Free check · OpenClaw

Check your OpenClaw version before you upgrade

Paste openclaw --version and your security audit. In plain English, see which published security fixes your version is missing and which breaking changes sit between it and the latest release. Free and look-only.

What we check

Your version against public advisories and release notes, then every finding from OpenClaw's own audit, plus our key-theft and surprise-bill checks.

What we don't

We don't contact your agent, log in, or test anything live. It's a point-in-time, look-only review, not a penetration test.

Only your own agent

Only paste output from agents you run or are authorized to check. See the limits of the check.

openclaw security audit --deep
openclaw --version

No OpenClaw to hand? See how it works on a realistic example audit first. It's clearly marked as a sample and can't be bought.

The audit output doesn't include your version. Add it to run the known-vulnerability and upgrade checks. Without it, we skip those checks and list them under "What we didn't check".

Nothing secret-looking found yet.

How it works

  1. Your browser hides values that look like API keys, tokens and passwords, and shows you how many it hid.
  2. We read OpenClaw's findings and explain each one in plain English, in order of urgency.
  3. We add our own checks: keys stored in plain text or reachable by skills, spend-limit and heartbeat risks, and known vulnerabilities and breaking changes for your exact version.
  4. You get red, amber or green, framed as what we checked and found at a time in UTC. If something was missing, the result is never green and checkout stays closed.

Full details: how our check works.