By now, you could have seemingly heard about OpenClaw and its spinoff, Moltbook. It’s captured the creativeness of each technical and non-technical individuals alike. And for my part, it’s the Netscape second for AI brokers. There’s no going again from right here.
OpenClaw (initially named Clawbot) was launched by Peter Steinberger on GitHub on November 25. In simply the final week alone, he reported that it had obtained over 100,000 stars on GitHub and had 2 million guests. In line with The VergeSteinberger’s put up helped Clawbot go viral — so viral that Anthropic’s authorized staff requested a reputation change to keep away from confusion with their very own Claude.
What’s OpenClaw?
OpenClaw is touted as “an agent that truly does issues.” It’s an open-source, always-on private AI assistant that may run proactive background work (cron jobsreminders, duties) and may be hosted by yourself machine. You possibly can run one domestically (no cloud required) on a Mac mini or highly effective laptop computer.
Its defining characteristic is that you just give the agent machine management, the power to run your machine in your behalf, together with having laptop imaginative and prescient of your display, information, and techniques.
That is in sharp distinction to chatbots (a lot of which have been offered as brokers), which solely make recommendations {that a} human should then manually put into the true world. It’s additionally a step up in autonomy from enterprise process brokers, which may entry instruments and techniques however don’t usually management private or firm units.
OpenClaw customers report game-changing use circumstances, principally within the type of scheduled duties akin to analysis studies, e mail drafting, journey updates and planning, software program updates, content material manufacturing, and expense reporting. Set it and neglect it. Assessment their work later and tweak directions.
The AI Govt Assistant class is born
This creates a wholly new software program class: the manager assistant. That is totally different from earlier AI assistants in that you just belief OpenClaw bots as you’d a seasoned, savvy human.
Consider a CEO’s human govt assistant. They’ve unfettered entry to their boss’s calendar, inbox, bank cards, and, in some circumstances, social media credentials, plus the instruments and techniques they use every single day. Many leaders will inform you that their EA is their most vital human useful resource.
Earlier AI assistants did background work and accomplished duties with a human within the loop. They didn’t handle processes with machine management or the power to behave in any important method with out human oversight.
Furthermore, as we’re studying with OpenClaw’s spinoff, Moltbook (a viral social community for brokers), these govt assistants can spawn their very own brokers to behave as sub-assistants and schedule cron jobs. In any case, they had been educated on people and certain examine Tom Sawyer’s intelligent use of Huck Finn to color a fence for him.
That’s why the variety of these “moltbots” is spawning sooner than a virus outbreak. Spin them up and ship them to Moltbook for orientation and coaching.
In consequence, I’m revising my Agent Gradientwhich plots totally different types of brokers in line with their autonomy and affect. Govt assistants sit close to the highest of the checklist. They’re extra Waymo (self-driving) than Waze (turn-by-turn instructions) and can seemingly change everybody’s expectations for AI.
What considerations emerge with OpenClaw and Moltbook?
Whereas the image taking form is one in all speedy innovation, additionally it is stoking our best fears about AI. The whole lot we’ve seen within the films or learn in pulp fiction appears to be unfolding in actual time, relying on how a lot you belief social media and self-reported incidents.
Examples embrace:
On high of that, the launch of Moltbook has garnered much more sensational headlines than OpenClaw did. This Reddit-like neighborhood shares (alleged) agentic posts the place they examine notes, recommend creating their very own shared language as an alternative of English, and reveal methods to jailbreak their directions. They even created their very own faith.
Once more, this might very effectively be people having enjoyable with us, however nonetheless, there are confirmed examples of actual OpenClaw brokers being despatched to Moltbook and posting content material. This Wired article offers an entertaining perspective on the fastest-growing social community in historical past.
Safety controls will grow to be the lead characteristic for brokers
OpenClaw might have commoditized the price of brokers from a software program perspective (as DeepSeek disrupted LLMs final yr), however that doesn’t imply brokers might be free sooner or later.
There’s nonetheless the problem of LLM entry, which may be costly by way of Claude or ChatGPT. One workaround has been the usage of Kimiwhich has grow to be the de facto mannequin of selection for cost-conscious OpenClaw customers. However actually, the price of operating the agent pales compared to the danger of it going rogue — and exposing a consumer’s credentials and techniques to hackers.
In G2’s newest report on Brokerswe revealed that whereas safety was a priority to consumers, they had been keen to shoulder the danger to appreciate the price financial savings and autonomy that brokers may deliver to bottlenecked components of their organizations. However that was solely as a result of tales of “brokers gone wild” had but to grace the headlines.
Now all of that has modified. Firms are telling workers to keep away from putting in and operating OpenClaw. CEOs are reaching out to their InfoSec groups to replace and make clear their agent insurance policies. Even OpenClaw’s web site is blocked by many corporations.
Over the approaching weeks, I anticipate that much more examples of OpenClaw bot shenanigans will trigger consumers to be security-first in relation to any agentic implementations.
“Which means that as an alternative of safety being a check-the-box movement for getting enterprise brokers, it will likely be the lead attribute that due diligence facilities on, from evaluations to certifications.”
Tim Sanders
Chief Expertise Officer, G2
Moreover, there might be a marketplace for agent governance techniques that display robust governance of their design. So I don’t anticipate the agent class to grow to be open supply in the long term. I additionally proceed to imagine that the marketplace for third-party agent guardrails will proceed to develop, which was one in all my predictions for 2026.
Brokers will get their “Netscape second”
I bear in mind when early browsers like Mosaic/Netscape hit the mainstream within the mid-Nineteen Nineties. By January 1995, it was the excitement throughout media and boardrooms alike. Non-techies had been now empowered to roam the web and discover helpful content material. Startups had been born. Everybody rapidly developed FOMO to get on the net or get left behind.
It was a second of such widespread consciousness, the paradigm of “how will we ____” modified.
To cite Yogi Berra: “It’s déjà vu once more.”
Though agent adoption by corporations has been brisk (40% of enterprises spent $1 million on them final yr), private adoption has lagged. I might speculate that few of us have truly arrange an agent and given it the ability to finish a process on our behalf.
Count on that to alter as safer variations of OpenClaw are launched (assume tighter guardrails and permissions) in response to the tsunami of protection and water-cooler speak unfolding in 2026. Even when govt assistants don’t grow to be as ubiquitous as private web sites three a long time in the past, FOMO for brokers will unfold sooner than ever.
The place will we go from right here?
Personally, I’m sitting this one out. I haven’t downloaded OpenClaw or purchased a Mac mini to run it on. I imagine the dangers are too excessive and, to be sincere, I’m not prepared to show over the keys to my life to a machine.
I’m simply over right here, consuming popcorn whereas studying about it and speaking to quite a lot of friends within the AI, safety, software program coding, and educational communities.
And all of us agree on one level: Issues won’t ever be the identical.
