From the source
A trusted group of maintainers, including security engineers from NVIDIA and Tencent, volunteer their time to review reports, investigate issues, ship fixes, and strengthen the project as it evolves.
A lot of this work happens behind the scenes, and we want to make more of it visible and easier to understand.
This week, we rolled out a security page for all to see where OpenClaw security stands, what we’re working on, what we’ve fixed, and how to reach us when something needs our attention.
The page brings together information that previously lived across GitHub, documentation, blog posts, and individual advisories.
It includes: Current security status and advisories, including whether there are any active security bulletins.
The numbers behind vulnerability reports.
Since January, 722 fixes have been published.
Fourteen reports resulted in confirmed critical vulnerabilities; all of them had been fixed and disclosed.
Where fixes are happening, from gateway authentication and scopes to sandboxing, approvals, connectors, filesystem handling, plugins, skills, and network access.
…
