1. Why Are People Looking for OpenClaw Alternatives?
OpenClaw (formerly Clawdbot and Moltbot) is an MIT-licensed assistant that runs as a gateway on your machine or a server and connects one AI agent to WhatsApp, Telegram, Discord, Slack, iMessage, Signal and more. It is actively maintained, with a release on November 8, 2026, and it is now run by a US non-profit foundation. The reasons people switch are mostly about risk and weight, not features:
- • Security incidents. CVE-2026-25253 (CVSS 8.8, fixed in v2026.1.29) let a crafted link make the Control UI connect to an attacker's gateway. OpenClaw's own security page reports 1,799 advisory reports since January 2026, 39 with a CVE and 14 confirmed critical, all fixed.
- • Malicious skills. Koi Security found 341 malicious skills out of 2,857 on ClawHub, most from one campaign that installed a macOS info-stealer, and Snyk found critical issues in 13.4% of the 3,984 skills it scanned. OpenClaw's security scope excludes third-party ClawHub skills.
- • Size and setup. A large TypeScript codebase with many dependencies is a lot to audit and to run on a small VPS or a Raspberry Pi.
If you only need to make OpenClaw safer, not replace it, start with our AI agent prompt-injection guide and agent sandboxing guide.
2. OpenClaw Alternatives Compared
| Alternative | By | License | GitHub stars | What's different | Chat channels |
|---|---|---|---|---|---|
| Hermes Agent | Nous Research | MIT | ~262k | A personal agent that writes its own skills | Telegram, Discord, Slack, WhatsApp, Signal, Email |
| nanobot | HKUDS | MIT | ~50k | A small, readable Python assistant | Telegram, Discord, Slack, WeChat, Email, Teams, Feishu |
| ZeroClaw | zeroclaw-labs | MIT / Apache-2.0 | ~33k | Rust rewrite, light on memory | 30+ incl. Telegram, Discord, Slack, Matrix |
| NanoClaw | qwibitai | MIT | ~31k | Every agent in its own container | WhatsApp, Telegram, Discord, Slack, Teams, iMessage, Matrix |
| PicoClaw | Sipeed | MIT | ~30k | Go binary for tiny devices | 19+ incl. Telegram, Discord, LINE |
| Letta | Letta | Apache-2.0 | ~25k | Agents with long-term memory you can inspect | Slack, Telegram, Discord |
| Agent Zero | agent0ai | MIT | ~20k | An agent with its own Linux desktop in Docker | Telegram, WhatsApp, Email integrations |
| IronClaw | NEAR AI | Apache-2.0 / MIT | ~13k | Tools sandboxed in WebAssembly | Web, REPL, webhooks; Telegram/Slack via WASM channels |
| Moltis | moltis-org | MIT | ~3k | Small Rust assistant | Telegram, Discord, Slack, WhatsApp, Signal, Teams |
Star counts are approximate, from each repository in November 2026.
3. The Best OpenClaw Alternatives, One by One
1. Hermes Agent: the closest full replacement
Hermes Agent from Nous Research is the most popular alternative (around 262,000 stars, MIT). It covers the same ground as OpenClaw, with messaging gateways for Telegram, Discord, Slack, WhatsApp, Signal and email, but it is built around an agent that writes reusable skills from completed work. It also ships stricter defaults: dangerous-command approval, sandboxed execution backends and credential filtering. Our Hermes Agent vs OpenClaw comparison goes deeper, and the install guide gets you running.
2. NanoClaw: every agent in its own container
NanoClaw (MIT, around 31,000 stars) was built as a small, auditable answer to OpenClaw's size. Each agent runs inside its own container, so a misbehaving agent can't reach the rest of your system. It connects to WhatsApp, Telegram, Discord, Slack, Teams, iMessage, Matrix and Google Chat, with Gmail via skills.
3. nanobot: small enough to read
nanobot from the University of Hong Kong's HKUDS lab (MIT, around 50,000 stars) is an ultra-light Python assistant. Its pitch is a codebase you can actually read in an afternoon. It supports Telegram, Discord, Slack, WeChat, email, Teams and Feishu, and it is actively maintained (v0.4.0 shipped October 28, 2026).
4. ZeroClaw: a Rust rewrite
ZeroClaw (MIT or Apache-2.0, around 33,000 stars) reimplements the OpenClaw idea in Rust, aiming for low memory use and a single fast binary. It has the widest channel list here after OpenClaw itself, with 30+ channels including Telegram, Discord, Slack and Matrix.
5. PicoClaw: for tiny devices
PicoClaw from Sipeed (MIT, around 30,000 stars) is written in Go and targets small, cheap hardware. It supports 19+ channels including Telegram, Discord and LINE. Its last release was in May 2026, so check recent commits before relying on it.
6. Letta: memory first
Letta (Apache-2.0, around 25,000 stars) grew out of the MemGPT research project and is built for agents that remember over long periods, with memory you can inspect and edit. It is more of an agent platform than a drop-in chat assistant, but it connects to Slack, Telegram and Discord.
7. Agent Zero: an agent with its own computer
Agent Zero (MIT, around 20,000 stars) takes a different route: the agent works inside its own Linux desktop in Docker, with a browser and office apps, which you watch from a web UI. It has Telegram, WhatsApp and email integrations. See Agent Zero vs Hermes Agent vs OpenClaw.
8. IronClaw: tools in a WebAssembly sandbox
IronClaw from NEAR AI (Apache-2.0 or MIT, around 13,000 stars) runs tools and channels as WebAssembly modules, so each one only gets the access you grant it. It offers a web UI, a REPL and webhooks, with Telegram and Slack as WASM channels.
9. Moltis: a small Rust assistant
Moltis (MIT, around 3,000 stars) is the newest and smallest project here, a Rust assistant with Telegram, Discord, Slack, WhatsApp, Signal and Teams support. Promising, but with a much smaller community, so expect rougher edges.
Get one practical AI agents email a week
New agent releases tested, security incidents explained, and whether it's worth switching. One email a week.
By subscribing you agree to receive emails from AI Engineer Insights. Unsubscribe anytime. See our Privacy Policy.
4. Which OpenClaw Alternative Should You Pick?
| If you… | Lean toward |
|---|---|
| Want the closest swap with a strong security story | Hermes Agent |
| Want each agent isolated in its own container | NanoClaw or Agent Zero |
| Run on a Raspberry Pi, old laptop or cheap VPS | PicoClaw or ZeroClaw |
| Want code small enough to read and audit yourself | nanobot |
| Care most about the agent remembering you over months | Letta or Hermes Agent |
| Want untrusted tools locked in a WASM sandbox | IronClaw |
| Want the agent to drive a real desktop and browser you can watch | Agent Zero |
Whatever you pick, the same rules apply: keep the gateway off the public internet, give it the fewest credentials it needs, and treat community skills like any third-party code. Looking at Hermes-style agents too? Our Hermes Agent alternatives roundup and open-source agent frameworks guide cover the wider field.
5. What About Hosted Alternatives?
If you don't want to run a server at all, the trade-off flips: you give up self-hosting for less maintenance. Anthropic's Claude Cowork, bundled with paid Claude plans, handles multi-step tasks on your desktop without a gateway to secure. For coding work specifically, a coding agent such as Claude Code is usually a better fit than a chat assistant; see our best AI coding agents roundup.
Go deeper on OpenClaw alternatives with AI
Ask your next question with this article as context. Opens in a new tab; you can edit the question before sending.
6. Frequently Asked Questions
What is the best OpenClaw alternative?
For most people it is Hermes Agent from Nous Research: it is MIT-licensed, supports the main messaging apps and ships stricter security defaults. If you want maximum isolation, NanoClaw runs each agent in its own container; if you want something tiny, nanobot, ZeroClaw or PicoClaw.
Is OpenClaw safe to use?
It can be, if you keep it updated and harden it, but it has had serious issues in 2026, including CVE-2026-25253 (CVSS 8.8, fixed in v2026.1.29) and hundreds of malicious skills found on ClawHub. Keep the gateway off the public internet, vet every skill, and give it only the credentials it needs.
What is a lightweight alternative to OpenClaw?
nanobot (Python), ZeroClaw (Rust), PicoClaw (Go) and Moltis (Rust) are all much smaller than OpenClaw. ZeroClaw has the widest channel support of the four, nanobot is the easiest to read, and PicoClaw targets tiny devices.
Is Hermes Agent better than OpenClaw?
It depends on what you need. OpenClaw has the most messaging channels and the biggest skill marketplace. Hermes Agent has stricter security defaults and an agent that writes its own reusable skills from the work it completes. Both are free and MIT-licensed.
Are OpenClaw alternatives free?
Yes. Every alternative in this list is open source and free to self-host under MIT or Apache-2.0. You pay only for the model usage behind your API keys, or nothing extra if you run local models.
7. Sources
- • OpenClaw — GitHub · OpenClaw security page
- • OpenClaw advisory GHSA-g8p2-7wf7-98mq (CVE-2026-25253)
- • The Hacker News — 341 malicious ClawHub skills · Snyk — ToxicSkills
- • Hermes Agent · NanoClaw · nanobot
- • ZeroClaw · PicoClaw · IronClaw · Moltis
- • Letta · Agent Zero
Checked against each project's repository on November 10, 2026. These projects move fast; check recent releases and security advisories before you deploy.