ClawSploit is a free, open-source security audit framework designed to scan OpenClaw instances for known CVEs, misconfigurations, and exploits. It runs entirely on your local machine — no data is ever sent to external servers.

How does ClawSploit scan OpenClaw instances?

ClawSploit uses 10 specialized scanner modules including port scanning, HTTP analysis, TLS checking, WebSocket authentication testing, cross-origin policy detection, configuration leak detection, path traversal testing, hook injection detection, version fingerprinting, and mDNS discovery.

Is ClawSploit free to use?

Yes. ClawSploit is fully open-source under the MIT license and free to use for authorized security testing of OpenClaw deployments.

ClawSploit — OpenClaw Vulnerability Scanner & Security Audit Framework

Security Audit

Ctrl+Enter to start scan. Supports IP, IP:PORT, or http://host:port format.

Scan Report

0

Total Checks

0

Passed

0

Failed

0

Warnings

Findings

CVE Database

CVE ID	Severity	CVSS	Title	Fixed In

OpenClaw Vulnerability Scanner & Security Audit Framework

Security Audit

Scan Report

Findings

CVE Database

Threat Intelligence