Index / NullClaw · updated Aug 17, 2026
NullClaw
nullclaw/nullclaw · healthy · rank 13 of 43 by stars
NullClaw is the fastest and smallest OpenClaw-compatible AI agent, compiled as a 678KB static Zig binary that boots in under 2ms with ~1MB RAM. Its vibe is lean, security-hardened, and rapidly iterated, with recent commits focusing on sandboxing and failure-path privacy.
Facts
Repository
Runtime
Posture
Security breakdown
Composite 95 / 100 · how these are scored
higher is safer
higher is safer
higher is safer
higher is safer
higher is riskier
Model access
Read from the repository, not written by a model · 51 files examined
5 providers · runs locally · gateway support
Pinned models
glm-4.7 released 2025-12-22 — 8 months old (from the public model catalogue)
Pin last edited 35 days ago
Several defaults are pinned; the project picks one per provider rather than shipping a single default.
Evidence
Decision
Why choose NullClaw over OpenClaw?
Why choose this
- 678KB static binary vs heavier OpenClaw runtime
- Sub-2ms boot enables instant edge response
- ~1MB RAM allows microcontroller deployment
Tradeoffs
- Smaller community and plugin ecosystem than OpenClaw
- No native UI without separate nullhub beta
- Fewer integrations (18 channels vs OpenClaw's many)
Best fit
- edge and IoT deployments
- resource-constrained SBCs
- privacy-focused autonomous agents
Avoid if
- need rich UI without nullhub
- prefer large plugin ecosystem
- want mainstream community support
Evidence from README and recent commits is strong for technical claims, but community sentiment is limited by zero Reddit mentions and only web directory listings. Uncertainty remains on multi-user support and real-world plugin maturity.
AI layer reviewed Aug 2, 2026 · how this is written
Star activity
8,025 stars today
Overview
NullClaw is an OpenClaw-compatible autonomous AI assistant infrastructure written entirely in Zig, compiling to a 678 KB static binary that boots in under 2 ms and consumes roughly 1 MB of RAM. Its core architecture relies on vtable interfaces for providers, channels, tools, memory, and tunnels, making every subsystem pluggable while maintaining zero runtime overhead, no garbage collector, and true portability across ARM, x86, and RISC-V.
Recent development activity shows a focus on hardening: commits suppress stderr leakage to channels, enforce public-host rejection before socket side effects, and make queue-mode configuration fail-closed on typos. Security features include multi-layer sandboxing (landlock, firejail, bubblewrap, docker), encrypted secrets, workspace scoping, and explicit allowlists, positioning NullClaw as a privacy-strong edge agent.
Compared to OpenClaw, NullClaw trades breadth of community and UI polish for extreme efficiency and deterministic resource usage, targeting $5 boards and microcontrollers rather than full desktop or cloud suites. The accompanying nullhub project (beta) provides a UI layer, but the base binary remains deliberately minimal.