{
"canonical_url": "nanoclaw.dev",
"category": "Open-source project",
"classification": {
"matched": {
"business": [
"assistant",
"slack"
],
"cybersecurity": [
"security"
],
"technology": [
"code",
"sdk"
]
},
"taxonomy_version": "sar-taxonomy-1.0"
},
"commercial": false,
"compliance": [
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 5
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://nanoclaw.dev/privacy",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "8bca61936e3c4edb07e7feb312fb22b12be3a773d244da3748f7552f4d08fb59",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:17Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
}
],
"deployment": "self-hosted",
"description": "A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"business": {
"components": {
"adoption": 26.03,
"docs": 7.0,
"domain_fit": 56.4,
"ecosystem": 1.5,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.564,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "general",
"rank": null,
"score": 66.3,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
},
"cybersecurity": {
"components": {
"adoption": 26.03,
"docs": 7.0,
"domain_fit": 34.0,
"ecosystem": 1.5,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.34,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "security",
"rank": null,
"score": 58.0,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
},
"technology": {
"components": {
"adoption": 26.03,
"docs": 7.0,
"domain_fit": 56.4,
"ecosystem": 1.5,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.564,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "technology",
"rank": null,
"score": 69.5,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
}
},
"external_ids": {
"github": "nanocoai/nanoclaw"
},
"first_seen": "2026-10-26T12:12:45Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_a0392db07f9690e4",
"identity": {
"evidence": [
"repository_ownership"
],
"rules_version": "identity-1.1",
"tier": 3
},
"issues": {
"advisories": 0,
"cves": 10,
"incidents": 0,
"links": [
{
"date": "2026-05-06",
"kind": "cve",
"title": "CVE-2026-7875",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7875"
},
{
"date": "2026-06-23",
"kind": "cve",
"title": "CVE-2026-56402",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56402"
},
{
"date": "2026-06-23",
"kind": "cve",
"title": "CVE-2026-56692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56692"
},
{
"date": "2026-06-23",
"kind": "cve",
"title": "CVE-2026-56693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56693"
},
{
"date": "2026-06-23",
"kind": "cve",
"title": "CVE-2026-56694",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56694"
},
{
"date": "2026-07-26",
"kind": "cve",
"title": "CVE-2026-17433",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17433"
},
{
"date": "2026-07-26",
"kind": "cve",
"title": "CVE-2026-17434",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17434"
},
{
"date": "2026-08-06",
"kind": "cve",
"title": "CVE-2026-18991",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18991"
},
{
"date": "2026-08-06",
"kind": "cve",
"title": "CVE-2026-19005",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19005"
},
{
"date": "2026-09-14",
"kind": "cve",
"title": "CVE-2026-90807",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90807"
}
],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:12:45Z",
"license": "MIT",
"name": "nanoclaw",
"news": [
{
"cluster_size": 1,
"date": "2026-10-22T15:48:44Z",
"headline": "nanoclaw release v2026.10.1-rc.2",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "NanoClaw 2026.10.1-rc.2 is the second release candidate for 2026.10.1. Installs on the `beta` channel get this candidate; `stable` stays on 2026.10.0 until 2026.10.1 is published. Since 2026.10.1-rc.1 it moves OneCLI to 1.45, where new agen",
"tag": "product_update",
"url": "https://github.com/nanocoai/nanoclaw/releases/tag/v2026.10.1-rc.2"
},
{
"cluster_size": 1,
"date": "2026-10-20T16:50:09Z",
"headline": "nanoclaw release v2026.10.1-rc.1",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "NanoClaw 2026.10.1-rc.1 is the first release candidate for 2026.10.1. Installs on the `beta` channel get this candidate; `stable` stays on 2026.10.0 until 2026.10.1 is published. It lets agents create other agents from templates, adds Curso",
"tag": "product_update",
"url": "https://github.com/nanocoai/nanoclaw/releases/tag/v2026.10.1-rc.1"
},
{
"cluster_size": 1,
"date": "2026-08-13T14:18:34Z",
"discussion_url": "https://news.ycombinator.com/item?id=49286357",
"engagement": 117,
"headline": "We eliminated 1,400 CVEs in NanoClaw's container images",
"kind": "community",
"link_confidence": 0.88,
"outlet": "Hacker News",
"summary": null,
"tag": "news",
"url": "https://www.echo.ai/blog/echo-xnanoclaw-under-the-hood"
},
{
"cluster_size": 1,
"date": "2026-07-29T21:27:03Z",
"discussion_url": "https://news.ycombinator.com/item?id=49103298",
"engagement": 8,
"headline": "NanoClaw and Echo launch agent runtime that secures browsers, tools and libs",
"kind": "community",
"link_confidence": 0.88,
"outlet": "Hacker News",
"summary": null,
"tag": "launch",
"url": "https://thenewstack.io/nanoclaw-echo-agent-runtime/"
}
],
"news_checked": true,
"protocols": {
"a2a": {
"checked_at": "2026-10-26T12:23:24Z",
"parser_version": "a2a-0.3+1.0",
"status": "not_found"
},
"ard": {
"checked_at": "2026-10-26T12:23:23Z",
"parser_version": "ard-0.91",
"status": "not_found"
},
"mcp": {
"checked_at": "2026-10-26T12:23:25Z",
"parser_version": "mcp-2025-06-18",
"status": "not_found"
}
},
"publisher_domain": "nanoclaw.dev",
"resource_type": "framework",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:41:12Z",
"cves": 10,
"source": "nvd",
"tier": 1
},
"signals": {
"github_archived": false,
"github_created_at": "2026-01-31T15:47:22Z",
"github_forks": 12709,
"github_language": "TypeScript",
"github_open_issues": 1029,
"github_pushed_at": "2026-10-26T09:38:58Z",
"github_stars": 31019,
"github_topic": "ai-agents",
"homepage": "https://nanoclaw.dev"
},
"slug": "nanocoai-nanoclaw",
"sources": [
{
"payload_hash": "dcf9ecdde80ebf86aa81a99729d666b5b858d4e062bac229e5ac76bf5529d6bf",
"retrieved_at": "2026-10-26T12:12:45Z",
"system": "github",
"url": "https://github.com/nanocoai/nanoclaw"
}
],
"tags": [
"ai-agents",
"ai-assistant",
"claude-code",
"claude-skills",
"openclaw"
],
"tenant": null,
"traces": [],
"trust": {
"compliance": 5,
"identity": 3,
"issues": 3,
"protocols": 5,
"security": 1,
"traces": 5,
"vendor_compliance": 4
},
"url": "https://nanoclaw.dev",
"vendor": "nanocoai"
}