cloud_doneClawInstall

Security-First Installation

Every ClawInstall setup includes a comprehensive security hardening checklist. Your infrastructure, locked down from day one.

What We Harden

Tailscale VPN

All remote access is tunneled through Tailscale's WireGuard-based mesh VPN. No ports exposed to the public internet.

SSH Lockdown

Password authentication disabled. Root login disabled. Only key-based access via Tailscale network.

Firewall Configuration

UFW/iptables rules configured to allow only necessary traffic. All unused ports closed by default.

SSL/TLS Certificates

Automatic HTTPS with Let's Encrypt certificates. All traffic encrypted in transit.

Automatic Updates

Unattended security updates configured for the operating system. Critical patches applied automatically.

Process Isolation

OpenClaw runs under a dedicated non-root user with minimal filesystem permissions.

Why Tailscale?

Tailscale creates a secure, private network between your devices using WireGuard encryption. Unlike traditional VPNs, there's no central server to become a bottleneck or single point of failure.

During installation, we connect to your machine exclusively through Tailscale. This means zero ports are exposed to the public internet during setup, and after handoff, you control exactly who has access.

Tailscale is free for personal use and takes about 5 minutes to install. We'll walk you through it before your installation appointment.

Installation Security Checklist

Every ClawInstall setup is verified against this checklist before handoff.

  • Tailscale VPN installed and authenticated
  • SSH password authentication disabled
  • SSH root login disabled
  • Firewall rules configured (UFW/iptables)
  • All unnecessary ports closed
  • SSL/TLS certificates provisioned
  • Automatic security updates enabled
  • OpenClaw running as non-root user
  • File permissions audited and locked down
  • Backup configuration documented
  • Access credentials rotated and secured
  • Post-install security scan passed

Download the Security Checklist

Get our complete 12-point security hardening checklist as a printable PDF. Use it to audit your own setup or share it with your team.

Download PDF Checklist

Ready for a secure setup?

Every installation includes our full security hardening at no extra cost.

View Pricing