healthcheck

A security audit for OpenClaw automates read-only checks across SSH, firewall, updates, backups, disk encryption, and gateway configurations. It collects contextual host information like OS version and network exposure to establish a baseline risk profile before any changes.

A host security risk assessment evaluates SSH, firewall, update, exposure, backup, encryption, and gateway configurations. It generates a risk profile offering convenience, balanced, or strict security postures to guide staged hardening steps.

Staged hardening proposes reversible security enhancements for SSH and firewall configurations with rollback notes. Read-only checks run initially to ensure no unexpected state changes occur, maintaining access while applying security postures.

Administrative privileges are required to run host security checks and hardening on OpenClaw. Contextual information about the host environment, including OS, version, and access paths, is also necessary to accurately assess risk and apply updates.

The best way to propose staged hardening is through a structured risk assessment that offers reversible steps and rollback notes. It prioritizes security enhancements for SSH, firewalls, and encryption based on a balanced, strict, or convenience posture.

A host security audit runs read-only checks first to collect contextual data on OS, network exposure, and backups without altering the system. This ensures no unexpected changes occur before proposing staged hardening or encryption enhancements.