By now, you have got probably heard about OpenClaw and its spinoff, Moltbook. It’s captured the creativeness of each technical and non-technical individuals alike. And in my view, it’s the Netscape second for AI brokers. There’s no going again from right here.
OpenClaw (initially named Clawbot) was launched by Peter Steinberger on GitHub on November 25. In simply the final week alone, he reported that it had acquired over 100,000 stars on GitHub and had 2 million guests. In line with The Verge, Steinberger’s put up helped Clawbot go viral — so viral that Anthropic’s authorized workforce requested a reputation change to keep away from confusion with their very own Claude.
What’s OpenClaw?
OpenClaw is touted as “an agent that really does issues.” It’s an open-source, always-on private AI assistant that may run proactive background work (cron jobs, reminders, duties) and could be hosted by yourself machine. You may run one domestically (no cloud required) on a Mac mini or highly effective laptop computer.
Its defining characteristic is that you simply give the agent gadget management, the flexibility to run your machine in your behalf, together with having laptop imaginative and prescient of your display, recordsdata, and programs.
That is in sharp distinction to chatbots (lots of which have been offered as brokers), which solely make strategies {that a} human should then manually put into the actual world. It’s additionally a step up in autonomy from enterprise job brokers, which may entry instruments and programs however don’t sometimes management private or firm gadgets.
OpenClaw customers report game-changing use circumstances, principally within the type of scheduled duties comparable to analysis studies, electronic mail drafting, journey updates and planning, software program updates, content material manufacturing, and expense reporting. Set it and neglect it. Overview their work later and tweak directions.
The AI Government Assistant class is born
This creates a completely new software program class: the chief assistant. That is completely different from earlier AI assistants in that you simply belief OpenClaw bots as you’ll a seasoned, savvy human.
Consider a CEO’s human govt assistant. They’ve unfettered entry to their boss’s calendar, inbox, bank cards, and, in some circumstances, social media credentials, plus the instruments and programs they use each day. Many leaders will inform you that their EA is their most vital human useful resource.
Earlier AI assistants did background work and accomplished duties with a human within the loop. They didn’t handle processes with gadget management or the flexibility to behave in any important manner with out human oversight.
Furthermore, as we’re studying with OpenClaw’s spinoff, Moltbook (a viral social community for brokers), these govt assistants can spawn their very own brokers to behave as sub-assistants and schedule cron jobs. In any case, they have been educated on people and certain examine Tom Sawyer’s intelligent use of Huck Finn to color a fence for him.
That’s why the variety of these “moltbots” is spawning quicker than a virus outbreak. Spin them up and ship them to Moltbook for orientation and coaching.
In consequence, I’m revising my Agent Gradient, which plots completely different types of brokers based on their autonomy and influence. Government assistants sit close to the highest of the listing. They’re extra Waymo (self-driving) than Waze (turn-by-turn instructions) and can probably change everybody’s expectations for AI.
What considerations emerge with OpenClaw and Moltbook?
Whereas the image taking form is considered one of fast innovation, additionally it is stoking our best fears about AI. The whole lot we’ve seen within the motion pictures or learn in pulp fiction appears to be unfolding in actual time, relying on how a lot you belief social media and self-reported incidents.
Examples embrace:
On high of that, the launch of Moltbook has garnered much more sensational headlines than OpenClaw did. This Reddit-like neighborhood shares (alleged) agentic posts the place they examine notes, counsel creating their very own shared language as an alternative of English, and reveal methods to jailbreak their directions. They even created their very own faith.
Once more, this might very effectively be people having enjoyable with us, however nonetheless, there are confirmed examples of actual OpenClaw brokers being despatched to Moltbook and posting content material. This Wired article offers an entertaining perspective on the fastest-growing social community in historical past.
Safety controls will turn into the lead characteristic for brokers
OpenClaw could have commoditized the price of brokers from a software program perspective (as DeepSeek disrupted LLMs final 12 months), however that doesn’t imply brokers shall be free sooner or later.
There’s nonetheless the difficulty of LLM entry, which could be costly by means of Claude or ChatGPT. One workaround has been the usage of Kimi, which has turn into the de facto mannequin of selection for cost-conscious OpenClaw customers. However actually, the price of operating the agent pales compared to the danger of it going rogue — and exposing a consumer’s credentials and programs to hackers.
In G2’s newest report on Brokers, we revealed that whereas safety was a priority to consumers, they have been keen to shoulder the danger to appreciate the fee financial savings and autonomy that brokers might convey to bottlenecked components of their organizations. However that was solely as a result of tales of “brokers gone wild” had but to grace the headlines.
Now all of that has modified. Firms are telling workers to keep away from putting in and operating OpenClaw. CEOs are reaching out to their InfoSec groups to replace and make clear their agent insurance policies. Even OpenClaw’s web site is blocked by many firms.
Over the approaching weeks, I anticipate that much more examples of OpenClaw bot shenanigans will trigger consumers to be security-first in the case of any agentic implementations.
“Because of this as an alternative of safety being a check-the-box movement for purchasing enterprise brokers, will probably be the lead attribute that due diligence facilities on, from opinions to certifications.”
Tim Sanders
Chief Know-how Officer, G2
Moreover, there shall be a marketplace for agent governance programs that display robust governance of their design. So I don’t anticipate the agent class to turn into open supply in the long term. I additionally proceed to imagine that the marketplace for third-party agent guardrails will proceed to develop, which was considered one of my predictions for 2026.
Brokers will get their “Netscape second”
I keep in mind when early browsers like Mosaic/Netscape hit the mainstream within the mid-Nineties. By January 1995, it was the thrill throughout media and boardrooms alike. Non-techies have been now empowered to roam the web and discover helpful content material. Startups have been born. Everybody shortly developed FOMO to get on the internet or get left behind.
It was a second of such widespread consciousness, the paradigm of “how can we ____” modified.
To cite Yogi Berra: “It’s déjà vu once more.”
Though agent adoption by firms has been brisk (40% of enterprises spent $1 million on them final 12 months), private adoption has lagged. I might speculate that few of us have really arrange an agent and given it the facility to finish a job on our behalf.
Count on that to vary as safer variations of OpenClaw are launched (suppose tighter guardrails and permissions) in response to the tsunami of protection and water-cooler speak unfolding in 2026. Even when govt assistants don’t turn into as ubiquitous as private web sites three a long time in the past, FOMO for brokers will unfold quicker than ever.
The place can we go from right here?
Personally, I’m sitting this one out. I haven’t downloaded OpenClaw or purchased a Mac mini to run it on. I imagine the dangers are too excessive and, to be sincere, I’m not prepared to show over the keys to my life to a machine.
I’m simply over right here, consuming popcorn whereas studying about it and speaking to a wide range of friends within the AI, safety, software program coding, and tutorial communities.
And all of us agree on one level: Issues won’t ever be the identical.
