8 Greatest OpenClaw Internet hosting Suppliers in 2026, Ranked by Hardened Defaults and True Worth
Quick reply first. DigitalOcean is the most effective OpenClaw host in 2026 as a result of its 1-click picture arrives hardened — Caddy with a Let’s Encrypt certificates, a randomly generated gateway token, machine pairing and ephemeral agent containers — earlier than you sort a single command. Cloudways is the choose if you happen to would quite another person validated every agent replace, from $9.99/month. Hostinger is the most affordable working template at $6.49/month promotional. Hetzner and Contabo win on worth alone and hand you each patch. All eight under are ranked on the identical three issues: what ships hardened, who owns the following safety replace, and what you truly pay.
That axis shouldn’t be arbitrary. On 9 February 2026, SecurityScorecard counted 40,214 uncovered OpenClaw situations throughout 28,663 distinctive IP addresses, 63% of noticed deployments weak and 12,812 exploitable by way of distant code execution. Little or no of that was the software program’s fault. OpenClaw binds to loopback by default and its gateway authentication fails closed. These situations appeared in scans as a result of operators opened them to the web with out auth or a firewall. A number can’t cease you making that mistake, however a hardened picture and a firewall that’s already switched on take away a lot of the routes individuals took to get harm.
Yet one more factor to settle earlier than the listing: no plan right here contains the mannequin. OpenClaw is a free, MIT-licensed gateway that connects your messaging channels — Telegram, Slack, Discord, Sign, WhatsApp, Groups, Google Chat, Matrix — to OpenAI, Anthropic, OpenRouter or one other supplier, and that supplier payments you individually. Group estimates put an actively used assistant at $50–$200 a month. Internet hosting is the small quantity in your invoice.
Key takeaways
- DigitalOcean is the one host on this comparability whose picture closes the particular holes behind the 40,214 uncovered situations earlier than first login.
- Cloudways is the one one which takes OpenClaw model updates off your palms, on Cloudways-validated releases, from $9.99/month.
- Solely two suppliers publish an uptime determine on the related web page: Kamatera at 99.95% and Contabo at 99.9%. Everybody else publishes none.
- Hostinger’s KVM 1 is $6.49/month promotional and $11.99 on renewal — roughly an 85% step up you must price range for.
- DigitalOcean’s personal documentation says a Droplet “from $12/month”; its engineering write-up cites a $24/month minimal for this picture. Each numbers are theirs.
OpenClaw internet hosting at a look
| # | Supplier | Greatest for | Verified entry worth | Agent template | Who updates OpenClaw | Printed uptime |
|---|---|---|---|---|---|---|
| 1 | DigitalOcean | Hardened defaults | From $12/mo (docs); $24/mo minimal per DO engineering | Sure — security-hardened 1-click | You (OS updates automated) | None revealed |
| 2 | Cloudways | Managed patching | $9.99/mo (Scout) | Sure — OpenClaw and Hermes | Cloudways, on validated releases | None revealed |
| 3 | Hostinger | Least expensive working template | $6.49/mo promo, $11.99 renewal | Sure — plain Docker template | You | None revealed |
| 4 | Kamatera | Uptime determine and world placement | $4/mo entry (1 GB) | No | You | 99.95% |
| 5 | Hetzner Cloud | Low-cost, competent DIY | €4.49/mo CX22, excl. VAT | No | You | None revealed |
| 6 | Contabo | RAM per euro | €5.50/mo Cloud VPS 4 (24-month time period) | No | You | 99.9% |
| 7 | Vultr | Hourly billing, area alternative | About $5/mo (tracker determine) | No | You | Not verified |
| 8 | Managed OpenClaw startups | Lowest doable entry worth | From about $2/mo, reported | Claimed | Claimed to be theirs | None revealed |
How we ranked these
Three weights, utilized on this order.
What ships hardened. A picture that arrives with TLS, a generated gateway token and a firewall is value multiple that arrives as clean Ubuntu, as a result of clean Ubuntu is what these 28,663 IP addresses have been operating.
#1 Greatest General
UGREEN NAS DH2300 2-Bay for Learners & Private Customers, Cellphone Backup
- Entry-level NAS Private Storage：UGREEN NAS DH2300 is your first and greatest NAS made straightforward. It’s designed for learners who need a easy, personal strategy to retailer movies, images and private recordsdata, which is intuitive for customers shifting from cloud storage or exterior drives and transfer away from scattered date throughout gadgets. This entry-level NAS 2-bay good for private leisure, picture storage, and straightforward knowledge backup (does not help Docker or digital machines).
- Set Your Units Free, Increase Your Digital World: This unified storage hub helps huge capability as much as 64TB.*Storage drives not included. Cease Deleting, Begin Storing. You possibly can retailer 22 million 3MB pictures, or 2 million 30MB songs, or 43K 1.5GB motion pictures or 67 million 1MB paperwork! UGREEN NAS is a greater strategy to unlock storage throughout all of your gadgets corresponding to telephones, computer systems, tablets and likewise does computerized backups throughout gadgets whatever the working system—Window, iOS, Android or macOS.
- The Smarter Lengthy-term Approach to Retailer: In contrast to cloud storage with recurring month-to-month charges, a UGREEN NAS enclosure requires solely a one-time buy for long-term use. For instance, you solely must pay $459.98 for a NAS, whereas for cloud storage, you have to pay $719.88 per yr, $2,159.64 for 3 years, $3,599.40 for five years. You’ll save $6,738.82 over 10 years with UGREEN NAS! *NAS price primarily based on DH2300 + 12TB HDD; cloud price primarily based on 12TB plan (e.g. $59.99/month).
- Blazing Pace, Minimal Energy: Geared up with a high-performance processor, 1GbE port, and 4GB RAM on Board, this NAS handles a number of duties with ease. File transfers attain as much as 125MB/s—a 1GB file takes solely 8 seconds. Do not let gradual clouds maintain you again; they usually want over 100 seconds for a similar activity. The distinction is obvious.
- Let AI Higher Set up Your Recollections: UGREEN NAS makes use of AI to tag faces, places, texts, and objects—so you may effortlessly discover any picture by trying to find who or what’s in it in seconds. It additionally mechanically finds and deletes comparable or duplicate picture, backs up reside images and lets you share them with your pals or household with only one faucet. Every little thing stays effortlessly organized, powered by clever tagging and recognition.
Who owns the following patch. Model 2026.1.29 fastened a series that ran from a malicious net web page to arbitrary instructions on the host. When the following one lands, somebody has to use it. A number that does that for you is doing actual work; a number that pins a model and walks away shouldn’t be.
What you truly pay. Promotional versus renewal, VAT, IPv4 surcharges, contract size, and whether or not the marketed plan even clears OpenClaw’s 2 GB sensible flooring.
Secondary components: KVM virtualisation (necessary — container-based VPS merchandise can’t run OpenClaw), revealed uptime the place one exists, and area alternative.
The plain admission: we didn’t benchmark any of those hosts. There aren’t any velocity exams, no latency figures and no “we examined” claims on this web page. This can be a comparability of revealed phrases, costs and shipped defaults, learn on 28 and 29 August 2026. One supplier missed the listing for that purpose. Akamai Cloud, previously Linode, has 24+ knowledge centres throughout North America, Europe, Asia-Pacific, São Paulo and Jakarta, and markets itself on “no hidden charges, no egress surprises, and no vendor lock-in” — however no plan costs have been readable on the day, so we won’t rank it on a worth we can’t quote.
1. DigitalOcean: greatest for hardened defaults you shouldn’t have to configure
DigitalOcean publishes a security-hardened OpenClaw 1-Click on App, plus a separate Hermes Agent app, and has written up the hardening publicly. The picture is OpenClaw 2026.5.6 on Ubuntu 24.04 with Node.js 22 and Docker.
What that buys, merchandise by merchandise: a Caddy reverse proxy with a Let’s Encrypt certificates issued in opposition to the IP deal with, so that you get TLS with out proudly owning a site; a randomly generated gateway token; machine pairing; brokers operating in ephemeral Docker containers, so an agent that goes improper destroys its container quite than the host filesystem; fail2ban updating firewall guidelines from failed-request logs; unattended upgrades; and default firewall guidelines that rate-limit OpenClaw’s ports. Execution is restricted by default. The threats DigitalOcean names as its design targets are eavesdropping, unauthorised entry to API keys, brokers destroying the host, web background noise and weak dependencies.
Each different entry on this listing, aside from Cloudways, palms you an empty server and a hyperlink to the documentation. That distinction is the whole purpose this sits at primary.
Sizing: DigitalOcean’s documentation recommends 4 GB RAM and a couple of vCPU for private use with one to 5 individuals, and factors at a Droplet from $12/month. Its engineering write-up cites a $24/month Droplet minimal for this picture, due to its snapshot disk and reminiscence footprint, and notes work beneath strategy to help decrease tiers.
Look ahead to: the 2 costs are each DigitalOcean’s personal and so they disagree — assume $24/month till you’ve got confirmed in any other case. No uptime determine seems on the Market itemizing. The pinned OpenClaw model ages from the day you deploy; unattended upgrades cowl OS packages, not the agent, so updating OpenClaw itself stays your job.
2. Cloudways: greatest for handing patch accountability to another person
Cloudways, a part of DigitalOcean, made Managed AI Brokers usually obtainable in 2026, supporting each OpenClaw and Hermes. It’s the solely entry right here the place an organization commits to delivery you agent model updates.
4 plans: Scout at $9.99/month (1 vCPU, 2 GB RAM, 50 GB storage, 2 TB bandwidth), Operator at $19.99 (2 vCPU, 4 GB, 80 GB, 3 TB), Squad at $39.99 (4 vCPU, 8 GB, 160 GB, 5 TB) and Swarm at $79.99 (8 vCPU, 16 GB, 320 GB, 6 TB). A 50% limited-time low cost was utilized on the time of writing, so test what the grid says if you purchase.
Rank #2
Sale
TERRAMASTER D4-320 Exterior Arduous Drive Enclosure 4-Bay (Diskless)
- Excessive-Pace Knowledge Transmission: The D4-320 arduous drive enclosure (a DAS, NOT a NAS) makes use of the USB 3.2 Gen2 protocol, attaining high-speed knowledge transmission of as much as 10Gbps. When geared up with 4 arduous drives, the precise learn/write velocity can attain as much as 1,016 MB/s (mixed learn/write with 4 SATA III HDDs of 8TB every). With only one SSD put in, the learn velocity effortlessly reaches 510 MB/s (SATA III 1TB SSD). The D4-320 helps a single HDD as much as 30TB, with a complete capability of 120TB, and is appropriate with numerous arduous drives, together with 3.5-inch SATA arduous drives, 2.5-inch SATA arduous drives, and a couple of.5-inch SATA SSDs
- Plug-and-Play Compatibility: The D4-320 USB storage helps 4 particular person disks (NO RAID perform), and is plug-and-play, eliminating the necessity for drivers. It’s extremely appropriate with MAC, Home windows, and Linux working techniques. The USB Kind-C interface helps numerous pc interfaces, together with USB 3.0, USB 3.1, USB 3.2, Thunderbolt 3, and Thunderbolt 4
- Scorching Swappable Comfort: The D4-320 HDD enclosure helps scorching swapping, permitting customers to interchange arduous disks with out powering off the machine. This characteristic enhances comfort and effectivity in knowledge switch processes
- Instrument-Free Arduous Drive Administration: That includes a tool-free arduous drive tray design, the D4-320 exterior HDD enclosure permits straightforward set up and elimination of arduous drives with out requiring further instruments. Moreover, the D4-320 incorporates TerraMaster’s distinctive Push-lock design, mechanically securing the arduous drive tray upon insertion, stopping the arduous drive from falling out or disconnecting
- Environment friendly Warmth Dissipation and Quieter Operation: The D4-320 direct connected storage incorporates an clever temperature-controlled fan for optimum warmth dissipation. Moreover, specialised sound-absorbing panels and vibration damping measures contribute to a quieter operation, with noise ranges decreased by as much as 50% in comparison with the earlier technology. In standby mode, the noise stage drops under 21 dB(A), making a remarkably quiet consumer surroundings
Included: a devoted occasion per buyer, Cloudways-validated agent model updates, automated each day backups, managed SSL, SSH entry, area choice and 24/7 help. The product web page states plainly that “your LLM prices keep along with your supplier — by no means bundled into your Cloudways invoice”, which is extra honesty about mannequin billing than most of this market manages.
Operator at $19.99 is the plan that matches DigitalOcean’s personal 4 GB / 2 vCPU suggestion, and it’s the wise default for a family or a small crew.
Look ahead to: the product web page carries no uptime proportion or SLA. Updates land on Cloudways’ validation schedule, not on the day an advisory drops — which is the commerce you’re making, and it cuts each methods. You continue to maintain accountability for the way you configure the gateway contained in the occasion.
3. Hostinger: greatest low-cost template with a documented hardening path
Hostinger provides a one-click OpenClaw Docker template and a Docker supervisor in hPanel that surfaces container logs, which is genuinely helpful the primary time an set up fails. It additionally maintains its personal OpenClaw security-hardening information and a tutorial collection — uncommon for a price range host and price one thing when you find yourself working by the guidelines.
Plans: KVM 1 at 1 vCPU and 4 GB for $6.49/month promotional, $11.99 renewal; KVM 2 at 2 vCPU and eight GB, $8.99 promo, $14.99 renewal; KVM 4 at 4 vCPU and 16 GB, $12.99 promo, $28.99 renewal; KVM 8 at 8 vCPU and 32 GB, $25.99 promo, $49.99 renewal. {Hardware} is AMD EPYC with NVMe storage on a 1 Gbps community, with a public API, a free area for a yr, a built-in firewall with DDoS safety, and a 30-day money-back assure.
KVM 1 clears the 4 GB snug mark on the most affordable line on this desk, which makes it the most effective worth entry level for one particular person operating chat channels and lightweight instruments.
Look ahead to: the template is obvious Docker, not hardened — none of DigitalOcean’s reverse proxy, token technology or fail2ban work is completed for you. On the time of writing there’s no Hermes template, no AI credit or mannequin entry, and no uptime proportion is revealed. Knowledge centres are described by continent (North America, Europe, Asia, South America) quite than by metropolis, so exact placement shouldn’t be one thing you may plan round.
4. Kamatera: greatest for a broadcast uptime determine and world placement
Kamatera is an easy cloud server supplier with two issues no one else in the midst of this listing has: a 99.95% uptime assure overlaying servers, CPUs, firewalls, load balancers and storage, and 18 world places — Sydney, Toronto, Hong Kong, Frankfurt, Tel Aviv, Milan, Tokyo, Bucharest, Singapore, Madrid, Stockholm, Amsterdam and London, plus Atlanta, Los Angeles, Santa Clara, Miami, Chicago, New York, Seattle and Dallas.
The marketed entry server is $4/month: 1 vCPU at 2667 MHz, 1 GB RAM, 20 GB NVMe SSD, 5 TB visitors, Ubuntu Server 24.04. Hourly servers are billed by the minute, with the calculator displaying an instance charge of $0.014/hr, and there’s a free 30-day trial value as much as $100 on one server. No long-term dedication is required, which is an actual benefit over Contabo’s 24-month pricing.
This fits somebody who wants the gateway bodily near the individuals utilizing it, or who needs a contractual uptime quantity to level at.
Look ahead to: 1 GB is under OpenClaw’s 2 GB sensible flooring, so the $4 headline shouldn’t be the configuration you’ll run — price range for a step up earlier than evaluating it to the rest right here. There isn’t any agent template, so the set up is handbook Docker Compose and each component of hardening, patching and firewalling is yours.
5. Hetzner Cloud: greatest worth for a reliable do-it-yourself operator
Hetzner is the selection for individuals who already know what openclaw safety audit --deep does and don’t wish to pay anybody for hand-holding. There isn’t any OpenClaw or Hermes template, so you put in Docker Compose on Ubuntu your self.
After the April 2026 worth revision, the CX22 is €4.49/month and the Arm-based CAX11 is €5.99/month. Add €0.50/month for an IPv4 deal with, and notice that these costs exclude VAT — two line objects most round-ups quietly omit. Its knowledge centres span Falkenstein and Nuremberg in Germany, Helsinki in Finland, Hillsboro (Oregon) and Ashburn (Virginia) within the US, and Singapore.
Our verified figures listed below are the costs; affirm the present per-plan CPU and reminiscence on the spec sheet before you purchase, and ensure no matter you choose clears 2 GB.
Look ahead to: Hetzner publishes no uptime determine for its cloud plans. Firewall guidelines, patching, snapshots and the safety audit are all of your job, with no vendor information written for this software. If you wouldn’t be assured writing the firewall rule that limits the gateway port to a single supply IP, one of many first three entries will serve you higher.
6. Contabo: greatest RAM per euro, with a 99.9% uptime assure
Contabo sells extra reminiscence per euro than the rest on this comparability. Cloud VPS 4 provides 4 vCPU, 8 GB RAM and 100 GB SSD for €5.50/month on a 24-month subscription, tax included, on a 200 Mbit/s port. Above that, VPS 6 is 6 vCPU, 12 GB and 200 GB at €7.50, and VPS 8 is 8 vCPU, 24 GB and 300 GB at €14.00, with VPS 12, 16 and 18 past.
Site visitors is limitless, DDoS safety and a firewall are included at no cost, and there’s a revealed 99.9% uptime assure. Protection runs to 9 areas throughout 11 places spanning the EU, UK, US, Singapore, Japan, India and Australia.
In the event you intend to run browser automation, voice, or a number of brokers with heavy instrument use, 8 GB for €5.50 is the most affordable strategy to cease worrying about reminiscence.
Look ahead to: that worth assumes a 24-month dedication, so evaluate it in opposition to Kamatera’s no-commitment phrases quite than in opposition to a month-to-month charge. vCPUs are shared. Auto-backup is a paid add-on quite than included. There isn’t any agent documentation and no compliance story, so this can be a naked field you harden completely your self.
7. Vultr: greatest for hourly billing and knowledge centre alternative
Vultr runs 32 knowledge centres throughout 19 nations and provides hourly billing, which makes it a smart place to face up a gateway for every week, check a set of abilities, and destroy it with no month-to-month dedication.
Cloud Compute Common is listed at about $5/month for 1 vCPU, 1 GB RAM, 25 GB SSD and 1 TB bandwidth, and about $10/month for 1 vCPU, 2 GB RAM, 55 GB SSD and a couple of TB bandwidth. The Excessive Efficiency line, constructed on NVMe drives and AMD EPYC processors, opens at roughly $6/month for 1 GB. The $10 tier is the primary one which meets OpenClaw’s 2 GB flooring, so deal with that as the actual entry worth.
Look ahead to: these figures come from third-party pricing trackers, as a result of Vultr’s personal pricing web page couldn’t be learn on the day we compiled this. Deal with them as “listed at about $X” and make sure on the seller’s web page before you purchase — we’d not need you to plan a price range on a quantity we couldn’t learn at supply. There isn’t any agent template, and no uptime determine was verified. Every little thing after docker compose up is yours.
Rank #4
Sale
UGREEN NAS DXP2800 2-Bay for Superior House Customers, Distant Staff & Creators
- 【Superior House Knowledge & Media Hub】For superior residence customers who want telephone backup, file storage, and centralized knowledge administration. Centralize household images, 4K movies, motion pictures, pc backups, and private recordsdata in a single place whereas operating a number of apps for residence leisure and on a regular basis knowledge administration. Appropriate for households with rising digital libraries and a number of NAS use instances.
- 【Constructed for Creators, Media Servers & Superior Apps】Powered by the Intel N100 Quad-Core CPU, 8GB DDR5 RAM, 2.5GbE networking, and twin M.2 NVMe slots, DXP2800 handles giant recordsdata and heavier workloads with ease. Run Docker, digital machines, and media server purposes appropriate with Plex—very best for content material creators, tech fans, and superior residence customers managing 4K movies, RAW images, private media libraries, and a number of NAS apps.
- 【As much as 80TB for Rising Digital Libraries】 Helps as much as 80TB of storage utilizing two HDD bays and two M.2 NVMe SSD slots for household images, motion pictures, RAW images, 4K movies, work recordsdata, and machine backups. AI picture administration helps recognition of individuals, objects, scenes, and places, album group, and duplicate picture detection. HDDs and SSDs should not included.
- 【AI-powered House Surveillance】Flip DXP2800 right into a centralized residence surveillance hub by connecting appropriate community cameras and storing recordings regionally in your NAS. AI-powered options embrace Face Recognition, Folks Detection, and Pet Detection, serving to superior residence customers overview vital occasions extra effectively whereas managing residence surveillance and private knowledge in a single place.
- 【One knowledge Heart Throughout Your Units】Preserve recordsdata from desktops, laptops, telephones, tablets, and different gadgets collectively as an alternative of scattered throughout cloud accounts and exterior drives. Entry, again up, arrange, and share knowledge throughout Home windows, macOS, Android, iOS, net browsers, and appropriate good TVs—very best for creators and superior residence customers working throughout a number of gadgets.
8. Specialist managed OpenClaw startups: greatest for the most affordable doable entry, and the most important unknowns
A complete class appeared in 2026 promoting managed OpenClaw and nothing else, with costs reported from about $2/month on the least expensive finish. Names circulating on this market embrace MyClaw, OpenClaw Launch, LobsterTank and xCloud. We couldn’t confirm options, specs or pricing for any of them, so nothing past that $2 determine is quoted right here.
It’s ranked final for a selected purpose quite than snobbery. A managed supplier holds your gateway token and, normally, your mannequin API keys — exactly the fabric that turned up within the February scans. Most of those firms are months previous, with no revealed SLA, no safety audit and no breach historical past you could possibly assess even if you happen to wished to.
If you’re going to purchase one, put 4 inquiries to them earlier than you hand over a key: the place does the occasion bodily run, who inside the corporate can entry it, what occurs to your knowledge if the corporate folds, and may you export all the pieces and self-host it in a day. A vendor that solutions all 4 clearly is a unique proposition from one which solutions none.
Look ahead to: focus danger. You might be trusting an unaudited third social gathering with the credentials to an agent that may learn your messages and run instructions. At $2/month, no one is funding a safety crew.
What truly strikes the value
| Supplier | Marketed entry | What modifications the quantity | Dedication |
|---|---|---|---|
| DigitalOcean | From $12/mo | DigitalOcean’s personal engineering write-up cites a $24/mo minimal for this picture | None said |
| Cloudways | $9.99/mo Scout | 50% limited-time low cost utilized at time of writing; grid runs to $79.99 | None said |
| Hostinger | $6.49/mo KVM 1 | Renews at $11.99; increased tiers renew at as much as $49.99 | Promotional time period |
| Kamatera | $4/mo | Entry tier is 1 GB, under the two GB flooring — price range a bigger configuration | None required |
| Hetzner | €4.49/mo CX22 | +€0.50/mo for IPv4; all costs exclude VAT | None said |
| Contabo | €5.50/mo Cloud VPS 4 | Worth assumes 24 months, tax included; auto-backup is a paid add-on | 24 months |
| Vultr | About $5/mo | Tracker determine, not learn from the seller web page; 2 GB tier is about $10 | Hourly obtainable |
| Managed startups | From about $2/mo | Reported solely — nothing else verified | Unknown |
How to decide on an OpenClaw host
Begin with the arduous constraints. OpenClaw wants KVM virtualisation — shared internet hosting and container-based VPS merchandise can’t run it. You want Ubuntu 22.04 or 24.04, Docker Engine and Docker Compose v2, and at the very least 2 GB RAM, with 4 GB snug and 10 GB or extra of disk for pictures, knowledge and logs. One-gigabyte servers are routinely OOM-killed throughout set up; if you happen to see exit code 137, that’s what occurred.
| Use case | Measurement to purchase |
|---|---|
| One particular person, chat channels solely | 1 vCPU / 2 GB / 25–50 GB |
| Browser automation or voice enabled | 2 vCPU / 4 GB / 80 GB |
| Small crew, heavy instrument use | 4 vCPU / 8 GB / 160 GB |
| Working an area mannequin | Separate GPU occasion |
Then reply one query truthfully: when the following advisory lands, will you apply the replace inside a day? If sure, Hetzner or Contabo will serve you properly and price the least. If no, pay Cloudways to do it, or take DigitalOcean’s hardened picture in order that the hole between advisories is at the very least survivable.
No matter you select, work by the official gateway safety documentation on day one. Preserve gateway.bind: "loopback". Generate a robust token with openclaw physician --generate-gateway-token. Run openclaw safety audit --deep after any config change and earlier than any community publicity. Set ~/.openclaw/openclaw.json to 600 and ~/.openclaw/ to 700. Activate brokers.defaults.sandbox.mode: "all". Set mDNS discovery to minimal or off, as a result of full mode broadcasts filesystem paths and SSH ports. Don’t run the gateway as root.
Personal {hardware} — a mini PC or Mac mini — stays respectable for one particular person with nothing delicate, and the loopback-first defaults swimsuit it. The prices are a house connection as an alternative of an uptime assure, an outage each time the ability cuts, and a CGNAT downside that wants a tunnel or a VPN. Don’t remedy it with a port ahead. That’s precisely how tens of hundreds of gateways ended up within the scans.
Steadily requested questions
Does any OpenClaw host embrace the AI mannequin?
No. Not one of many eight. OpenClaw is a gateway that connects out to OpenAI, Anthropic, OpenRouter or one other supported supplier, and that supplier payments you individually. Cloudways states this outright: your LLM prices keep along with your supplier. Group estimates put an actively used assistant at $50–$200 a month, with a generally cited determine of about $0.30 per advanced activity on price range fashions. Ten advanced duties a day works out close to $90 a month — roughly 9 occasions a $10 server. Price management due to this fact lives in immediate and gear self-discipline: capped context, restricted computerized browser use, and cheaper fashions for routine channel replies. Selecting a €4.49 server over a $9.99 one modifications virtually nothing about your complete spend.
How a lot RAM does OpenClaw really want?
Two gigabytes is the sensible minimal and 4 is snug, in accordance with group setup guides constantly. Put aside at the very least 10 GB of storage for pictures, knowledge and logs. One-gigabyte servers are generally killed by the out-of-memory handler throughout set up — the symptom is exit code 137 partway by a picture construct. At the least 2 GB is required for the construct to finish. DigitalOcean’s Market documentation recommends 4 GB RAM and a couple of vCPU for private use overlaying one to 5 individuals, which is an inexpensive default for anybody operating greater than a single chat channel. Transfer to eight GB after you have browser automation, voice or a number of brokers with heavy instrument use operating directly.
Can I run OpenClaw on shared internet hosting or a container-based VPS?
No. OpenClaw requires KVM virtualisation, as a result of it runs Docker Engine and Docker Compose v2 on Ubuntu 22.04 or 24.04, and container-based VPS merchandise can’t present that. This guidelines out most sub-$3 internet hosting plans whatever the RAM they promote. Verify the product web page for the phrase KVM before you purchase — Hostinger names it within the plan title, and the opposite cloud suppliers on this listing all promote KVM situations. If a plan is described as a “container”, “OpenVZ” or “LXC” product, it won’t work, and no quantity of configuration will make it work.
Greatest Worth
CENMATE Aluminum 4 Bay Arduous Drive Enclosure with Cooling Fan for two.5“/3.5″ SATA HDD/SSD with USB A/C 3.0, Help Scorching Swappable, Instrument-Free HDD Enclosure, DAS(NO RAID/NAS)
- 【Dependable Exterior Storage System for People and Enterprise】The 4 Bay Arduous Drive Enclosure helps 2.5/3.5 inches HDD and SSD, max capability as much as 80TB( 20TB for every arduous drive), it is a very best exterior arduous drive enclosure for private or enterprise utilizing.Save house in your desktop or laptop computer.
- 【No warmth】The 4 bay arduous drive reader in-built Aluminum-Alloy supplies and a couple of inch Fan.Maximize the safety of your knowledge.NOTE：Fan noise is round 40-50 decibels, not advisable if you’re very delicate to noise.
- 【As much as 5Gbps】This 4 bay enclosure equips with superior chip and USB 3.0 output interface, Max 5Gbps beneath UASP management.Switch 1G film in 3-5 seconds with USB 3.0 Ports, which is 10 occasions sooner than USB 2.0.
- 【Extensive Compatibility, Plug and Play】Geared up with USB A/C 3.0 Cable Cable.Appropriate with Home windows 7 and above, Mac 9.1 and above, Linux.Plug and play, no fuss, no muss.
- 【Steady energy provide】Geared up with DC 12V energy adapter to supply stability for high-speed transmission.
Why have been 40,000 situations uncovered if the defaults are secure?
As a result of operators modified them. OpenClaw binds to loopback by default and its gateway authentication fails closed — with no legitimate auth path configured, the gateway refuses WebSocket connections outright. The documentation is express that it’s essential to by no means expose the gateway unauthenticated on 0.0.0.0, and that the lan, tailnet and customized modes require gateway auth plus an actual firewall. Folks certain to all interfaces or port-forwarded anyway. Censys watched publicly uncovered situations develop from roughly 1,000 to 21,000+ between 25 and 31 January 2026; by 9 February, SecurityScorecard counted 40,214. Internet hosting alternative modifications the percentages as a result of a hardened picture and a working firewall take away the simplest methods to make that mistake.
What did model 2026.1.29 repair?
An assault chain, plus two command-injection advisories. The chain ran like this: a consumer visits an attacker-controlled web page; JavaScript on that web page silently opens a WebSocket to the native OpenClaw gateway; it steals the auth token; it takes administrative management; it disables consumer affirmation prompts; it escapes the Docker sandbox; and it runs arbitrary instructions on the host. That’s the reason a token stolen from a browser tab was sufficient. The discharge landed on 30 January 2026, the identical day the venture took its present title. Three high-severity CVEs have public exploit code obtainable. That is the category of replace you want utilized shortly, and it’s the single greatest argument for both a managed plan or a disciplined patching behavior.
Is managed OpenClaw internet hosting secure?
It relies upon completely on who’s managing it. Cloudways is a identified firm inside DigitalOcean with a broadcast plan grid, each day backups and validated replace releases — an inexpensive danger. The specialist startups promoting managed OpenClaw from round $2 a month are a unique proposition: most are months previous, with no revealed SLA, no safety audit and no breach historical past to evaluate. Any managed supplier holds your gateway token and normally your mannequin API keys, which is similar materials uncovered within the February scans. Ask the place the occasion runs, who can entry it, what occurs to your knowledge if the corporate closes, and whether or not you may export and self-host inside a day.
Which supplier has the most effective uptime assure?
Kamatera, at 99.95%, overlaying servers, CPUs, firewalls, load balancers and storage. Contabo publishes 99.9%. These are the one two figures on this comparability. DigitalOcean’s Market itemizing, the Cloudways product web page, Hostinger and Hetzner’s cloud plans publish no uptime proportion on the related web page, and we didn’t confirm one for Vultr. That absence shouldn’t be the identical as poor availability — it means no quantity is dedicated to in writing the place a purchaser would search for it. If a contractual uptime determine issues to your choice, that narrows the sphere to 2, and neither of them provides an agent template.
Verdict
For most individuals, DigitalOcean. The hardened 1-click picture closes the precise failure that produced 40,214 uncovered situations earlier than you log in, and the hardening is documented publicly quite than asserted. Finances $24/month quite than $12 till you’ve got confirmed which determine applies.
If you’ll not patch reliably, Cloudways Operator at $19.99/month. Two vCPU and 4 GB matches the advisable dimension, and validated agent updates plus each day backups are the one managed patching dedication on this comparability from an organization with a observe file.
On the tightest price range, Hostinger KVM 1 at $6.49 promotional — the most affordable 4 GB entry with a template and a vendor hardening information — however write $11.99 in your price range, not $6.49.
If you recognize your approach round a firewall, Hetzner’s CX22 at €4.49 plus €0.50 for IPv4, excluding VAT. If you’d like reminiscence headroom as an alternative, Contabo’s Cloud VPS 4 provides 8 GB for €5.50 on a 24-month time period, with a 99.9% uptime assure behind it.
If placement or a contractual uptime determine decides it, Kamatera — 99.95%, 18 places, minute-level billing, no dedication — sized above its 1 GB entry tier. For brief-lived experiments, Vultr’s hourly billing throughout 32 knowledge centres does the job, after you have confirmed the value at supply.
Skip the $2/month specialists except you’ve got requested the 4 questions and preferred the solutions.
Going deeper than a shortlist: Greatest OpenClaw Internet hosting in 2026: 7 Choices Ranked on What Retains a Gateway Secure and On-line. One-Click on or Handbook? What Paying Extra for a Hermes Agent Server Truly Buys.
All costs, specs and uptime figures on this web page have been learn from vendor pricing pages and documentation on 28 and 29 August 2026, besides Vultr’s, which come from third-party pricing trackers as a result of the seller web page couldn’t be learn that day. Promotional pricing strikes shortly — affirm the present determine before you purchase.