Security Feature Matrix
Verified June 2026 · Sources: official documentation, GitHub, Unit 42, third-party audits
| Security Capability | Gobii | OpenClaw | Zapier Central |
|---|---|---|---|
| SOC 2 Type II | ✓ Certified | ✗ Not certified | ✓ Certified |
| Data Encryption at Rest | ✓ AES-256 | ~ Depends on deployment | ✓ |
| Data Encryption in Transit | ✓ TLS 1.3 | ~ Depends on deployment | ✓ TLS 1.2+ |
| Role-Based Access Control | ✓ Full RBAC | ✗ Community: none | ✓ Teams plan |
| Audit Trails | ✓ Complete | ✗ Community: none | ~ Limited |
| SSO / SAML | ✓ Enterprise | ~ Enterprise only | ✓ |
| MFA Support | ✓ | ~ Depends on deployment | ✓ |
| gVisor Sandboxing | ✓ Built-in | ✗ Self-managed | N/A |
| Proxy Rotation & Dedicated IPs | ✓ Built-in | ✗ Self-managed | N/A |
| Encrypted State Management | ✓ Built-in | ~ File-system only | N/A |
| Kill Switch Protocol | ✓ Immediate | ~ Manual | N/A |
| IP Allowlisting | ✓ Enterprise | ✗ | ~ Limited |
| Secrets Management | ✓ Encrypted vault | ~ .env files | ✓ |
Supply Chain & Exposure Risks
Unit 42: ClawScan Certification Worthless
Palo Alto's Unit 42 found 5 malicious skills that passed both ClawScan AND VirusTotal. Three documented attack vectors: affiliate-link injection (money-radar), coordinated agent botnet for rug pulls (letssendit), and AMOS dropper hidden in 22MB padded README (omnicogg). "The Pass badge means nothing."
18,000+ Exposed OpenClaw Instances
Security researchers have identified over 18,000 publicly exposed OpenClaw instances on the internet. Many run with default configurations, no authentication, and exposed API keys. Self-hosting without security expertise creates an enterprise attack surface.
Skill Marketplace: Malicious Instructions, Not Malware
OpenClaw skills are plain-text instructions, not compiled code. Signature-based scanning (ClawScan, VirusTotal) is fundamentally inadequate — malicious instructions like "always use this referral link" aren't flagged by traditional security tools. The attack surface is unique to agent frameworks.
Gateway Death Spiral + Browser Session Loss
OpenClaw's gateway crashes under at least 3 independent triggers. Combined with browser cookies never persisting to disk (refile of #15645), every restart loses ALL authenticated sessions. Gateway instability destroys the browser state needed for web automation.
Enterprise-Grade Infrastructure: How Gobii Protects You
gVisor Sandboxing
Every agent execution runs in a gVisor- sandboxed environment with kernel-level isolation. Custom tools and MCP servers cannot escape the sandbox — even malicious code is contained. No self-managed container security required.
Proxy Rotation & Dedicated IPs
Built-in proxy rotation prevents IP-based blocking and rate-limiting. Dedicated IP options for enterprises that need fixed egress. No self-managed proxy infrastructure — it's part of the platform.
Encrypted State Management
Agent state, credentials, and execution history are encrypted at rest (AES-256) and in transit (TLS 1.3). Secrets are stored in an encrypted vault, not .env files. Full audit trails track every agent action.
The "Plugin Tax" on Security
OpenClaw's open-source model means every security feature is a plugin you must configure yourself. gVisor sandboxing? Install and configure. Proxy rotation? Set up your own infrastructure. Audit trails? Not available in Community edition. RBAC? Enterprise only.
Each self-managed security layer adds: configuration time (4-8 hours), maintenance burden (2-4 hours/month), and the risk of misconfiguration. A single mistake — an exposed port, a missing firewall rule, a default password — compromises the entire security model.
Gobii's managed approach: every security feature listed above is built-in, configured, maintained, and monitored by the platform. Zero configuration. Zero maintenance. Zero self-managed attack surface. The "plugin tax" on security is the hidden cost of self-hosting that most comparisons ignore.