Security & uptime

Keep your AI agent off your home network

Running OpenClaw or Hermes Agent on a spare laptop or Mac mini puts an autonomous program on the same network as your personal devices, and it goes offline whenever your power or internet does. Here is why hosting it elsewhere is safer and more reliable.

$49/mo per instance · $15 AI credit included ·Pay with Lightning

Nothing exposed at home

No port forwarding, no tunnels, no agent sitting next to your laptop, phone, NAS and cameras.

Isolated container

Each agent runs in its own container on NowClaw infrastructure, separate from other users and from your devices.

Online 24/7

Agents restart automatically, so power cuts, ISP outages and sleep mode at home never take your bot offline.

Updates handled

Agents pull the latest image and run repair checks on every start, without you touching a terminal.

Why an agent at home is a security risk

AI agents like OpenClaw and Hermes Agent are built to act: they run commands, browse the web, read files and call APIs. That is what makes them useful, and also what makes them risky on a home network.

A malicious web page or email can try to steer an agent with prompt injection. If the agent lives on your home network, anything it can reach, from shared folders to your router admin page, is within reach of whoever steers it. Exposing its web gateway through a port forward or tunnel adds another way in.

Hosting the agent in an isolated container keeps it away from your personal devices entirely. If something goes wrong, the blast radius is that one container, not your home.

Why home hosting hurts uptime

An agent is only useful if it answers. At home it goes quiet every time the power drops, the internet hiccups, the machine sleeps, or an OS update reboots it overnight. Reminders and follow ups scheduled for that window are simply missed.

On NowClaw, agents run on always on servers with automatic restarts. Each start pulls the latest agent image and runs repair checks, so a broken upgrade does not leave your Telegram bot silent.

What hosting does not change

Your agent still acts with whatever access you give it. Connect only the accounts it needs, keep its Telegram bot paired to you, and treat its API keys like passwords. NowClaw handles the server; you stay in control of what the agent is allowed to touch.

Self-hosted at homeNowClaw
NetworkShares your home networkIsolated container, off your network
Open portsOften needs a port forward or tunnelNone on your side
UptimeDown with power, Wi-Fi, sleep or rebootsAlways on, restarts automatically
UpdatesManual upgrades and fixesLatest image pulled on every start
Hardware~$600 Mac mini or spare machine, plus powerNothing to buy

Live in three steps

  1. 01

    Log in

    Use your Nostr keys (browser extension, Nostr Connect, or a fresh keypair) or email.

  2. 02

    Pay with Lightning

    Scan a Lightning invoice or pay from a connected NWC wallet. No card needed.

  3. 03

    Pick agent & model

    Choose OpenClaw or Hermes Agent, select a model, and pair your Telegram bot.

Frequently asked questions

Is it safe to run OpenClaw on my home computer?+

It works, but the agent shares your home network and can reach other devices on it. Running it in an isolated, hosted container removes your home network from the picture.

Do I need to open ports or set up a tunnel?+

No. NowClaw agents talk to you over Telegram, so there is nothing to expose on your router.

What happens if my internet goes down?+

Nothing, for your agent. It runs on NowClaw servers, so it keeps answering and running scheduled tasks while you are offline.

Is my agent isolated from other users?+

Yes. Every instance runs in its own container with its own storage, keys and Telegram pairing.

Who keeps the agent updated?+

NowClaw does. Agents pull the latest image and run repair checks each time they start.

Can I move my existing self-hosted agent?+

Yes. Upload a zip of your souls, memory and skills and they are imported into your hosted agent.

Do I still need a Mac mini?+

No. A Mac is only required for iMessage, which is offered through the 1-on-1 setup service.

Move your agent off your home network

Deploy your agent