Itβs been a whirlwind for NanoClaw creator Gavriel Cohen.Β
About six weeks in the past, he launched NanoClaw on Hacker Information as a tiny, open supply, safe various to the AI agent-building sensation OpenClaw, after he constructed it in a weekend coding binge. That put up went viral.Β Β
βI sat down on the sofa in my sweatpants,β Cohen advised Trendster, βand simply mainly melted into [it] the entire weekend, most likely nearly 48 hours straight.βΒ Β
About three weeks in the past, an X put up praising NanoClaw from famed AI researcher Andrej Karpathy went viral.Β Β
A couple of week in the past, Cohen closed down his AI advertising startup to focus full-time on NanoClaw and launch an organization round it known as NanoCo. The eye from Hacker Information and Karpathy had translated into 22,000 stars on GitHub, 4,600 forks (folks constructing new variations off the venture), and over 50 contributors. Heβs already added a whole lot of updates to his venture with a whole lot extra within the queue.Β
Now, on Friday, Cohen introduced a cope with Docker β the corporate that basically invented the container know-how NanoClaw is constructed on, and counts tens of millions of builders and practically 80,000 enterprise clients β to combine Docker Sandboxes into NanoClaw.Β
Scary safety of OpenClawΒ
It began when Cohen launched an AI advertising startup along with his brother, Lazer Cohen, a couple of months in the past. The startup supplied advertising providers like market analysis, go-to-market evaluation, and weblog posts via a small staff of individuals utilizing AI brokers.Β Β
Techcrunch occasion
San Francisco, CA
|
October 13-15, 2026
The company began reserving clients, and was on monitor to hit $1 million in annual recurring income, the brothers advised Trendster.Β
βIt was going rather well, nice traction. Iβm an enormous believer in that enterprise mannequin of AI-native service corporations which have margins and function like a software program firm however are literally offering providers,β mentioned Cohen, a pc programmer who beforehand labored for web site internet hosting firm Wix.
He had constructed the brokers the startup was utilizing, largely utilizing Claude Code, every designed to do particular duties. However there was βa chunkβ lacking, he mentioned. The agent might do work when prompted, however the people couldnβt pre-schedule work, or join brokers to staff communication instruments like WhatsApp and assign duties that means. (WhatsApp is to many of the world what Slack is to company America.)Β
Cohen heard about OpenClaw, the favored AI agent software whose creator now works for OpenAI. Cohen used it to construct out these closing interfaces, and liked it.Β
βThere was this large aha second of: That is the piece that connects all of those separate workflows that Iβve been constructing,β he mentioned and instantly determined, βI would like extra of them: on R& D, on product, on consumer administration,β one for each process the startup needed to deal with.Β
However then OpenClaw scared the bejesus out of him.Β
In researching a hiccup with efficiency, he stumbled throughout a file the place the OpenClaw agent had downloaded all of his WhatsApp messages and saved them in plain, unencrypted textual content on his laptop. Not simply the work-related messages it was given specific entry to, however all of them, his private messages too.Β Β
OpenClaw has been broadly panned as a βsafety nightmareβ due to the way in which it accesses reminiscence and account permissions. It’s troublesome to restrict its entry to information on a machine as soon as it has been put in.Β Β
That difficulty will possible enhance over time, given the ventureβs reputation, however Cohen had one other concern: the sheer dimension of OpenClaw. As he researched safety choices for it, he noticed all of the packages that had been bundled into it. It included an βobscureβ open supply venture he himself had written a couple of months earlier for enhancing PDFs utilizing a Google picture enhancing mannequin. He had no thought it was there β he wasnβt even actively sustaining that venture.Β Β
He realized there was no means for him to validate all OpenClawβs code and its dependencies, which, by some estimates, sprawled throughout 800,000 strains of code.Β
So he constructed his personal in simply 500 strains of code, meant for use for his firm, and shared it. He based mostly it on Appleβs new container tech, which creates remoted environments that forestall software program from accessing any information on a machine past what it’s explicitly licensed to make use of.
Going viral
At 4 a.m., a few weeks after sharing it on Hacker Information, his telephone began ringing continuous. A buddy had seen Karpathyβs put up and was urging Cohen to get up and begin tweeting, which he did, setting off a public dialogue with the well-known AI researcher.Β Β
Consideration to NanoClaw adopted like a landslide. Extra tweets, YouTube evaluations from programmers, and information tales. A website squatter even snagged a NanoClaw web site URL. The proper one is nanoclaw.dev.Β
Then Oleg Ε elajev, a developer who works for Docker reached out. Ε elajev noticed the thrill and modified NanoClaw to switch Appleβs container know-how with Dockerβs competing various, Sandboxes.
Cohen had no hesitation about pushing out help for Sandboxes as a part of the primary NanoClaw venture. βThat is now not my very own private agent that Iβm operating on my Mac Mini,β he recalled considering. βThis now has a group round it. There are millions of folks utilizing it. Yeah, I mentioned, Iβm going to maneuver over to the usual.βΒ
For all of the adjustments these weeks have introduced Cohen and his brother Lazer, now CEO and president of NanoCo, respectively, one space nonetheless must be found out: how NanoCo will make cash.Β
NanoClaw is free and open supply and, as this stuff go, the Cohens vow it all the time shall be. They know they’d be strung up as villains in the event that they ever betrayed the open supply group by altering that. Presently the Cohens reside on a friends-and-family fundraising spherical, they mentioned.Β Β
Whereas they’re cautious about saying their industrial plans β largely as a result of they havenβt had an opportunity to completely formulate them β VCs are already calling, they are saying.Β
The sport plan is to construct a totally supported industrial product with providers together with so-called forward-deployed engineers β specialists embedded straight with consumer corporations to assist them construct and handle their techniques. This may possible concentrate on helping corporations in constructing and sustaining safe brokers. That’s, nonetheless, a crowded discipline rising extra crowded by the hour.Β
However given the large group of builders that NanoClaw simply unlocked with Docker, weβre certain to listen to extra about this quickly.
Pictured above from left to proper, Lazer and Gavriel Cohen.





