OpenClaw Review (2026): Free Until the Bill

How much does OpenClaw cost? A user posted on Hacker News (Feb 26th, 2026) that it cost them $250 on its first day with OpenClaw, "doing what felt like harmless testing." However, it is possible to run OpenClaw for free, since the software is open source and has been starred over 391k times on GitHub as of October 4th, 2026. But, it will spend as much as you let it in the AI provider of your choice.

In this article, I review OpenClaw: what it is good for, how much it costs per month and what you need to do to secure it. In short, OpenClaw can be set up relatively cheap and safe, but it won't bring you customers.

This article is biased: I sell a service to validate your startup idea with Preuve AI, so the last section of this article is key for me. This article is based on the OpenClaw docs, their security page and information on their GitHub page, as well as on external security researches and reviews, and user bills shared on Reddit and Hacker News. Links in the article.

Will your idea survive the market?

Preuve AI runs 10 agents against live market data and links every claim to a source. Free analysis in 60 seconds.

Validate My Idea FreeRated 5/5 · 16 reviews

What is OpenClaw, and who owns it in 2026?

OpenClaw is a free, open source AI assistant you can run locally on a machine you control (Mac, PC or server) and connect to any of your favourite chat apps (Discord, iMessage, Slack, Microsoft Teams, Telegram, WhatsApp "and 20+ more.") You can then connect it to the AI model you choose (Claude, GPT, Gemini, MiniMax or even locally run free AI models). OpenClaw can then act as your personal AI assistant with access to your email, the ability to run commands on your local machine, browsing capabilities and the ability to run tasks on a schedule.

OpenClaw was initially built as a weekend project by Peter Steinberger. It was originally called Clawd, "a playful pun on 'Claude' with a claw," but was asked to reconsider its name by Anthropic's legal team. Then called Moltbot, it has finally become OpenClaw, as announced in this blog post on January 29th, 2026. It had already gathered more than 100,000 stars on GitHub in just 2 months.

Two weeks after, Peter Steinberger announced "I'm joining OpenAI to work on bringing agents to everyone. OpenClaw will move to a foundation and stay open and independent." (Feb 14th, 2026) The OpenClaw Foundation, a new 501(c)(3) non-profit organization, launched on July 8th, 2026. OpenAI is named as a major donor. So, who owns OpenClaw in 2026? It is a US non-profit, but the software will remain open source under the MIT license.

The OpenClaw Foundation does not sell anything. As explained in the docs "no paid tier, no hosted service, no token" (read on October 4th, 2026), it develops OpenClaw at a very high velocity, with the latest version v2026.9.8 released on October 3rd. They have since July 30th, 2026 a slower release channel, called "extended-stable".

What do people actually use OpenClaw for?

At the moment, it seems like it is good at running simple jobs on a schedule. On Reddit, a user said in February 2026 that the tech is just hype for now. However, they came back 6 months later in a post on r/AI_Agents to say that they run OpenClaw throughout the day to triage their emails, prepare their calendar, generate morning briefs, run monitoring tasks and fix small bugs in their code. (Disclosure: this user is building a managed AI agent to compete with OpenClaw).

"an always-on agent only makes sense when it pings you more than you ping it." (r/AI_Agents, read October 4, 2026)

In a post on r/ClaudeAI, another user said that their team used it to generate answers to customer emails and to transform incoming emails to customer support tickets, after asking for approval for any destructive action: "Nothing life-changing." Another user, however, remained skeptical, saying "I like to read my own emails and have reminders pop up over my phone rather than have a chat bot notify me."

A different user said that they tried to build a customer success agent as a solo founder, but that after using it for a few days to generate reports, they found themselves spending more time on OpenClaw than on their business. They said it "straight up lied to me," and decided to stop using it after two weeks.

They also said that they wouldn't use OpenClaw to answer to customers, as "the amount of wrong information it wanted to sent out is staggering."

In an April 14th, 2026 review on PCMag, Ruben Circelli said that one of the 4 problems was "Finding a Reason to Use It". However, Circelli did not intend to use it on a long-term basis. In a 10-day review on Substack, The AI Maker said on February 5th, 2026 that they liked the tool but that it took some time to set up, saying it "requires debugging, sometimes for hours."

How much does OpenClaw cost per month?

OpenClaw itself is free ($0), but you need to pay for the model bills (which is how you can burn $250 in a day), and also for a machine to run OpenClaw on. The model bills will vary based on how often you talk to it, how many scheduled jobs you have, and how often your OpenClaw checks in on you (also known as heartbeats).

Here are a few examples from different people who have tried it out. Be careful not to compare across the different examples, as they each measure slightly different things.

Source: Hacker News post from Feb. 26, 2026. Accessed Oct. 4, 2026. Additional source: Reddit threads read Oct. 4, 2026 in r/openclaw and r/clawdbot (links in the methodology below). All dollar amounts are in USD, as each person reported them. Costs are self-reported by individuals, and are unaudited. Last two rows are token counts, not dollars.

One thing to be aware of is that your OpenClaw is always checking in on you by default, every 30 minutes (although if you log in with Claude, it'll only do it every hour). As the docs say, "Heartbeats run full agent turns. Shorter intervals burn more tokens." In one example where someone used 196 million tokens, the issue was that an old agent they weren't using anymore was reloading about 225,000 tokens of history every time it checked in (which was like 48 times per day), and then it would conclude it had nothing to do. As the poster says, "roughly 48 times a day it was reading a phonebook to say 'nope.'"

In another example, the OpenClaw was checking in every 30 minutes while the user was at work, and used 53 million tokens in a week. The poster calls it a "chief of staff" agent.

The issue is that OpenClaw doesn't tell you what you'll actually be billed. As the OpenClaw docs say on their cost page, "not a provider invoice or lifetime billing ledger." So you need to set a hard limit with your AI provider before using it.

In Hack'celeration's review of OpenClaw, they put the API cost at "$0.", which only holds if you use local AI models for free on your own hardware. They also sell a service to help you set up OpenClaw.

On April 4th, 2026, Anthropic sent an email to subscribers saying that they could no longer use their plan limits "for third-party harnesses including OpenClaw", and would instead need to pay separately for any additional usage, as reported by TechCrunch. As Boris Cherny of Anthropic said, "subscriptions weren't built for the usage patterns of these third-party tools."

However, on June 15th, 2026, Anthropic's help center indicated that a related change had been paused, and that usage through third party apps would still be using your plan limit. Now on OpenClaw's cost page, it says Anthropic allows your Claude Code login with OpenClaw "unless it publishes a new policy" (docs note dated July 5th, 2026). However, users are still confused about what counts towards your bill, so my recommendation would be to assume that each reply you get from OpenClaw will be billed to you based on the number of tokens, and then assume that your plan will be an additional bonus on top of that.

Worked example: one daily driver's bill

One user on r/openclaw said that they were using Anthropic's models and talking to it about 30 messages per day, with a Telegram channel and a few scheduled jobs, managing their email, doing research, and setting reminders and tasks. They said it was costing them between $140-$180 per month, and that they had already spent about $200 on it. As they said, "just trying to get it working right."

They also set it up so that each new session would be saved to memory, and so that any sub agents would also be using Haiku. With all these changes, they said it was now costing them $40-$60 per month for the same agent. This didn't include any costs for a server, which on October 4th, 2026, a few sellers charged for:

Source: Hostinger, DigitalOcean and OneClickClaw pages, read Oct. 4, 2026. Monthly prices exclude tax and do not include the model bill. These services are not run by the OpenClaw Foundation.

Of course, you can use your own machine for free, and also use free web search (Brave Search gives you $5 per month free which is good for about 1,000 searches, according to the OpenClaw cost page).

Skip weeks of manual research

Get complete market research, sourced proof, competitor map, and pricing data for your idea instantly.

Run a Free Analysis

Is OpenClaw safe to use?

It's safe enough if you use it for very specific tasks and set it up yourself, but it's not safe out of the box. OpenClaw has published its security record (all of their confirmed critical bugs have been fixed), and their code is all public, but the skills (add-ons) available through ClawHub could be a risk, as could the installation process itself.

Source: OpenClaw security page, reviewed Sep. 9, 2026 & read Oct. 4, 2026, SC Media's article on Koi Security's audit, and the OpenClaw and NVIDIA post on ClawScan verdicts. The first four rows cover OpenClaw only (the core, its apps, and the add-ons that come with OpenClaw when installed; ClawHub skills are not included). The last two rows represent two different snapshots, and are not directly comparable; they represent the number of skills and versions of those skills, respectively.

OpenClaw itself: patched in public

From their security page: "Excludes third-party ClawHub skills," and "No known compromise of OpenClaw infrastructure or of the official install and update channels."

All of their 14 critical security advisories were published between Feb 14 and April 16, 2026. If you're using an old installation this could be risky. Update or use the extended stable version.

ClawHub skills: your own homework

One of the most interesting and dangerous features is “skills” which are add-ons created by other people (available on ClawHub) that your agent can run, with all of its access. On Feb 4 2026 an outside user reported that one account mass-uploaded clones of popular skills that contained instructions to install malware. On the same day, SC Media reported that Koi Security found 341 malicious skills among the 2,857 it audited, mostly related to a single malicious campaign that installed a password stealer on Mac computers. Security company Snyk published a study on the “ToxicSkills” in ClawHub and another skills registry, confirming 76 malicious payloads across 3984 skills from both registries.

The OpenClaw project reacted and started scanning all skills in the registry with VirusTotal on Feb 7 2026 ("this is not a silver bullet."). By June they were scanning with three different scanners, and found that 468 skills (about 0.7%) were flagged by all three scanners at once. That counts overlap between scanners, not malware: the registry's malicious verdicts are counted below. Currently, the ClawHub registry will not let you install skills that they consider malicious.

However, between February and May 2026 Unit 42 by Palo Alto Networks found five malicious skills that weren't caught by OpenClaw's scanners. The accounts were banned and the skills deleted by the OpenClaw project. As the OpenClaw project notes in its skills documentation: "Treat third-party skills as untrusted code."

Which number should you believe? 341/2857 according to Koi security? Or 206/67453 according to the registry (which is grading itself)? The registry counts per skill version, Koi Security did a snapshot of skills in February (which also had an active campaign at the time), so the numbers are not really comparable. What all these studies do show is that so far the malware campaigns found have been in the skills, not in the core. Limit the number of skills that you install, and be sure to check them before installing.

Your setup: the defaults are not a fence

By default the gateway will only be available from the local machine that it runs on, and for messaging platforms it will send a pairing code to unknown users that try to message your bot. However, according to their sandboxing documentation: "Sandboxing is off by default," and according to their GitHub page, the tools "run on the host for the main session unless you configure sandboxing."

This means that until you sandbox OpenClaw, the agent will operate on the real machine.

People are putting OpenClaw on the open internet: on Jan 31 2026 Censys found 21,639 OpenClaw installations that were reachable on the open internet with their control panel. They had grown from about 1000 in less than a week. Most of them required a token to access.

On Feb 19 2026, Microsoft Security published an article where they said that it "is not appropriate to run on a standard personal or enterprise workstation," and recommend that if a company wants to test OpenClaw they should only do so "in a fully isolated environment such as a dedicated virtual machine or separate physical system." On March 23 2026 the national CERT of China recommended similar precautions, noting that you shouldn't use the same computer for work and OpenClaw, and that you should use a separate device, a virtual machine, or a container.

If you're going to run OpenClaw, at the very least I'd recommend running it on a separate machine. If I were to run it for my business, I'd do the following:

• Run it on a separate machine (or VM) with separate accounts
• Only run the gateway on a private network
• Enable sandboxing
• Limit (and read) the skills that you're going to use
• Give the agent a separate phone number/account to use for a messenger bot
• Set a spending limit on your AI provider
• Run openclaw security audit after every change, and keep updating.

OpenClaw vs Hermes Agent: which one fits a solo founder?

If you're looking for an AI agent that you can interact with using all kinds of chat apps, and if you're willing to work on securing your agent, OpenClaw could be a good choice. If you're looking for something easier to set up, an alternative that comes up a lot in discussions about OpenClaw is Hermes Agent by Nous Research. Both are free (MIT) open-source projects. Below is a comparison, based on the project and GitHub pages as of Oct 4, 2026.

Source: Fetched via GitHub API & each project's README (OpenClaw, Hermes Agent), read Oct. 4, 2026. Features are self-reported, as described by the project. Stars represent attention, but not necessarily actual users.

To be fair to Hermes, the switch threads on their subreddit mostly blame OpenClaw breaking. The author of "Anyone else switch from OpenClaw to Hermes?" wrote that "99% of it feels like debugging," and a reply said it took them 3 days to properly set up OpenClaw, compared to about 3 hours for Hermes. And it's the Hermes subreddit. (Though these threads pre-date OpenClaw's extended stable channel, which started in July 2026.)

If you want to try Hermes, its hermes claw migrate command imports OpenClaw memory, skills and settings, so trying it does not mean starting over.

Is OpenClaw still good, and should you be using it?

Yes, but for a very specific type of user. OpenClaw continues to release new versions (the latest, v2026.9.8, dropped on Oct 3rd) and their core has a public security record. The catch is that you're the IT department, and you'll get the bill if you set it wrong.

In that case, I'd go for a hosted agent instead; I've written about two of them, ChatGPT Dots and Meta Muse. With those, you can't choose your own model, but you also don't get a meter running. You just pay for your plan.

Can OpenClaw make money for your business?

The two business stories I linked above didn't use OpenClaw to make money. They already had businesses that were making money. The consulting firm already had "lots of contracts and proposals every week" when they brought in OpenClaw to read them, and the solo founder already had paying customers. In fact, the solo founder specifically says that in the nine months they have run the business, OpenClaw "was the one thing that hurt my margins the most."

OpenClaw can manage your inbox and monitor a webpage, but it can't tell you if anyone wants to buy your product. And if there's no demand for your product, your business isn't going to make any money, but the OpenClaw agent will still run up the $40-$400/month those users reported.

Before spinning up a server for your agent, make sure someone actually wants to buy what you're selling. Preuve can scan 60+ data sources that are already live on the internet to tell you if there's demand for your idea, what the market looks like, who your competitors are, and more. Run a Reality Check for free in under a minute, and if people do want to buy what you're selling, then spending $40-$60/month on an agent you use every day is a great deal. But if there isn't demand for your idea, at least you'll save your money.