IronClaw
nearai/ironclaw
A Rust rewrite of OpenClaw engineered for hardcore security with WASM sandboxing and capability-based permissions. The 'Reborn' runtime migration is active, showing a privacy-first agent OS with a passionate NEAR-aligned community.
Why choose IronClaw over OpenClaw?
Quick recommendation layer first, deeper analysis second. Use this before diving into metrics and architecture details.
- Rust memory safety with WASM sandbox isolation
- Capability-based permissions mitigate prompt injection
- Privacy-first local execution, no mandatory cloud telemetry
- Smaller skill/plugin ecosystem than OpenClaw's ClawHub
- Requires Rust toolchain build, less beginner-friendly
- Reborn branch migration may cause transitional instability
- Privacy-focused users wanting a local AI assistant
- Rust developers needing extensible agent framework
- Web3/NEAR ecosystem automation tasks
- Want zero-build plug-and-play setup
- Need massive mature plugin registry like ClawHub
- Non-technical users uncomfortable with CLI and cargo
Strong evidence from README, commits, and search indicates active secure development; uncertainty remains on multi-user support and exact telemetry defaults.
AI decision layer last reviewed Jul 13, 2026. Backed by multiple direct signals plus supporting context.
Source window: GitHub metadata, README, recent commits, latest release, Reddit, Brave search
Community sentiment
Security radar
How it\'s evaluated
Isolation from host OS. 10 = Fully virtualized (Docker/Wasm); 1 = Direct local execution.
Safety of external connections. 10 = End-to-end encrypted/Scoped; 1 = Plaintext/Broad access.
Traffic control. 10 = Air-gapped/Offline-first; 1 = Unrestricted internet access.
Privacy level. 10 = Zero telemetry/Zero tracking; 1 = Extensive logging/reporting.
Command safety. 10 = No unsupervised shell; 1 = Raw, unmonitored shell access.
Scale: 10 = maximum safety, 1 = high risk
Star Growth (2026)
ClawVerse news
Latest articles and global buzz
Trending Mentions
Technical showdowns
IronClaw is an Agent OS written in Rust by NEAR AI, positioned as a security-hardened alternative to OpenClaw. Its architecture emphasizes privacy and extensibility through WASM sandbox isolation, capability-based permission models, and prompt-injection defenses, as noted in external summaries. The project is undergoing a significant transition with the 'Reborn' standalone runtime (on the reborn-integration branch) that introduces a separate ironclaw-reborn binary, isolated state roots, and CLI-native model route configuration.
Recent commit activity shows heavy investment in test coverage, CI stability, and migration of core commands (doctor, status, config) to the Reborn framework, indicating a healthy, fast-moving codebase. Features include multi-provider LLM routing (OpenAI, local near.ai endpoints), Slack/Telegram integrations, and a skill/extension system. Compared to OpenClaw, IronClaw trades a larger plug-and-play ecosystem for stronger isolation guarantees and a memory-safe Rust foundation, targeting users who prioritize local-first operation and adversarial robustness.