own honeypots. I never scan the internet and this page makes no claim about any specific host.

Fix it

The full walkthrough lives on the fix card, kept current in one place:

Full fix card: openclaw-exposed →