Index / Carapace · updated Aug 17, 2026
Carapace
puremachinery/carapace · healthy · rank 39 of 43 by stars
A hardened Rust rewrite of OpenClaw that prioritizes security defaults and signed WASM plugins. It positions itself as the 'hard shell' alternative for users wary of the January 2026 OpenClaw disclosures.
Facts
Repository
Runtime
Posture
Community
Security breakdown
Composite 95 / 100 · how these are scored
higher is safer
higher is safer
higher is safer
higher is safer
higher is riskier
Model access
Read from the repository, not written by a model · 46 files examined
5 providers · runs locally · custom endpoint
Pinned models
gpt-5.5 released 2026-04-24 — 4 months old (from the public model catalogue)
Pin last edited 3 months ago
Evidence
Decision
Why choose Carapace over OpenClaw?
Why choose this
- OS-level subprocess sandboxing and encrypted secret storage
- Rust memory safety with low resource footprint
- Signed WASM plugins with strict capability limits
Tradeoffs
- Smaller community and fewer ready-made skills
- Younger project (v0.8.0) with partial feature paths
- Less cross-platform mobile support than OpenClaw
Best fit
- Privacy-focused self-hosters
- Security-conscious developers
- Rust enthusiasts wanting local AI assistant
Avoid if
- Users needing large plugin ecosystem
- Non-technical users
- Those wanting managed cloud service
Repo README and commit history show active maintenance and detailed security model, but Reddit and Brave results are off-topic (gaming/biology) or OpenClaw-centric, leaving external sentiment unverified.
AI layer reviewed Aug 2, 2026 · how this is written
Star activity
47 stars today
Overview
Carapace is a security-focused, open-source personal AI assistant written in Rust, explicitly built as a hardened alternative to OpenClaw/clawdbot. It runs locally on a user's machine and connects to multiple messaging channels (Matrix, Signal, Telegram, Discord, Slack, webhooks, console) while supporting a wide range of LLM providers including Anthropic, OpenAI, Ollama, Gemini, Bedrock, and local Claude CLI.
Its core architecture emphasizes secure defaults: localhost-only binding, OS credential store with AES-256-GCM fallback, OS-level subprocess sandboxing for protected paths, and a signed WASM plugin runtime with resource limits. The project documents a threat-by-threat comparison addressing the January 2026 OpenClaw security disclosures, covering unauthenticated access, plaintext secrets, supply chain risks, prompt injection, and SSRF.
Unlike OpenClaw's broad ecosystem and cross-platform reach, Carapace is younger (v0.8.0) and prioritizes stability on verified paths, with partial features explicitly flagged. It is best suited for technically inclined users who value a hard security shell over plug-and-play convenience.