openclaw-security-watchdog

A system security audit evaluates runtime integrity, configuration permissions, and network exposure to identify weaknesses across a machine. It turns comprehensive checks into actionable, human-readable reports with clear severity indicators for incident triage and host hardening.

Yes, you can scan for secrets leakage and privilege escalation risks using a local-only mode. This privacy-first approach operates with zero network traffic, ensuring comprehensive security auditing without sending outbound data or relying on external threat intelligence lookups.

The security audit produces reports with clear risk signals, detailing findings per check across 14 dimensions using severity scoring. It highlights configuration permissions, supply-chain validity, and outbound traffic indicators to guide host hardening and incident triage workflows.

Full mode integrates threat-intelligence-backed malware signals and outbound traffic checks, whereas local-only mode restricts network exposure and operates with zero network traffic. Both modes evaluate runtime integrity and secrets leakage while maintaining privacy constraints.

You should use a local-only security scan in privacy-constrained environments where outbound traffic is restricted, as it operates with zero network traffic. Choose a full scan when you need threat-intelligence-backed malware signals and external supply-chain validity checks.