{"id":15967,"date":"2026-03-17T19:39:07","date_gmt":"2026-03-17T19:39:07","guid":{"rendered":"https:\/\/newestek.com\/?p=15967"},"modified":"2026-03-17T19:39:07","modified_gmt":"2026-03-17T19:39:07","slug":"nvidia-nemoclaw-promises-to-run-openclaw-agents-securely","status":"publish","type":"post","link":"https:\/\/newestek.com\/?p=15967","title":{"rendered":"Nvidia NemoClaw promises to run OpenClaw agents securely"},"content":{"rendered":"<div>\n<div id=\"remove_no_follow\">\n<div class=\"grid grid--cols-10@md grid--cols-8@lg article-column\">\n<div class=\"col-12 col-10@md col-6@lg col-start-3@lg\">\n<div class=\"article-column__content\">\n<section class=\"wp-block-bigbite-multi-title\">\n<div class=\"container\"><\/div>\n<\/section>\n<p>In the few short weeks since OpenClaw became the biggest story in agentic AI, it has been dogged by concerns that it is not secure enough to be safely let loose in enterprises.<\/p>\n<p>This week at the Nvidia GPU Technology Conference (GTC) conference, CEO Jensen Huang announced what he believes is the answer: <a href=\"https:\/\/www.nvidia.com\/en-gb\/ai\/nemoclaw\/\" target=\"_blank\" rel=\"noreferrer noopener\">NemoClaw<\/a>.<\/p>\n<p>Built in consultation with OpenClaw\u2019s creator, <a href=\"https:\/\/steipete.me\/posts\/2026\/openclaw\" target=\"_blank\" rel=\"noreferrer noopener\">Peter Steinberger<\/a>, NemoClaw is based on Nvidia Agent Toolkit, part of the broader NeMo ecosystem for building AI agents.<\/p>\n<p>The security innovation is Nvidia OpenShell, a new security and policy enforcement guardrail that integrates with the OpenClaw command line.<\/p>\n<p>The company decided to build NemoClaw after realizing that what Steinberger had created in <a href=\"https:\/\/www.computerworld.com\/article\/4128257\/openclaw-the-ai-agent-thats-got-humans-taking-orders-from-bots.html\" target=\"_blank\">OpenClaw<\/a> was an agentic \u201coperating system,\u201d Huang said. \u201cIt is no different to how Windows made it possible to create personal computers. Now OpenClaw has made it possible for us to create personal agents,\u201d <a href=\"https:\/\/www.youtube.com\/watch?v=jw_o0xr8MWU\" target=\"_blank\" rel=\"noreferrer noopener\">he added<\/a>.<\/p>\n<p>Huang compared OpenClaw\u2019s significance to that of the arrival of Linux and HTML in the 1990s, noting that it has given the AI industry exactly what it needed to accelerate agentic AI.<\/p>\n<p>\u201cEvery company in the world today needs to have an OpenClaw strategy,\u201d he said. \u201cThis is the new computer. Post-OpenClaw, post-agentic [\u2026] every SaaS company will become an agentic-as-a-service company.\u201d<\/p>\n<h2 class=\"wp-block-heading\" id=\"security-sandbox\">Security sandbox<\/h2>\n<p>Last year, the release of Chinese company <a href=\"https:\/\/www.computerworld.com\/article\/3808579\/chinese-ai-startup-deepseek-unveils-open-source-model-to-rival-openai-o1.html\" target=\"_blank\">DeepSeek\u2019s super-efficient R1 model<\/a> suggested that big AI might not be the only available future. This year, thanks to the work of a single developer, Steinberger, it\u2019s the turn of agentic AI.<\/p>\n<p>Until recently, the assumption was that this year\u2019s autonomous agents would be chatbot front ends connecting most of the time to cloud platforms such as Microsoft AutoGen, Google Vertex AI, or OpenAI\u2019s Assistants API.<\/p>\n<p>The rapid ascent of OpenClaw (formerly Clawdbot and Moltbot) in early 2026 has shown that agentic, or \u2018edge,\u2019 AI represents an alternative model in which agentic processing happens on local devices such as PCs.<\/p>\n<p>OpenClaw\u2019s ascent was so rapid that by mid-February, only weeks after it became widely known, <a href=\"https:\/\/steipete.me\/posts\/2026\/openclaw\" target=\"_blank\" rel=\"noreferrer noopener\">Steinberger was hired by OpenAI<\/a>, and OpenClaw became an internal open-source project.<\/p>\n<p>At the same time, OpenClaw\u2019s security shortcomings were generating plenty of negative headlines, with researchers finding <a href=\"https:\/\/www.csoonline.com\/article\/4134540\/six-flaws-found-hiding-in-openclaws-plumbing.html\" target=\"_blank\">security flaws<\/a> galore, including ways in which a device running it could be <a href=\"https:\/\/www.csoonline.com\/article\/4138431\/your-personal-openclaw-agent-may-also-be-taking-orders-from-malicious-websites.html\" target=\"_blank\">compromised remotely<\/a>.<\/p>\n<p>NemoClaw\u2019s answer is to isolate OpenClaw using the OpenShell runtime. This contains several security layers, including kernel-level sandboxing and a \u201cprivacy router\u201d that monitors OpenClaw\u2019s behavior and communication with other systems. For example, if it detects OpenClaw sending sensitive data somewhere it shouldn\u2019t, it steps in to block the action.<\/p>\n<p>This is central to mitigating the security issues that might otherwise hold back the deployment of OpenClaw, or third-party \u201cclaws\u201d, in enterprises. It\u2019s also the layer researchers will doubtlessly soon be poring over for CVE-level weaknesses.<\/p>\n<h2 class=\"wp-block-heading\" id=\"hardware-agnostic\">Hardware agnostic<\/h2>\n<p>For enterprises wary of lock-in, the first question they will ask is what Nvidia gains from NemoClaw. NemoClaw\u2019s OpenShell is fully open source, an attempt to turn it into the gold standard for agentic claw security.<\/p>\n<p>The underlying hardware is not vendor specific either; NemoClaw is agnostic and will run on any hardware, not just Nvidia\u2019s. However, it is still optimized for the Nvidia-specific technologies such as Nvidia Inference Microservices (NIM), even if it technically works with other microservices.<\/p>\n<p>\u201cNvidia is doing what Nvidia always does. They are pulling the center of gravity toward their stack,\u201d commented <a href=\"https:\/\/www.linkedin.com\/in\/zahra-timsah-phd-mba-msc-060736125\/\" target=\"_blank\" rel=\"noreferrer noopener\">Zahra Timsah<\/a>, CEO of AI governance platform i-GENTIC AI. \u201cDevelopers will be attracted to [NemoClaw], not because it is better, but because it is faster on Nvidia hardware and easier if you are already in that ecosystem,\u201d she said.<\/p>\n<p>But it still lacks elements essential for developers: \u201cThe missing piece is not tooling. It is control. Real developers building agentic systems want observability, policy enforcement, rollback, and audit trails,\u201d said Timsah.<\/p>\n<p>\u201cFor enterprises, this [announcement] makes OpenClaw more usable from an infrastructure standpoint. It helps run agents closer to data,\u201d she observed. \u201cBut it does not solve governance, consistency, or cross system reasoning. So, the real question is not \u2018Can agents run at the edge?\u2019 It\u2019s \u2018Can you trust what they do when no one is watching?\u2019\u201d<\/p>\n<p><em>This article originally appeared on <a href=\"https:\/\/www.cio.com\/article\/4146545\/nvidia-nemoclaw-promises-to-run-openclaw-agents-securely.html\" target=\"_blank\">CIO.com<\/a>.<\/em><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>In the few short weeks since OpenClaw became the biggest story in agentic AI, it has been dogged by concerns that it is not secure enough to be safely let loose in enterprises. This week at the Nvidia GPU Technology Conference (GTC) conference, CEO Jensen Huang announced what he believes is the answer: NemoClaw. Built in consultation with OpenClaw\u2019s creator, Peter Steinberger, NemoClaw is based&#8230; <\/p>\n<p class=\"more\"><a class=\"more-link\" href=\"https:\/\/newestek.com\/?p=15967\">Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-15967","post","type-post","status-publish","format-standard","hentry","category-uncategorized","is-cat-link-borders-light is-cat-link-rounded"],"_links":{"self":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts\/15967","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=15967"}],"version-history":[{"count":0,"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts\/15967\/revisions"}],"wp:attachment":[{"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=15967"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=15967"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=15967"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}