OpenClaw Security 2026Der komplette Lagebericht & Hardening-Guide

# Secure OpenClaw Pod Specification
apiVersion: v1
kind: Pod
metadata:
  name: openclaw-secure
  namespace: openclaw
  labels:
    app: openclaw
    security-tier: hardened
spec:
  serviceAccountName: openclaw-sa
  automountServiceAccountToken: false
  securityContext:
    runAsNonRoot: true
    runAsUser: 1000
    runAsGroup: 3000
    fsGroup: 2000
    seccompProfile:
      type: RuntimeDefault
  containers:
  - name: openclaw
    image: openclaw/server:1.2.3@sha256:abc123...  # pinned digest!
    securityContext:
      allowPrivilegeEscalation: false
      readOnlyRootFilesystem: true
      capabilities:
        drop: ["ALL"]
    resources:
      requests:
        memory: "256Mi"
        cpu: "250m"
      limits:
        memory: "512Mi"
        cpu: "500m"
    env:
    - name: OPENCLAW_API_KEY
      valueFrom:
        secretKeyRef:
          name: openclaw-secrets
          key: api-key
    livenessProbe:
      httpGet:
        path: /health
        port: 8080
      initialDelaySeconds: 15
      periodSeconds: 20
    volumeMounts:
    - name: tmp
      mountPath: /tmp
    - name: logs
      mountPath: /var/log/openclaw
  volumes:
  - name: tmp
    emptyDir: {}
  - name: logs
    emptyDir: {}

---
# NetworkPolicy — Zero-Trust
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: openclaw-netpol
  namespace: openclaw
spec:
  podSelector:
    matchLabels:
      app: openclaw
  policyTypes: [Ingress, Egress]
  ingress:
  - from:
    - podSelector:
        matchLabels:
          app: nginx-gateway
    ports:
    - protocol: TCP
      port: 8080
  egress:
  - to:
    - namespaceSelector:
        matchLabels:
          name: monitoring
    ports:
    - protocol: TCP
      port: 9090

# Nginx WebSocket Security Configuration
server {
    listen 443 ssl http2;
    server_name openclaw.internal;

    # TLS Hardening
    ssl_protocols TLSv1.3;
    ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384;
    ssl_prefer_server_ciphers off;
    ssl_session_timeout 1d;
    ssl_session_cache shared:SSL:10m;

    # Security Headers
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
    add_header X-Frame-Options DENY always;
    add_header X-Content-Type-Options nosniff always;
    add_header Content-Security-Policy "default-src 'self'; connect-src 'self' wss://openclaw.internal" always;

    location /ws {
        # Origin allowlist — CRITICAL
        set $allowed_origin 0;
        if ($http_origin = "https://openclaw.internal") { set $allowed_origin 1; }
        if ($http_origin = "https://app.clawguru.org") { set $allowed_origin 1; }
        if ($allowed_origin = 0) { return 403 "Forbidden Origin"; }

        add_header 'Access-Control-Allow-Origin' $http_origin always;

        proxy_pass http://openclaw:8080;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;

        # Timeouts
        proxy_read_timeout 3600s;
        proxy_send_timeout 3600s;

        # Rate limiting
        limit_req zone=ws_limit burst=10 nodelay;
    }
}

# Rate limit zone
limit_req_zone $binary_remote_addr zone=ws_limit:10m rate=5r/s;

# SBOM generieren mit Syft
syft packages dir:. -o spdx-json > sbom.spdx.json
syft packages dir:. -o cyclonedx-json > sbom.cyclonedx.json

# Grype: SBOM auf Schwachstellen prüfen
grype sbom:sbom.spdx.json --fail-on high

# Cosign: Container-Image signieren (Sigstore)
cosign generate-key-pair
cosign sign --key cosign.key openclaw/server:1.2.3

# Signatur prüfen
cosign verify --key cosign.pub openclaw/server:1.2.3

# package-lock.json / lockfile integrity
npm ci --ignore-scripts   # Keine postinstall-Scripts
npm audit --audit-level=high  # Audit vor jedem Deploy

# truffleHog: Secrets in Git-History scannen
trufflehog git file://. --only-verified

# GitHub Actions: SLSA Provenance
# .github/workflows/release.yml:
# - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1
#   with:
#     image: openclaw/server
#     digest: {{ steps.build.outputs.digest }}

# Prometheus Alerting Rules für OpenClaw Security
groups:
- name: openclaw-security
  rules:

  # Auth-Failures: mehr als 10 in 5 Minuten
  - alert: HighAuthFailureRate
    expr: rate(openclaw_auth_failures_total[5m]) > 2
    for: 2m
    labels:
      severity: critical
    annotations:
      summary: "Hohe Auth-Failure Rate — möglicher Brute-Force"
      description: "{{ $value }} Fehler/s in den letzten 5 Minuten"

  # WebSocket-Verbindungen von unbekannten Origins
  - alert: UnknownOriginWebSocket
    expr: openclaw_ws_unknown_origin_total > 0
    labels:
      severity: warning
    annotations:
      summary: "WebSocket-Verbindung von unbekannter Origin"

  # Vault-Lease-Expiry Warnung
  - alert: VaultLeaseExpiringSoon
    expr: vault_token_ttl < 3600
    labels:
      severity: warning
    annotations:
      summary: "Vault Token läuft in < 1h ab"

  # Ungewöhnliche API-Request-Rate
  - alert: APIRequestAnomalyDetected
    expr: |
      rate(openclaw_api_requests_total[5m])
      > (avg_over_time(openclaw_api_requests_total[1h]) * 3)
    labels:
      severity: warning
    annotations:
      summary: "API-Request-Rate 3x über Durchschnitt"

  # Container-Restart-Loop (mögliches Exploit-Attempt)
  - alert: ContainerRestartLoop
    expr: rate(kube_pod_container_status_restarts_total{namespace="openclaw"}[15m]) > 0.1
    labels:
      severity: critical
    annotations:
      summary: "OpenClaw Container-Restart-Loop erkannt"