# BulwarkAI

> Security hardening for OpenClaw deployments. Free open-source security dashboard + paid expert services.

## About

BulwarkAI provides security tools and services for OpenClaw (open-source AI agent platform, 221K+ GitHub stars). Founded by a platform security architect with 20+ years experience in silicon, firmware, and hardware root of trust.

## Free Tool: openclaw-security-dashboard

Open-source security scanner for OpenClaw deployments. MIT licensed. 100% local — nothing leaves your machine.

- Install: `npx openclaw-security-dashboard`
- GitHub: https://github.com/piti/openclaw-security-dashboard
- npm: https://www.npmjs.com/package/openclaw-security-dashboard
- Dashboard page: https://bulwarkai.io/dashboard

Checks 8 security domains: gateway security, skill supply chain (1,184+ malicious IOCs), config hardening, identity integrity, persistence & cron, session analysis, MCP security, and built-in audit integration. Letter grade A+ through F with auto-fix. v1.5 adds credential flow mapping, SSRF detection, sandbox scoring, accept risk, capability drift detection, network policy generation, and tamper-evident audit trail.

## Paid Products

- Security Blueprint ($97): Complete hardening playbook — 5 guides, 4 checklists, hardened configs, IOC database, monitoring scripts
- Hardening Report ($297): Personalized security review with credential flow analysis, memory hygiene audit, sandbox assessment
- Done-For-You Hardening ($1,997): Full hands-on hardening, testing, documentation, 30-day check-in

## Blog

Technical security content about the OpenClaw ecosystem:

- [openclaw-security-dashboard v1.5: One Command, Full Coverage](https://bulwarkai.io/blog/openclaw-security-dashboard-v1.5)
- [Your OpenClaw API Keys Are Leaking — 5 Levels of Fix](https://bulwarkai.io/blog/openclaw-api-key-security)
- [You Ran openclaw security audit. Here's the Other 40%.](https://bulwarkai.io/blog/openclaw-security-audit-the-other-40-percent)
- [The 40% Gap in OpenClaw Security](https://bulwarkai.io/blog/openclaw-security-gap)
- [SecureClaw vs BulwarkAI](https://bulwarkai.io/blog/secureclaw-vs-bulwarkai)
- [OpenClaw Hardening Checklist](https://bulwarkai.io/blog/openclaw-hardening-checklist)
- [ClawHavoc Campaign Analysis](https://bulwarkai.io/blog/clawhavoc-analysis)
- [Is OpenClaw Safe for Business?](https://bulwarkai.io/blog/is-openclaw-safe-for-business)
- [OpenClaw Docker Security Myth](https://bulwarkai.io/blog/openclaw-docker-security)
- [Government and Enterprise Security Warnings](https://bulwarkai.io/blog/openclaw-security-warnings-governments-enterprises)

## Contact

- Website: https://bulwarkai.io
- X/Twitter: https://x.com/BulwarkAI
- LinkedIn: https://linkedin.com/company/bulwarkai
- GitHub: https://github.com/piti
- Email: peter@bulwarkai.io