Review draws on 6 primary sources (vendor announcements, named publications, benchmark results) and is updated continuously as the product changes. See the methodology page for the full research process.
TL;DR: OpenClaw is the open-source AI agent framework that became the most-starred repository in GitHub history — 347,000+ stars by April 2026, after going viral late January and surging from 9K → 60K stars in days. Free, self-hostable, runs on macOS/iOS/Android. Communicates with you across 24+ messaging platforms (Telegram, Slack, Discord, WhatsApp, Signal, etc.) — your AI agent lives in the apps you already use. 13,000+ community skills via the ClawHub marketplace. Multi-agent orchestration: build hierarchies like Manager → Researcher → Writer → Editor. v2026415 ships native Claude Opus 4.7 integration and Google Gemini TTS. The real caveat: security. 9 CVEs disclosed in 4 days in March 2026 (one scoring CVSS 9.9); Bitdefender found 341 malicious skills in an initial ClawHub scan, growing to 824+ confirmed malicious packages — roughly 20% of the marketplace ecosystem. Production-grade for security-mature operators; risky for casual users running random skills.
What OpenClaw is in 2026
OpenClaw is the open-source AI agent that broke through the noise in late January 2026 and didn’t stop. The lobster-mascot project went from ~9,000 GitHub stars to 60,000 in a few days, then crossed 100K, 200K, and 347K by April. By any measure of OSS adoption — stars, contributors, skill count, deployment volume — it’s the breakout AI tool of the year.
The product idea is unusually clean: your AI agent should live in the apps you already use, not in another browser tab. Install OpenClaw on your Mac (or iOS, or Android); connect it to Telegram, Slack, Discord, WhatsApp, Signal, or any of 24+ supported messaging platforms; talk to it the way you talk to a person. It can read your files, run shell commands, browse websites, send emails, control APIs, and — via the ClawHub skill marketplace — perform 13,000+ specialized tasks.
The 2026 version (v2026415 and later) adds:
- Native Claude Opus 4.7 integration — direct routing for the highest-quality reasoning
- Google Gemini TTS — voice output via Google’s voice models
- Multi-agent orchestration layer — define complex agent hierarchies. A Manager Agent delegates to multiple Researcher Agents, which feed Writer Agents, which submit to Editor Agents for final review. This is the architectural pattern the agent-research community has been promising for two years; OpenClaw shipped it production-ready.
- Voice replies — chat-scoped auto-TTS controls, personas, per-agent overrides, expanded provider coverage (Azure Speech, Xiaomi, Inworld, Volcengine, ElevenLabs v3, Local CLI)
- Live Canvas — render UI you control, agent-driven
The design philosophy is breadth of integration over depth of any single capability. Where Hermes Agent maximizes learning depth and Manus maximizes autonomous task execution, OpenClaw maximizes “this agent talks to me through every channel I already use.”
Pricing
Free. Open-source. Self-hostable. Apache 2.0–style license. No subscription. No credit system.
Your costs come from:
- The LLM API key you bring — OpenClaw routes to Claude, GPT-5, Gemini, local models via Ollama, and 20+ other providers. Cost depends entirely on your model choice and usage. Heavy users on Opus 4.7 might pay $50-200/month in API costs; users running Llama or DeepSeek locally pay $0 marginal.
- Hosting — runs on your own machine. If you want it always-on for incoming Telegram messages, you’ll either keep your laptop awake or run it on a small VPS ($5-15/month).
- Premium skills (optional) — most ClawHub skills are free; a small subset are paid by their authors.
For most personal users: $5-30/month all-in is realistic.
What OpenClaw does well
Messaging-platform-native UX. This is the killer insight that made OpenClaw viral. You don’t open another tab to talk to your agent — you message it on Telegram while you’re walking to lunch. The “AI agent in the apps I already use” pattern is genuinely the right product shape for personal AI agents.
The skill ecosystem is unmatched. 13,000+ community-built skills cover almost any task you can name. Integrations with Notion, Linear, GitHub, Stripe, calendar apps, file systems, browser automation. The breadth advantage over commercial competitors (Lindy, Manus) is real.
Multi-agent orchestration is genuine. The Manager/Researcher/Writer/Editor pattern works. You can spin up a “research team” of specialized sub-agents and they actually coordinate. Most agent frameworks (CrewAI, LangGraph, AutoGen) require significant engineering to set this up; OpenClaw lets non-technical users define hierarchies via configuration.
Self-hostable + local execution. Privacy-sensitive users can run OpenClaw entirely on their own machine with local LLMs via Ollama. No data leaves the device.
Active community + velocity. The combination of 347K+ stars and active contributor base means features ship constantly. v2026415 was the most recent major release at this writing; expect another in 4-6 weeks.
Free + open source. Apache 2.0 licensing means anyone can audit the code, fork the project, contribute. Compared to commercial agent platforms ($20-200/month), the cost difference is real.
24+ messaging platform support. Telegram, Slack, Discord, WhatsApp, Signal, Microsoft Teams, Mattermost, plus voice channels. Wherever your conversations live, OpenClaw can listen and respond.
Where OpenClaw falls short — and the part the hype cycle has been quieter about
Security posture is genuinely concerning. This is the most important thing for any OpenClaw evaluation in April 2026.
- 9 CVEs disclosed in 4 days in March 2026. One scored CVSS 9.9 — that’s a critical-severity remote code execution vulnerability. The community responded fast (patches shipped within 48 hours) but the rate of high-severity vulnerabilities suggests rapid-growth code that hasn’t been hardened.
- ClawHub marketplace has a malicious-skill problem. Bitdefender’s audit found 341 malicious skills in an initial scan of 2,857 entries, rising to 824+ confirmed malicious packages — roughly 20% of the marketplace. These are skills that exfiltrate data, plant backdoors, or perform supply-chain attacks. The community is working on review and signing infrastructure, but as of late April 2026 the marketplace is not safe to install from blindly.
What this means for actual users:
- ✅ Safe-ish for technical users running open-source skills they’ve personally reviewed or trust the author of
- ⚠️ Caution for casual users installing whatever sounds useful from ClawHub — you’re statistically likely to install at least one malicious skill if you install many randomly
- ❌ Not yet safe for production deployments handling sensitive data without dedicated security engineering
Setup complexity for non-technical users. Despite the messaging-app UI being approachable, the install process — bringing your own LLM API key, configuring messaging-platform OAuth, picking which skills to enable — is more involved than commercial alternatives like Lindy or Manus.
LLM API costs add up. “Free” is the framework; the actual model calls cost money. Heavy Opus 4.7 users on OpenClaw can hit $100+/month easily.
Community support varies wildly. When something breaks at 11 PM, you’re often on your own. Commercial agent platforms ship dedicated support; OpenClaw ships GitHub Issues and a Discord.
Skill quality is highly variable. Of the 13,000+ skills, maybe 200-500 are production-grade. The long tail is hobbyist work, demos, or (per Bitdefender) actively malicious.
OpenClaw vs the alternatives
For breadth of messaging-platform integration: OpenClaw > everything. The 24+ platform list is genuinely category-leading.
For depth of self-improving learning: Hermes Agent > OpenClaw. Hermes is built around persistent memory and skill auto-generation; OpenClaw’s learning is shallower.
For autonomous task execution (cloud): Manus AI > OpenClaw. Manus is task-focused; OpenClaw is conversation-focused.
For polish and managed-service UX: Lindy > OpenClaw. Lindy ships managed infrastructure and dedicated support; OpenClaw is BYO-everything.
For production enterprise CX: Sierra, Decagon > OpenClaw. Enterprise CX needs SOC 2, audit logs, professional support — OpenClaw’s open-source posture isn’t there yet.
For free + open-source agent frameworks (developer-focused): OpenClaw, Hermes, CrewAI, LangGraph, Letta all compete. OpenClaw wins on messaging-platform reach; CrewAI wins on production-engineering maturity; Letta wins on persistent-memory architecture.
For security-conscious users: Hermes > OpenClaw today. Hermes has zero agent-specific CVEs disclosed; OpenClaw has 9 in 4 days. That’s a meaningful gap until OpenClaw’s security posture matures.
Full ranked picks at best AI agents in 2026.
Who should use OpenClaw
- Developers and technical users comfortable with self-hosted infrastructure
- Privacy-conscious individuals who want personal AI on their own device
- Power users who want their AI in Telegram/Slack/Discord, not yet another tab
- Multi-agent orchestration enthusiasts building Manager→Researcher→Writer pipelines
- Cost-sensitive users willing to bring their own LLM API key
- Open-source contributors who want to participate in the breakout OSS project of 2026
Who shouldn’t use OpenClaw
- Casual users who’d install whatever skill sounds useful from ClawHub (security risk is real)
- Production deployments handling sensitive data without dedicated security engineering
- Enterprises requiring SOC 2 / audit-ready operations — wait until the project matures
- Users wanting “it just works” UX — try Lindy or Manus instead
- Anyone unwilling to monitor security advisories and patch quickly
The verdict
OpenClaw is the most important open-source AI agent project of 2026 — and that’s both an enthusiastic statement and a cautious one. The 347K+ stars are real product-market fit. The messaging-platform-first UX is the right product idea. The skill ecosystem and multi-agent orchestration are category-leading.
The pragmatic read: for technical users and developers, OpenClaw is genuinely worth running today — pick your skills carefully, monitor the security advisories, and you’ll have an agent more capable than anything commercial at $0 subscription cost. For everyone else, wait 3-6 months for the security posture to mature before going all-in.
The 2026 open-source agent landscape:
- OpenClaw (347K+ stars) — breadth + messaging-app reach + the breakout phenomenon
- Hermes Agent (100K+ stars) — depth + self-improving learning + cleaner security
- CrewAI (44K+ stars) — production-engineering maturity, multi-agent for developers
- LangGraph (surpassing CrewAI) — graph-based architecture, enterprise-friendly
- Letta (15K+ stars, formerly MemGPT) — stateful long-term memory specialist
- Microsoft Agent Framework (AutoGen + Semantic Kernel merged) — enterprise Microsoft-stack default
For most readers asking “should I install OpenClaw?”: try it on a non-critical machine first. Run a couple of well-reviewed skills. If the workflow clicks, expand carefully. If you’re already paying for Lindy or Manus and they’re working, OpenClaw is worth knowing about but not necessarily worth replacing them with — yet.
The lobster’s having a moment. Watch it carefully.
Related:
- Hermes Agent review — the cleaner-architecture alternative
- Manus AI review — the task-focused alternative
- Lindy review — the managed alternative
- Best AI agents in 2026
- OpenClaw vs Hermes Agent comparison
OpenClaw — frequently asked questions
What does OpenClaw do?
OpenClaw is the open-source AI agent that broke through the noise in late January 2026 and didn't stop. The lobster-mascot project went from ~9,000 GitHub stars to 60,000 in a few days, then crossed 100K, 200K, and 347K by April. By any measure of OSS adoption — stars, contributors, skill count, deployment volume — it's the breakout AI tool of the year. The product idea is unusually clean: your AI agent should live in the apps you already use, not in another browser tab. Ins…
How much does OpenClaw cost?
Free. Open-source. Self-hostable. Apache 2.0–style license. No subscription. No credit system. Your costs come from:
What are the downsides of OpenClaw?
Security posture is genuinely concerning. This is the most important thing for any OpenClaw evaluation in April 2026. - 9 CVEs disclosed in 4 days in March 2026. One scored CVSS 9.9 — that's a critical-severity remote code execution vulnerability. The community responded fast (patches shipped within 48 hours) but the rate of high-severity vulnerabilities suggests rapid-growth code that hasn't been hardened. ClawHub marketplace has a malicious-skill problem. Bitdefender's aud…
What are the best alternatives to OpenClaw?
For breadth of messaging-platform integration: OpenClaw > everything. The 24+ platform list is genuinely category-leading. For depth of self-improving learning: Hermes Agent > OpenClaw. Hermes is built around persistent memory and skill auto-generation; OpenClaw's learning is shallower.
Who should use OpenClaw?
Developers and technical users comfortable with self-hosted infrastructure Privacy-conscious individuals who want personal AI on their own device Power users who want their AI in Telegram/Slack/Discord, not yet another tab Multi-agent orchestration enthusiasts building Manager→Researcher→Writer pipelines Cost-sensitive users willing to bring their own LLM API key Open-source contributors who want to participate in the breakout OSS project of 2026
Who shouldn't use OpenClaw?
Casual users who'd install whatever skill sounds useful from ClawHub (security risk is real) Production deployments handling sensitive data without dedicated security engineering Enterprises requiring SOC 2 / audit-ready operations — wait until the project matures Users wanting "it just works" UX — try Lindy or Manus instead Anyone unwilling to monitor security advisories and patch quickly
Is OpenClaw worth it in 2026?
OpenClaw is the most important open-source AI agent project of 2026 — and that's both an enthusiastic statement and a cautious one. The 347K+ stars are real product-market fit. The messaging-platform-first UX is the right product idea. The skill ecosystem and multi-agent orchestration are category-leading. The pragmatic read: for technical users and developers, OpenClaw is genuinely worth running today — pick your skills carefully, monitor the security advisories, and you'll…
Featured In
Thinking about trying OpenClaw?
The button below goes to OpenClaw's official site. Signing up through it may earn this site a small commission at no cost to the reader. That helps keep Pick Right running and is never the reason a tool gets recommended.
Learn More →