Carapace
puremachinery/carapace
A hardened Rust rewrite of OpenClaw that prioritizes security defaults and signed WASM plugins. It positions itself as the 'hard shell' alternative for users wary of the January 2026 OpenClaw disclosures.
Why choose Carapace over OpenClaw?
Quick recommendation layer first, deeper analysis second. Use this before diving into metrics and architecture details.
- OS-level subprocess sandboxing and encrypted secret storage
- Rust memory safety with low resource footprint
- Signed WASM plugins with strict capability limits
- Smaller community and fewer ready-made skills
- Younger project (v0.8.0) with partial feature paths
- Less cross-platform mobile support than OpenClaw
- Privacy-focused self-hosters
- Security-conscious developers
- Rust enthusiasts wanting local AI assistant
- Users needing large plugin ecosystem
- Non-technical users
- Those wanting managed cloud service
Repo README and commit history show active maintenance and detailed security model, but Reddit and Brave results are off-topic (gaming/biology) or OpenClaw-centric, leaving external sentiment unverified.
AI decision layer last reviewed Jul 13, 2026. Useful guidance with a reasonable evidence base behind it.
Source window: GitHub metadata, README, recent commits, latest release, Reddit, Brave search
Community sentiment
Security radar
How it\'s evaluated
Isolation from host OS. 10 = Fully virtualized (Docker/Wasm); 1 = Direct local execution.
Safety of external connections. 10 = End-to-end encrypted/Scoped; 1 = Plaintext/Broad access.
Traffic control. 10 = Air-gapped/Offline-first; 1 = Unrestricted internet access.
Privacy level. 10 = Zero telemetry/Zero tracking; 1 = Extensive logging/reporting.
Command safety. 10 = No unsupervised shell; 1 = Raw, unmonitored shell access.
Scale: 10 = maximum safety, 1 = high risk
Star Growth (2026)
ClawVerse news
Latest articles and global buzz
Trending Mentions
-
carapace Carapace armour need to be removed or put on bosses. Tired of spongey annoying enemies not difficult just spongey annoying especially when we have trappers, dogs, grabbers and bombers.
r/darktide Jun 28 -
carapace King Crab Carapace: *pumps four shotguns at the same time*
r/mechwarrior5 Jun 22 -
carapace Scott Jennings' alleged call with Mitch McConnell sparks hilarious internet trend
r/politics Jul 8 -
carapace When we eventually fight Wolfer, he needs to be in a suit of power armor.
r/darktide Jul 6
Technical showdowns
Carapace is a security-focused, open-source personal AI assistant written in Rust, explicitly built as a hardened alternative to OpenClaw/clawdbot. It runs locally on a user's machine and connects to multiple messaging channels (Matrix, Signal, Telegram, Discord, Slack, webhooks, console) while supporting a wide range of LLM providers including Anthropic, OpenAI, Ollama, Gemini, Bedrock, and local Claude CLI.
Its core architecture emphasizes secure defaults: localhost-only binding, OS credential store with AES-256-GCM fallback, OS-level subprocess sandboxing for protected paths, and a signed WASM plugin runtime with resource limits. The project documents a threat-by-threat comparison addressing the January 2026 OpenClaw security disclosures, covering unauthenticated access, plaintext secrets, supply chain risks, prompt injection, and SSRF.
Unlike OpenClaw's broad ecosystem and cross-platform reach, Carapace is younger (v0.8.0) and prioritizes stability on verified paths, with partial features explicitly flagged. It is best suited for technically inclined users who value a hard security shell over plug-and-play convenience.