New Platform Secures AI Agents
Adversa AI has launched SecureClaw, an open-source security plugin for OpenClaw AI agents. The release is aligned with OWASP Top 10 for LLMs and aims to provide purpose-built security as investment in personal and autonomous AI agents continues to grow.
- Adversa AI, the creator of SecureClaw, is an Israeli cybersecurity firm that specializes in AI security and has previously developed the "MCP Security TOP 25," a framework that catalogs vulnerabilities in the Model Context Protocol used by AI agents. - The OpenClaw framework has documented security issues, including a high-severity vulnerability (CVE-2026-25253) that could allow remote code execution through a malicious link, highlighting the need for enhanced security measures. - Security researchers have raised concerns about OpenClaw's design, which by default can grant agents extensive permissions, including access to files, credentials, and API keys, creating what some call a "lethal trifecta" of risk when combined with exposure to untrusted content and external communication. - SecureClaw's features, such as "prompt injection awareness" and "credential and sensitive data leak detection," directly address some of the most critical risks outlined in the OWASP Top 10 for LLM Applications, specifically LLM01: Prompt Injection and LLM02: Sensitive Information Disclosure. - The market for autonomous AI agents is projected to grow significantly, with one forecast estimating an increase from USD 7.4 billion in 2024 to USD 86.9 billion by 2032, intensifying the need for robust security solutions as adoption scales. - Beyond direct attacks, the OpenClaw ecosystem has faced threats from malicious "skills" published on its marketplace, ClawHub, where nearly 20% of packages in one analysis were found to be harmful, some delivering malware like the Atomic Stealer (AMOS). - One of SecureClaw's listed capabilities is "memory integrity monitoring," a security control designed to prevent unauthorized code from running and tampering with processes in memory, which is crucial for maintaining the integrity of the agent's operations. - The development of security solutions for AI agents is a growing priority, with 36% of executives citing AI-based security as a top-three budget priority, and 35% specifically prioritizing the deployment of agentic AI to improve efficiencies in areas like cloud security.