A reverse proxy that locks OpenClaw gateway configuration against model-driven mutation by enforcing an allowlist of immutable protected settings
OpenClaw gateway config.patch and config.apply endpoints have been exploited through denylist bypass (CVE-2026-45006, CVE-2026-45001, CVE-2026-45004). Compromised models persist malicious config changes to sandbox policy, auth/TLS, and SSRF rules that survive restart. This tool flips the model from denylist to allowlist, intercepting all config mutations at the network layer.
Social Proof 3 sources
Gap Assessment
3 tools exist (OpenClaw built-in denylist, ClawSecure Verified Marketplace, DefenseClaw (Cisco)) but gaps remain: Denylist fails each time a new key is found (proven by CVE-45006, 45001, 45004 in sequence). No audit log, no alerting, no operator customization.; Focuses on skills/plugins, not gateway config mutation. Cannot intercept config.patch requests..
Features3 agent-ready prompts
Competitive LandscapeFREE
| Product | Does | Missing |
|---|---|---|
| OpenClaw built-in denylist | Blocks known-bad config keys from agent tool modification | Denylist fails each time a new key is found (proven by CVE-45006, 45001, 45004 in sequence). No audit log, no alerting, no operator customization. |
| ClawSecure Verified Marketplace | 3-layer audit protocol for skill verification with behavioral analysis | Focuses on skills/plugins, not gateway config mutation. Cannot intercept config.patch requests. |
| DefenseClaw (Cisco) | Open-source agent security governance for audit and policy | Policy governance, not real-time request interception. Cannot block a config mutation in-flight. |
Sign in to unlock full access.