ACTIVE THREAT: 341 malicious skills found on ClawHub · CVE-2026-25253 patched Jan 30

OpenClaw is powerful.
Unsecured, it's a
liability.

AI agents running on your business systems need more than defaults. BulwarkAI gives SMBs the hardening kits, skill audits, and security frameworks built by a platform security architect with 20+ years hardening systems at the hardware level.

11.9% ClawHub skills malicious Koi Security audit, Feb 2026
7,000+ Malware downloads before detection ClawHavoc campaign
8.8 CVSS score — Jan 30 CVE CVE-2026-25253
$800 Monthly API cost — unmonitored agents User reports, Feb 2026

OpenClaw has three critical
gaps no one is solving for business.

☠️
Malicious Skills in the Wild

ClawHub's marketplace had 341 confirmed malicious skills distributing Atomic Stealer macOS malware and keyloggers. 7.1% of skills leak API keys. Anyone with a GitHub account can publish.

SOURCE: Koi Security + Snyk, Jan 2026
🔓
Palo Alto's "Lethal Trifecta"

Unvetted access to private data + exposure to untrusted web content + ability to send external communications while retaining memory. The combination is catastrophic for any business deployment.

SOURCE: Palo Alto Networks warning, Feb 2026
💸
Runaway API Costs

Power users burning $30–$800/month in LLM API calls. No cost controls. No guardrails. An agent with broad permissions and no budget limits will drain your account while you sleep.

SOURCE: User reports + AgentPuter, Feb 2026

Four tiers. One goal:
deploy safely and stay that way.

Tier 01
Security Kit
$97
one-time · instant delivery
  • CVE-2026-25253 mitigation guide
  • OWASP Agentic Security Top 10 checklist
  • Skill vetting framework (30-point audit)
  • API cost control configuration
  • Curated vetted skill recommendations
  • Prompt injection defense patterns
Get Security Kit
Tier 03
Security Audit
$297
async · 48hr delivery
  • Submit your deployment via form
  • Custom hardening report
  • Skill-by-skill vulnerability assessment
  • Permission scope review
  • Prioritized remediation plan
  • Written by a platform security architect
Book Audit
Tier 04
Business Setup
$497
async · 72hr delivery
  • Detailed intake form
  • Custom hardening plan for your stack
  • Vetted skill stack built for your workflow
  • Configuration files ready to deploy
  • Recorded walkthrough (Loom)
  • 30-day follow-up included
Get Business Setup

No calls. No fluff.
Just results in your inbox.

01
Choose your tier

Pick the package that matches your situation — starter kit or full business setup.

02
Submit your details

For audits and setups, fill a short intake form about your deployment and workflow.

03
We get to work

A platform security architect reviews your setup against current threat intelligence.

04
Delivered to your inbox

48–72 hours. Written report, config files, and a Loom walkthrough where included.

Security at the
hardware level.

BulwarkAI was built by a platform security architect with 20+ years hardening systems from silicon to software. The kind of experience that comes from building security into chips, not patching it onto applications.

When CrowdStrike, Palo Alto Networks, and Cisco are issuing warnings about OpenClaw, you want someone who's spent two decades thinking about exactly these attack surfaces — not someone who learned about AI agents last month.

🔩
Hardware-level security background — Root of Trust architecture, secure boot, hardware attestation
🌐
Industry contributor — founding contributor to open-source hardware security initiatives
🤖
AI-native practitioner — running OpenClaw in production, testing every recommendation before publishing
bulwark-audit — openclaw security scan
# Running BulwarkAI security audit...
$ bulwark scan --full --profile=smb

Scanning 14 installed skills...
✓ gog (google workspace) — CLEAN
✓ firecrawl — CLEAN
⚠ seo-engine-v2 — UNVERIFIED publisher
✗ analytics-pro — MALICIOUS (keylogger)
✗ email-blast — API key exfiltration

Checking gateway configuration...
✗ WebSocket auth — CVE-2026-25253 exposed
⚠ No spending limits configured
⚠ Shell access unrestricted

$ bulwark harden --apply
✓ CVE patched
✓ Malicious skills quarantined
✓ Spend cap: $50/month applied
✓ Permission scope reduced

Audit complete. 4 critical issues resolved.

Common questions.

The Security Kit and Vertical Packs are written for business owners, not engineers. Step-by-step instructions, no command line required for the recommendations. The Business Setup tier is specifically designed for non-technical users — we give you everything configured, not just advice.
Yes. All kits are updated for the current OpenClaw release (formerly Moltbot/Clawdbot). We track the GitHub repo actively and update documentation when the gateway architecture changes.
The Audit ($297) reviews your existing deployment and tells you what's wrong and how to fix it. The Business Setup ($497) is more comprehensive — we build a complete configuration for your specific business, including skill selection, instruction files, and cost controls. It includes the Loom walkthrough and 30-day follow-up.
No. BulwarkAI is an independent security service. We are not affiliated with OpenClaw, its creator, or OpenAI. We're practitioners who use OpenClaw in production and built this because the security gap is real and no one credible was addressing it for SMBs.
Fair concern. The security fundamentals — prompt injection defense, skill vetting, permission scoping, cost controls — are durable regardless of how OpenClaw evolves. Tactical guides will be updated. Anyone who purchases gets access to updated versions.

Your agent is running.
Is it safe?

Start with the $97 Security Kit and know within the hour what's exposed in your deployment.