OpenClaw (first-party repo and docs)Verified
BL-CLM-44.
OpenClaw — Security controls: Gateway auth, DM pairing and allowlists, optional sandboxing (off by default) and an audit CLI; documented as a single-trusted-operator model, not a multi-tenant boundary.
Claim visualization
Actual claim dataBL-CLM-44 / Relationship
Claim evidence map
OpenClaw (first-party repo and docs)
OpenClaw — Security controls: Gateway auth, DM pairing and allowlists, optional sandboxing (off by default) and an audit CLI; documented as a single-trusted-operator model, not a multi-tenant boundary.
SECURITY.md states it is not a multi-tenant boundary and exec runs on host by default. SSO, RBAC and audit-log features were not found on pages read (not a statement they are absent). No certifications checked.
- Where in the source
- SECURITY.md: Trust model, Sandboxing, Named controls; docs.openclaw.ai/gateway/security
- Source organization
- OpenClaw (first-party repo and docs)
- Evidence type
- Vendor documentation
- Source date
- Not shown on the source
- Last verified
- October 13, 2026
- Approved wording
- According to OpenClaw (first-party repo and docs), gateway auth, DM pairing and allowlists, optional sandboxing (off by default) and an audit CLI; documented as a single-trusted-operator model, not a multi-tenant boundary.
- Scope and caveats
- SECURITY.md states it is not a multi-tenant boundary and exec runs on host by default. SSO, RBAC and audit-log features were not found on pages read (not a statement they are absent). No certifications checked.
- Do not infer
- Do not present documented controls as a certification, authorization or independent audit.
← All claimsRecord BL-CLM-44