Index / IronClaw · updated Sep 3, 2026
IronClaw
nearai/ironclaw · healthy · rank 12 of 43 by stars
A security-first Agent OS in Rust from NEAR AI that keeps all data local and encrypted with zero telemetry. Heavy investment in sandboxing, a polished WebUI, and an extension ecosystem make it one of the most production-grade OpenClaw alternatives.
Facts
Repository
Runtime
Posture
Community
Security breakdown
Composite 92 / 100 · how these are scored
higher is safer
higher is safer
higher is safer
higher is safer
higher is riskier
Model access
Read from the repository, not written by a model · 143 files examined
7 providers · runs locally · gateway support
Pinned models
gemini-2.5-flash released 2025-06-17 — 15 months old (from the public model catalogue)
Pin last edited 8 days ago
Several defaults are pinned; the project picks one per provider rather than shipping a single default.
Evidence
Decision
Why choose IronClaw over OpenClaw?
Why choose this
- Rust core with stronger memory safety and lower footprint
- Encrypted local credential store and no telemetry by design
- Guided onboarding installer with background service setup
Tradeoffs
- Smaller skill/plugin ecosystem than OpenClaw's registry
- Younger project with less third-party documentation
- Some features tied to NEAR ecosystem incentives
Best fit
- Privacy-conscious users wanting a local-first assistant
- Teams needing encrypted credential storage and auditability
- Rust shops wanting a production-grade agent runtime
Avoid if
- You want a zero-setup hosted SaaS assistant
- You need a huge third-party plugin marketplace today
- You are on unsupported platforms without WSL
Strong evidence from README, release cadence, and dense recent commit history showing active, security-conscious development. Community sentiment is positive but partly self-hosted on its own subreddit, so independent validation is thinner.
AI layer reviewed Aug 24, 2026 · how this is written
Star activity
12,602 stars today
Overview
IronClaw is an Agent OS written in Rust by NEAR AI, positioning itself as a security- and privacy-first personal AI assistant. Its core philosophy is that your assistant works for you: all data is stored locally and encrypted, credentials live in an encrypted store, and there is no hidden telemetry or data harvesting. Installation is streamlined via a tagged installer script and an ironclaw onboard guided setup that provisions configuration, LLM provider keys, and a WebUI login token, with background service support on macOS and Linux.
Architecturally, IronClaw is a multi-crate Rust workspace with a React/TypeScript WebUI, a durable per-recipient notification inbox, sandboxed execution (including Docker-based user sandboxes with egress controls), and an extension system for channels like Telegram. Recent commits show heavy investment in design-system tooling (Storybook), notification reliability, and rigorous CI gates, indicating mature engineering discipline.
Compared to OpenClaw, IronClaw trades ecosystem breadth for a hardened, auditable core: it emphasizes sandboxing, encrypted local state, and transparency over a large skill marketplace. It is a strong fit for users and teams who prioritize data sovereignty and want a polished, actively maintained self-hosted agent platform.