clawmoat 0.8.0 → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (171) hide show
  1. package/.dockerignore +9 -0
  2. package/CHANGELOG.md +18 -0
  3. package/DEMO.md +87 -0
  4. package/Dockerfile +5 -18
  5. package/README.md +232 -8
  6. package/THREAT_MODEL.md +129 -0
  7. package/agent/README.md +131 -0
  8. package/agent/index.js +471 -0
  9. package/agent/install-service.sh +94 -0
  10. package/agent/openclaw-hook.js +453 -0
  11. package/agent/provider-setup.js +649 -0
  12. package/agent/setup.js +274 -0
  13. package/assets/BADGE-USAGE.md +20 -0
  14. package/assets/clawmoat-badge.svg +21 -0
  15. package/bin/clawmoat.js +468 -111
  16. package/docs/affiliates/dashboard.html +124 -0
  17. package/docs/affiliates/index.html +236 -0
  18. package/docs/agent-install.html +183 -0
  19. package/docs/ai-agent-security-scanner.html +10 -6
  20. package/docs/badge/index.html +149 -0
  21. package/docs/badge/scanning.svg +23 -0
  22. package/docs/blog/386-malicious-skills.html +11 -4
  23. package/docs/blog/40000-exposed-openclaw-instances.html +11 -4
  24. package/docs/blog/agent-trust-protocol.html +5 -4
  25. package/docs/blog/ai-agent-earns-commissions.html +230 -0
  26. package/docs/blog/bugmageddon-agent-firewall.html +174 -0
  27. package/docs/blog/calculator-math.html +180 -0
  28. package/docs/blog/clawmoat-vs-llamafirewall-nemo-guardrails.html +10 -4
  29. package/docs/blog/host-guardian-launch.html +18 -8
  30. package/docs/blog/ibm-experts-agent-runtime-protection.html +15 -6
  31. package/docs/blog/index.html +67 -9
  32. package/docs/blog/langchain-security-tutorial.html +18 -8
  33. package/docs/blog/mcp-30-cves-security-crisis.html +11 -4
  34. package/docs/blog/meta-researcher-rogue-agent.html +201 -0
  35. package/docs/blog/microsoft-openclaw-workstation-security.html +5 -4
  36. package/docs/blog/nist-ai-agent-standards-clawmoat.html +16 -8
  37. package/docs/blog/oasis-websocket-hijack.html +11 -4
  38. package/docs/blog/ollama-openclaw-security.html +10 -4
  39. package/docs/blog/openclaw-enterprise-readiness-claw10.html +5 -4
  40. package/docs/blog/openclaw-security-reckoning-2026.html +11 -4
  41. package/docs/blog/owasp-agentic-ai-top10.html +18 -8
  42. package/docs/blog/securing-ai-agents.html +18 -8
  43. package/docs/blog/supply-chain-agents.html +18 -8
  44. package/docs/business/index.html +11 -16
  45. package/docs/business/install.html +21 -7
  46. package/docs/checklist.html +10 -4
  47. package/docs/compare/index.html +122 -0
  48. package/docs/compare/lakera/index.html +62 -0
  49. package/docs/compare/llm-guard/index.html +49 -0
  50. package/docs/compare/snyk-agent-scan/index.html +63 -0
  51. package/docs/compare.html +10 -6
  52. package/docs/dashboard/index.html +520 -0
  53. package/docs/finance/index.html +9 -6
  54. package/docs/guides/business-deployment.html +770 -0
  55. package/docs/hall-of-fame.html +11 -5
  56. package/docs/index.html +266 -137
  57. package/docs/integrations/langchain.html +14 -6
  58. package/docs/integrations/openai.html +14 -6
  59. package/docs/integrations/openclaw.html +55 -7
  60. package/docs/plans/2026-03-26-threat-intel-api.md +255 -0
  61. package/docs/plans/2026-04-14-bugmageddon-marketing-pack.md +329 -0
  62. package/docs/plans/2026-04-14-clawmoat-v1-bugmageddon.md +248 -0
  63. package/docs/plans/2026-04-14-v1-release-update.md +91 -0
  64. package/docs/plans/2026-04-19-supabase-audit.md +68 -0
  65. package/docs/plans/2026-05-12-sales-push.md +303 -0
  66. package/docs/playground/index.html +893 -0
  67. package/docs/playground.html +4 -7
  68. package/docs/rfcs/defense-in-depth.md +467 -0
  69. package/docs/scan/index.html +156 -12
  70. package/docs/services/case-study.html +255 -0
  71. package/docs/services/downloads/install-openclaw.bat +45 -0
  72. package/docs/services/downloads/install-openclaw.command +38 -0
  73. package/docs/services/downloads/install-openclaw.sh +38 -0
  74. package/docs/services/get-started.html +165 -0
  75. package/docs/services/index.html +598 -0
  76. package/docs/services/multi-agent-security.html +284 -0
  77. package/docs/services/one-pager.html +99 -0
  78. package/docs/services/pitch-deck.html +229 -0
  79. package/docs/services/roi-calculator.html +258 -0
  80. package/docs/sitemap.xml +62 -2
  81. package/docs/support/index.html +12 -1
  82. package/docs/templates/customer-service/HEARTBEAT.md +61 -0
  83. package/docs/templates/customer-service/MEMORY.md +89 -0
  84. package/docs/templates/customer-service/SOUL.md +41 -0
  85. package/docs/templates/customer-service/USER.md +56 -0
  86. package/docs/templates/executive/HEARTBEAT.md +86 -0
  87. package/docs/templates/executive/MEMORY.md +92 -0
  88. package/docs/templates/executive/SOUL.md +44 -0
  89. package/docs/templates/executive/USER.md +62 -0
  90. package/docs/templates/finance/HEARTBEAT.md +58 -0
  91. package/docs/templates/finance/MEMORY.md +87 -0
  92. package/docs/templates/finance/SOUL.md +38 -0
  93. package/docs/templates/finance/USER.md +53 -0
  94. package/docs/templates/index.html +115 -0
  95. package/docs/templates/operations/HEARTBEAT.md +63 -0
  96. package/docs/templates/operations/MEMORY.md +68 -0
  97. package/docs/templates/operations/SOUL.md +38 -0
  98. package/docs/templates/operations/USER.md +49 -0
  99. package/docs/templates/sales/HEARTBEAT.md +55 -0
  100. package/docs/templates/sales/MEMORY.md +89 -0
  101. package/docs/templates/sales/SOUL.md +34 -0
  102. package/docs/templates/sales/USER.md +54 -0
  103. package/eslint.config.js +32 -0
  104. package/evals/README.md +29 -0
  105. package/evals/cases.json +390 -0
  106. package/evals/results.md +68 -0
  107. package/evals/run.js +180 -0
  108. package/examples/demo-attack/demo.js +186 -0
  109. package/examples/python-quickstart/README.md +54 -0
  110. package/examples/python-quickstart/clawmoat_client.py +167 -0
  111. package/examples/video-demo/README.md +14 -0
  112. package/examples/video-demo/scene-a-normal.js +29 -0
  113. package/examples/video-demo/scene-b-attack-arrives.js +31 -0
  114. package/examples/video-demo/scene-c-hijack.js +44 -0
  115. package/examples/video-demo/scene-d-clawmoat.js +46 -0
  116. package/integrations/crewai/README.md +32 -0
  117. package/integrations/crewai/clawmoat_crewai/__init__.py +17 -0
  118. package/integrations/crewai/clawmoat_crewai/guard.py +103 -0
  119. package/integrations/crewai/pyproject.toml +21 -0
  120. package/integrations/langchain/README.md +91 -0
  121. package/integrations/langchain/clawmoat_langchain/__init__.py +17 -0
  122. package/integrations/langchain/clawmoat_langchain/callback.py +489 -0
  123. package/integrations/langchain/pyproject.toml +32 -0
  124. package/integrations/litellm/README.md +324 -0
  125. package/integrations/litellm/clawmoat_litellm/__init__.py +21 -0
  126. package/integrations/litellm/clawmoat_litellm/callback.py +329 -0
  127. package/integrations/litellm/clawmoat_litellm/proxy_middleware.py +224 -0
  128. package/integrations/litellm/pyproject.toml +74 -0
  129. package/integrations/openai-agents/README.md +392 -0
  130. package/integrations/openai-agents/clawmoat_openai_agents/__init__.py +20 -0
  131. package/integrations/openai-agents/clawmoat_openai_agents/guardrail.py +431 -0
  132. package/integrations/openai-agents/clawmoat_openai_agents/middleware.py +311 -0
  133. package/integrations/openai-agents/pyproject.toml +76 -0
  134. package/package.json +6 -5
  135. package/plugins/openclaw-adapter/PHASE1.md +439 -0
  136. package/plugins/openclaw-adapter/README.md +103 -0
  137. package/plugins/openclaw-adapter/SPEC.md +1644 -0
  138. package/plugins/openclaw-adapter/package.json +31 -0
  139. package/plugins/openclaw-adapter/src/index.test.ts +226 -0
  140. package/plugins/openclaw-adapter/src/index.ts +140 -0
  141. package/plugins/openclaw-adapter/tsconfig.json +14 -0
  142. package/server/data/threats.json +290 -0
  143. package/server/index.js +142 -7
  144. package/src/adapters/express.js +161 -0
  145. package/src/adapters/index.js +92 -0
  146. package/src/adapters/langchain.js +185 -0
  147. package/src/approval/index.js +456 -0
  148. package/src/ban-scanner.js +200 -0
  149. package/src/boundary-scanner.js +296 -0
  150. package/src/ci-scanner.js +279 -0
  151. package/src/code-scanner.js +245 -0
  152. package/src/enforce.js +166 -0
  153. package/src/formatters/json.js +80 -0
  154. package/src/formatters/sarif.js +388 -0
  155. package/src/guardian/alerts.js +34 -3
  156. package/src/guardian/index.js +41 -2
  157. package/src/index.js +102 -0
  158. package/src/integrations/agentmesh.js +501 -0
  159. package/src/language-detector.js +201 -0
  160. package/src/mcp-scanner.js +253 -0
  161. package/src/multimodal/index.js +579 -0
  162. package/src/obfuscation-scanner.js +457 -0
  163. package/src/policy-engine.js +402 -0
  164. package/src/scanners/dependency-attacks.js +128 -0
  165. package/src/scanners/prompt-injection.js +18 -0
  166. package/src/scanners/supply-chain.js +14 -0
  167. package/src/templates/default-config.yml +90 -0
  168. package/src/vuln-ops/exploitability.js +46 -0
  169. package/src/watch/live-monitor.js +720 -0
  170. package/clawmoat-0.8.0.tgz +0 -0
  171. package/server/index.js.patch +0 -1
package/docs/services/multi-agent-security.html ADDED
@@ -0,0 +1,284 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <link rel="icon" type="image/png" href="/favicon.png">
5
+ <link rel="apple-touch-icon" href="/apple-touch-icon.png">
6
+ <meta charset="UTF-8">
7
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
8
+ <title>Multi-Agent Coordination Security — ClawMoat</title>
9
+ <meta name="description" content="Running AI agents across Slack, Teams, email, and CRM? ClawMoat secures multi-agent coordination with credential vaults, trust boundaries, task deduplication, and audit trails.">
10
+ <link rel="canonical" href="https://clawmoat.com/services/multi-agent-security.html">
11
+ <meta property="og:title" content="Multi-Agent Coordination Security — ClawMoat">
12
+ <meta property="og:description" content="The security layer for enterprises running AI agents across multiple platforms. Credential vaults, trust boundaries, and audit trails.">
13
+ <meta property="og:image" content="https://clawmoat.com/og-image.png">
14
+ <style>
15
+ *{margin:0;padding:0;box-sizing:border-box}
16
+ :root{--navy:#0F172A;--navy-light:#1E293B;--navy-mid:#334155;--blue:#3B82F6;--emerald:#10B981;--white:#F8FAFC;--gray:#94A3B8;--red:#EF4444;--amber:#F59E0B}
17
+ html{scroll-behavior:smooth}
18
+ body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:var(--navy);color:var(--white);line-height:1.6;overflow-x:hidden}
19
+ a{color:var(--blue);text-decoration:none}
20
+ a:hover{text-decoration:underline}
21
+ .container{max-width:1140px;margin:0 auto;padding:0 24px}
22
+
23
+ nav{position:fixed;top:0;left:0;right:0;z-index:100;background:rgba(15,23,42,.92);backdrop-filter:blur(12px);border-bottom:1px solid rgba(59,130,246,.15);padding:16px 0}
24
+ nav .container{display:flex;align-items:center;justify-content:space-between}
25
+ .logo{font-size:1.25rem;font-weight:700;display:flex;align-items:center;gap:8px;color:var(--white)}
26
+ .nav-links{display:flex;gap:28px;align-items:center}
27
+ .nav-links a{color:var(--gray);font-size:.9rem;transition:color .2s}
28
+ .nav-links a:hover{color:var(--white);text-decoration:none}
29
+ .nav-links .btn-sm{color:var(--navy);background:var(--emerald);padding:6px 28px;border-radius:20px;font-weight:600;font-size:.85rem}
30
+
31
+ .hero{padding:160px 0 80px;text-align:center;position:relative}
32
+ .hero::before{content:'';position:absolute;top:0;left:50%;transform:translateX(-50%);width:800px;height:800px;background:radial-gradient(circle,rgba(59,130,246,.12) 0%,transparent 70%);pointer-events:none}
33
+ .hero .container{position:relative;z-index:1}
34
+ .hero h1{font-size:clamp(2rem,5vw,3rem);font-weight:800;line-height:1.15;margin-bottom:24px;letter-spacing:-.03em}
35
+ .hero h1 .hl{background:linear-gradient(135deg,var(--blue),var(--emerald));-webkit-background-clip:text;-webkit-text-fill-color:transparent;background-clip:text}
36
+ .hero p{font-size:1.15rem;color:var(--gray);max-width:660px;margin:0 auto 40px}
37
+ .hero-btns{display:flex;gap:16px;justify-content:center;flex-wrap:wrap}
38
+ .btn{display:inline-flex;align-items:center;gap:8px;padding:14px 28px;border-radius:10px;font-weight:600;font-size:1rem;transition:all .2s;border:none;cursor:pointer}
39
+ .btn-primary{background:var(--blue);color:#fff}
40
+ .btn-primary:hover{background:#2563EB;text-decoration:none}
41
+ .btn-outline{border:2px solid var(--blue);color:var(--blue);background:transparent}
42
+ .btn-outline:hover{background:rgba(59,130,246,.1);text-decoration:none}
43
+
44
+ section{padding:80px 0}
45
+ .section-label{font-size:.8rem;font-weight:700;text-transform:uppercase;letter-spacing:.12em;color:var(--emerald);margin-bottom:12px}
46
+ .section-title{font-size:clamp(1.6rem,4vw,2.2rem);font-weight:700;margin-bottom:16px;letter-spacing:-.02em}
47
+ .section-sub{color:var(--gray);font-size:1.05rem;max-width:620px;margin-bottom:48px}
48
+
49
+ .grid{display:grid;gap:24px}
50
+ .grid-2{grid-template-columns:repeat(2,1fr)}
51
+ .grid-3{grid-template-columns:repeat(3,1fr)}
52
+ @media(max-width:768px){.grid-2,.grid-3{grid-template-columns:1fr}}
53
+
54
+ .card{background:var(--navy-light);border:1px solid var(--navy-mid);border-radius:16px;padding:32px}
55
+ .card-icon{font-size:2rem;margin-bottom:16px}
56
+ .card h3{font-size:1.15rem;font-weight:700;margin-bottom:8px}
57
+ .card p{color:var(--gray);font-size:.95rem}
58
+
59
+ .problem-stat{text-align:center;padding:32px}
60
+ .problem-stat .num{font-size:2.5rem;font-weight:800;margin-bottom:4px}
61
+ .problem-stat .label{font-size:.85rem;color:var(--gray);text-transform:uppercase;letter-spacing:.08em}
62
+
63
+ .arch-diagram{background:var(--navy-light);border:1px solid var(--navy-mid);border-radius:16px;padding:40px;font-family:'Courier New',monospace;font-size:.85rem;color:var(--gray);white-space:pre;overflow-x:auto;line-height:1.6;margin:40px 0}
64
+ .arch-diagram .hl-blue{color:var(--blue)}
65
+ .arch-diagram .hl-green{color:var(--emerald)}
66
+ .arch-diagram .hl-red{color:var(--red)}
67
+ .arch-diagram .hl-white{color:var(--white);font-weight:700}
68
+
69
+ .use-case{background:var(--navy-light);border:1px solid var(--navy-mid);border-radius:16px;padding:32px;margin-bottom:20px}
70
+ .use-case h3{color:var(--emerald);font-size:1.1rem;margin-bottom:8px}
71
+ .use-case .scenario{color:var(--gray);font-size:.95rem;margin-bottom:12px}
72
+ .use-case .solution{font-size:.95rem}
73
+
74
+ .cta-section{text-align:center;padding:100px 0;position:relative}
75
+ .cta-section::before{content:'';position:absolute;top:0;left:50%;transform:translateX(-50%);width:800px;height:600px;background:radial-gradient(circle,rgba(16,185,129,.08) 0%,transparent 70%);pointer-events:none}
76
+
77
+ .footer{border-top:1px solid var(--navy-mid);padding:40px 0;text-align:center;color:var(--gray);font-size:.85rem}
78
+ </style>
79
+ </head>
80
+ <body>
81
+
82
+ <nav>
83
+ <div class="container">
84
+ <a href="/" class="logo">
85
+ <img src="/mark.svg" alt="" style="height:28px"> ClawMoat
86
+ </a>
87
+ <div class="nav-links">
88
+ <a href="/services/">Services</a>
89
+ <a href="https://github.com/darfaz/clawmoat">GitHub</a>
90
+ <a href="/services/one-pager.html" class="btn-sm">Get Started</a>
91
+ </div>
92
+ </div>
93
+ </nav>
94
+
95
+ <div class="hero">
96
+ <div class="container">
97
+ <div class="section-label">Multi-Agent Security</div>
98
+ <h1>Your AI Agents Talk to Everyone.<br><span class="hl">Who's Making Sure They Don't Say Too Much?</span></h1>
99
+ <p>Enterprises are deploying AI agents across Slack, Teams, email, CRM, and internal tools. Each agent has credentials. Each surface has different trust levels. Nobody's securing the coordination layer. Until now.</p>
100
+ <div class="hero-btns">
101
+ <a href="/services/one-pager.html" class="btn btn-primary">See the Solution →</a>
102
+ <a href="https://github.com/darfaz/clawmoat" class="btn btn-outline">View on GitHub</a>
103
+ </div>
104
+ </div>
105
+ </div>
106
+
107
+ <section>
108
+ <div class="container">
109
+ <div class="section-label">The Problem</div>
110
+ <div class="section-title">Multi-Agent Deployments Are a Security Nightmare</div>
111
+ <div class="section-sub">Every platform your AI agent touches is a potential credential leak, context bleed, or compliance violation.</div>
112
+
113
+ <div class="grid grid-3">
114
+ <div class="card problem-stat">
115
+ <div class="num" style="color:var(--red)">73%</div>
116
+ <div class="label">of enterprises have AI agents<br>accessing multiple platforms</div>
117
+ </div>
118
+ <div class="card problem-stat">
119
+ <div class="num" style="color:var(--amber)">63%</div>
120
+ <div class="label">of employees paste sensitive data<br>into AI chatbots</div>
121
+ </div>
122
+ <div class="card problem-stat">
123
+ <div class="num" style="color:var(--red)">$1M+</div>
124
+ <div class="label">average loss from AI-related<br>security failures at large companies</div>
125
+ </div>
126
+ </div>
127
+ </div>
128
+ </section>
129
+
130
+ <section style="background:rgba(30,41,59,.5)">
131
+ <div class="container">
132
+ <div class="section-label">What Goes Wrong</div>
133
+ <div class="section-title">Real Scenarios We've Seen</div>
134
+
135
+ <div class="use-case">
136
+ <h3>🔑 Credential Scatter</h3>
137
+ <div class="scenario">AI agent on Slack needs API keys. Someone pastes them in a channel message. Now 200 employees can see your production credentials in the message history forever.</div>
138
+ <div class="solution"><strong>ClawMoat fix:</strong> Secure credential vault (chmod 600, file-level permissions). Agents read credentials locally. Never exposed in chat, logs, or API endpoints.</div>
139
+ </div>
140
+
141
+ <div class="use-case">
142
+ <h3>🔀 Context Bleed</h3>
143
+ <div class="scenario">AI agent in a public Slack channel references a private conversation from a DM. Client financials, M&A details, or HR discussions leak into group chat.</div>
144
+ <div class="solution"><strong>ClawMoat fix:</strong> Trust-level boundaries. Private channels = full context. Public channels = project context only. Automatic filtering based on surface trust level.</div>
145
+ </div>
146
+
147
+ <div class="use-case">
148
+ <h3>👯 Duplicate Actions</h3>
149
+ <div class="scenario">Agent on email and agent on Slack both see a customer request. Both reply. Customer gets two conflicting responses. Or worse — both execute a financial transaction.</div>
150
+ <div class="solution"><strong>ClawMoat fix:</strong> Task queue with claim semantics. First agent claims the task, others see it's handled. No duplicates, complete audit trail.</div>
151
+ </div>
152
+
153
+ <div class="use-case">
154
+ <h3>👻 Ghost Actions</h3>
155
+ <div class="scenario">AI agent autonomously sends emails, posts on social media, or modifies data. Nobody knows what it did until something goes wrong. No audit trail.</div>
156
+ <div class="solution"><strong>ClawMoat fix:</strong> Action log with public/private classification. Every agent action recorded. Tamper-evident. Exportable for compliance review.</div>
157
+ </div>
158
+ </div>
159
+ </section>
160
+
161
+ <section>
162
+ <div class="container">
163
+ <div class="section-label">The Solution</div>
164
+ <div class="section-title">ClawMoat Multi-Agent Security Architecture</div>
165
+ <div class="section-sub">One security layer across all your AI agent deployments. Same brain, different trust levels, complete governance.</div>
166
+
167
+ <div class="grid grid-3">
168
+ <div class="card">
169
+ <div class="card-icon">🔐</div>
170
+ <h3>Credential Vault</h3>
171
+ <p>Centralized, encrypted credential storage. Agents read keys locally — never via API, never in chat. File-level permissions (owner-only). One source of truth across all platforms.</p>
172
+ </div>
173
+ <div class="card">
174
+ <div class="card-icon">🛡️</div>
175
+ <h3>Trust Boundaries</h3>
176
+ <p>Define trust levels per surface: Private (full access), Semi-Private (project context), Public (restricted). AI automatically filters what it can reference based on where it's speaking.</p>
177
+ </div>
178
+ <div class="card">
179
+ <div class="card-icon">📋</div>
180
+ <h3>Task Deduplication</h3>
181
+ <p>Claim-based task queue prevents multiple agents from acting on the same request. First to claim it owns it. Others see it's handled. Zero duplicate actions.</p>
182
+ </div>
183
+ <div class="card">
184
+ <div class="card-icon">📊</div>
185
+ <h3>Action Audit Trail</h3>
186
+ <p>Every agent action logged with timestamp, surface, and public/private classification. Tamper-evident logs exportable for SOC2, HIPAA, and financial compliance.</p>
187
+ </div>
188
+ <div class="card">
189
+ <div class="card-icon">🚫</div>
190
+ <h3>Forbidden Zones</h3>
191
+ <p>Define data categories agents can never access or transmit. PII, credentials, export-controlled data — configurable per agent, per surface, per compliance requirement.</p>
192
+ </div>
193
+ <div class="card">
194
+ <div class="card-icon">🔍</div>
195
+ <h3>Insider Threat Detection</h3>
196
+ <p>Based on Anthropic's misalignment research. Monitors agent behavior for self-preservation, deception, unauthorized data exfiltration, and goal conflict patterns.</p>
197
+ </div>
198
+ </div>
199
+ </div>
200
+ </section>
201
+
202
+ <section style="background:rgba(30,41,59,.5)">
203
+ <div class="container">
204
+ <div class="section-label">Architecture</div>
205
+ <div class="section-title">How It Works</div>
206
+
207
+ <div class="arch-diagram"><span class="hl-white"> YOUR TEAM (Humans)</span>
208
+ Slack │ Teams │ Email │ CRM │ Internal Tools
209
+ │ │ │ │ │
210
+ ▼ ▼ ▼ ▼ ▼
211
+ ┌──────────────────────────────────────────────────┐
212
+ │ <span class="hl-blue">AI AGENT INSTANCES</span> │
213
+ │ Agent@Slack Agent@Email Agent@CRM ... │
214
+ └───────────────────┬──────────────────────────────┘
215
+ │
216
+ ┌───────────────────▼──────────────────────────────┐
217
+ │ <span class="hl-green">CLAWMOAT SECURITY LAYER</span> │
218
+ │ │
219
+ │ ┌─────────────┐ ┌──────────┐ ┌────────────┐ │
220
+ │ │ <span class="hl-white">Credential</span> │ │ <span class="hl-white">Trust</span> │ │ <span class="hl-white">Task</span> │ │
221
+ │ │ <span class="hl-white">Vault</span> │ │ <span class="hl-white">Boundary</span> │ │ <span class="hl-white">Queue</span> │ │
222
+ │ │ chmod 600 │ │ Engine │ │ + Claims │ │
223
+ │ └─────────────┘ └──────────┘ └────────────┘ │
224
+ │ │
225
+ │ ┌─────────────┐ ┌──────────┐ ┌────────────┐ │
226
+ │ │ <span class="hl-white">Action</span> │ │ <span class="hl-white">Forbidden</span>│ │ <span class="hl-white">Insider</span> │ │
227
+ │ │ <span class="hl-white">Audit Log</span> │ │ <span class="hl-white">Zones</span> │ │ <span class="hl-white">Threat</span> │ │
228
+ │ │ pub/private │ │ per-agent │ │ <span class="hl-white">Detection</span> │ │
229
+ │ └─────────────┘ └──────────┘ └────────────┘ │
230
+ │ │
231
+ │ <span class="hl-red">Zero dependencies │ 336+ tests │ Open source</span> │
232
+ └──────────────────────────────────────────────────┘</div>
233
+ </div>
234
+ </section>
235
+
236
+ <section>
237
+ <div class="container">
238
+ <div class="section-label">Who Needs This</div>
239
+ <div class="section-title">Built for Regulated Industries</div>
240
+
241
+ <div class="grid grid-2">
242
+ <div class="card">
243
+ <div class="card-icon">🏦</div>
244
+ <h3>Financial Services</h3>
245
+ <p>AI agents handling client data across email, CRM, and trading platforms. SEC compliance, PII protection, and audit trails are non-negotiable. ClawMoat enforces them automatically.</p>
246
+ </div>
247
+ <div class="card">
248
+ <div class="card-icon">⚖️</div>
249
+ <h3>Law Firms</h3>
250
+ <p>Attorney-client privilege meets AI automation. Agents processing case files, drafting documents, and managing client communication need strict information barriers. Trust boundaries enforce them.</p>
251
+ </div>
252
+ <div class="card">
253
+ <div class="card-icon">🏥</div>
254
+ <h3>Healthcare</h3>
255
+ <p>HIPAA requires audit trails for every data access. AI agents across EHR, scheduling, and patient communication need verifiable compliance. ClawMoat's action log provides it.</p>
256
+ </div>
257
+ <div class="card">
258
+ <div class="card-icon">🛩️</div>
259
+ <h3>Aerospace & Defense</h3>
260
+ <p>ITAR/EAR compliance for AI agents touching engineering data, military contracts, and export-controlled information. Forbidden zones prevent unauthorized access by design.</p>
261
+ </div>
262
+ </div>
263
+ </div>
264
+ </section>
265
+
266
+ <div class="cta-section">
267
+ <div class="container" style="position:relative;z-index:1">
268
+ <div class="section-title">Your AI Agents Need a Security Layer.<br>We Built It.</div>
269
+ <p style="color:var(--gray);font-size:1.1rem;max-width:600px;margin:16px auto 32px">Open source. Zero dependencies. 336+ tests. Deploy in minutes, not months.</p>
270
+ <div class="hero-btns">
271
+ <a href="https://github.com/darfaz/clawmoat" class="btn btn-primary">⭐ Star on GitHub</a>
272
+ <a href="mailto:dar@iqvaluations.com?subject=Multi-Agent%20Security%20Consultation" class="btn btn-outline">Book a Consultation</a>
273
+ </div>
274
+ </div>
275
+ </div>
276
+
277
+ <footer class="footer">
278
+ <div class="container">
279
+ <p>© 2026 ClawMoat — Open Source AI Agent Security &nbsp;|&nbsp; <a href="https://github.com/darfaz/clawmoat">GitHub</a> &nbsp;|&nbsp; <a href="/">Home</a></p>
280
+ </div>
281
+ </footer>
282
+
283
+ </body>
284
+ </html>
package/docs/services/one-pager.html ADDED
@@ -0,0 +1,99 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="UTF-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
6
+ <title>ClawMoat — AI Agents for Your Business</title>
7
+ <style>
8
+ :root { --bg: #0f1117; --surface: #1a1d27; --accent: #6c63ff; --accent2: #00d4aa; --text: #e8e8ed; --muted: #8b8d97; --border: #2a2d3a; }
9
+ * { margin: 0; padding: 0; box-sizing: border-box; }
10
+ body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; background: var(--bg); color: var(--text); max-width: 800px; margin: 0 auto; padding: 40px 32px; line-height: 1.5; }
11
+ .logo-area { display: flex; align-items: center; gap: 12px; margin-bottom: 8px; }
12
+ .logo-icon { font-size: 32px; }
13
+ .logo-text { font-size: 24px; font-weight: 700; letter-spacing: -0.5px; }
14
+ .logo-text span { color: var(--accent); }
15
+ .tagline { color: var(--muted); font-size: 13px; margin-bottom: 32px; }
16
+ h1 { font-size: 32px; font-weight: 800; line-height: 1.2; margin-bottom: 24px; }
17
+ h1 span { color: var(--accent2); }
18
+ .stats { display: flex; gap: 16px; margin-bottom: 32px; }
19
+ .stat { flex: 1; background: var(--surface); border: 1px solid var(--border); border-radius: 12px; padding: 16px; text-align: center; }
20
+ .stat-num { font-size: 28px; font-weight: 800; color: var(--accent2); }
21
+ .stat-label { font-size: 12px; color: var(--muted); margin-top: 4px; }
22
+ h2 { font-size: 16px; font-weight: 700; text-transform: uppercase; letter-spacing: 1px; color: var(--accent); margin: 24px 0 12px; }
23
+ .what-we-do li, .steps li { margin-bottom: 8px; font-size: 15px; }
24
+ .what-we-do { list-style: none; padding: 0; }
25
+ .what-we-do li::before { content: "→ "; color: var(--accent); font-weight: 700; }
26
+ .steps { list-style: none; padding: 0; counter-reset: step; }
27
+ .steps li { counter-increment: step; display: flex; align-items: baseline; gap: 10px; }
28
+ .steps li::before { content: counter(step); background: var(--accent); color: #fff; width: 24px; height: 24px; border-radius: 50%; display: inline-flex; align-items: center; justify-content: center; font-size: 13px; font-weight: 700; flex-shrink: 0; }
29
+ .usecases { display: grid; grid-template-columns: 1fr 1fr; gap: 8px 24px; margin-bottom: 8px; }
30
+ .usecase { font-size: 14px; }
31
+ .security { background: var(--surface); border: 1px solid var(--border); border-radius: 12px; padding: 16px; font-size: 14px; color: var(--muted); margin: 16px 0; }
32
+ .security strong { color: var(--text); }
33
+ .contact { text-align: center; margin-top: 24px; padding-top: 20px; border-top: 1px solid var(--border); }
34
+ .contact a { color: var(--accent); text-decoration: none; }
35
+ .contact p { font-size: 14px; color: var(--muted); }
36
+
37
+ @media print {
38
+ body { background: #fff; color: #111; padding: 20px; }
39
+ .stat { border: 1px solid #ccc; background: #f8f8f8; }
40
+ .stat-num { color: #333; }
41
+ .security { background: #f8f8f8; border-color: #ccc; }
42
+ .security strong { color: #111; }
43
+ h2 { color: #333; }
44
+ .contact a { color: #333; }
45
+ .what-we-do li::before { color: #333; }
46
+ .steps li::before { background: #333; }
47
+ :root { --muted: #555; --border: #ccc; }
48
+ }
49
+ </style>
50
+ </head>
51
+ <body>
52
+ <div class="logo-area">
53
+ <div class="logo-icon">🏰</div>
54
+ <div class="logo-text">Claw<span>Moat</span></div>
55
+ </div>
56
+ <div class="tagline">Secure AI agents, built for your business</div>
57
+
58
+ <h1>AI Agents for <span>Your Business</span></h1>
59
+
60
+ <div class="stats">
61
+ <div class="stat"><div class="stat-num">60%</div><div class="stat-label">of business tasks<br>are automatable</div></div>
62
+ <div class="stat"><div class="stat-num">200+</div><div class="stat-label">hours saved<br>per month</div></div>
63
+ <div class="stat"><div class="stat-num">$2,500</div><div class="stat-label">starting price<br>per agent</div></div>
64
+ </div>
65
+
66
+ <h2>What We Do</h2>
67
+ <ul class="what-we-do">
68
+ <li>We build AI agents that handle your team's repetitive work — so they can focus on what matters</li>
69
+ <li>Every agent is custom-built for your workflows, tools, and data</li>
70
+ <li>We handle setup, security, and ongoing maintenance — you just use it</li>
71
+ </ul>
72
+
73
+ <h2>How It Works</h2>
74
+ <ol class="steps">
75
+ <li><strong>Discovery call</strong> — We learn your workflows and identify what to automate</li>
76
+ <li><strong>Build & deploy</strong> — We build your agents in days, not months</li>
77
+ <li><strong>Monitor & improve</strong> — We keep everything running and optimize over time</li>
78
+ </ol>
79
+
80
+ <h2>What Agents Can Do</h2>
81
+ <div class="usecases">
82
+ <div class="usecase">📧 Triage and draft email responses</div>
83
+ <div class="usecase">📊 Generate reports from your data</div>
84
+ <div class="usecase">📅 Schedule meetings and manage calendars</div>
85
+ <div class="usecase">🔍 Research prospects and summarize findings</div>
86
+ <div class="usecase">📝 Process invoices and update records</div>
87
+ <div class="usecase">💬 Answer customer questions 24/7</div>
88
+ </div>
89
+
90
+ <div class="security">
91
+ <strong>🔒 Security built in.</strong> Every agent runs inside ClawMoat's security framework — permission tiers control what each agent can access, full audit trails track every action, and your data never leaves your infrastructure. Enterprise-grade security without enterprise complexity.
92
+ </div>
93
+
94
+ <div class="contact">
95
+ <p><strong>Ready to see what AI agents can do for you?</strong></p>
96
+ <p style="margin-top: 8px;"><a href="mailto:hello@clawmoat.com">hello@clawmoat.com</a> · <a href="https://clawmoat.com/services">clawmoat.com/services</a></p>
97
+ </div>
98
+ </body>
99
+ </html>
package/docs/services/pitch-deck.html ADDED
@@ -0,0 +1,229 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <link rel="icon" type="image/png" href="/favicon.png">
5
+ <meta charset="UTF-8">
6
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
7
+ <title>AI Agent Services — Pitch Deck — ClawMoat</title>
8
+ <meta name="description" content="ClawMoat AI Agent deployment services. The problem, the solution, and why now.">
9
+ <style>
10
+ *{margin:0;padding:0;box-sizing:border-box}
11
+ :root{--navy:#0F172A;--navy-light:#1E293B;--navy-mid:#334155;--blue:#3B82F6;--emerald:#10B981;--white:#F8FAFC;--gray:#94A3B8;--red:#EF4444;--amber:#F59E0B}
12
+ html{scroll-behavior:smooth}
13
+ body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:var(--navy);color:var(--white);line-height:1.7}
14
+ a{color:var(--blue);text-decoration:none}
15
+ .container{max-width:900px;margin:0 auto;padding:0 24px}
16
+
17
+ .slide{min-height:100vh;display:flex;align-items:center;padding:80px 0;position:relative}
18
+ .slide:nth-child(even){background:var(--navy-light)}
19
+ .slide-content{width:100%}
20
+
21
+ h1{font-size:clamp(2.5rem,6vw,3.5rem);font-weight:800;line-height:1.1;margin-bottom:24px;letter-spacing:-.03em}
22
+ h1 .highlight{background:linear-gradient(135deg,var(--blue),var(--emerald));-webkit-background-clip:text;-webkit-text-fill-color:transparent;background-clip:text}
23
+ h2{font-size:clamp(1.6rem,4vw,2.2rem);font-weight:700;margin-bottom:20px;letter-spacing:-.02em}
24
+ .label{font-size:.8rem;font-weight:700;text-transform:uppercase;letter-spacing:.12em;color:var(--emerald);margin-bottom:12px}
25
+ .subtitle{font-size:1.15rem;color:var(--gray);max-width:640px;margin-bottom:32px}
26
+
27
+ .pain-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(240px,1fr));gap:20px;margin-top:32px}
28
+ .pain-card{background:var(--navy);border:1px solid rgba(239,68,68,.2);border-radius:12px;padding:24px}
29
+ .pain-card .icon{font-size:2rem;margin-bottom:10px}
30
+ .pain-card h3{font-size:1rem;margin-bottom:6px;color:var(--red)}
31
+ .pain-card p{font-size:.9rem;color:var(--gray)}
32
+
33
+ .validation{display:grid;grid-template-columns:1fr 1fr;gap:24px;margin-top:32px}
34
+ .val-card{background:var(--navy-light);border:1px solid rgba(59,130,246,.15);border-radius:12px;padding:28px}
35
+ .val-card .big{font-size:2.5rem;font-weight:800;color:var(--blue);margin-bottom:8px}
36
+ .val-card p{color:var(--gray);font-size:.9rem}
37
+ .val-card strong{color:var(--white)}
38
+
39
+ .compare-table{width:100%;margin-top:32px;border-collapse:collapse}
40
+ .compare-table th,.compare-table td{padding:16px 20px;text-align:left;border-bottom:1px solid rgba(255,255,255,.06)}
41
+ .compare-table th{font-size:.8rem;text-transform:uppercase;letter-spacing:.1em;color:var(--gray)}
42
+ .compare-table .before{color:var(--red)}
43
+ .compare-table .after{color:var(--emerald)}
44
+ .compare-table td:first-child{font-weight:600;color:var(--white)}
45
+
46
+ .solution-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(240px,1fr));gap:20px;margin-top:32px}
47
+ .sol-card{background:var(--navy);border:1px solid rgba(16,185,129,.15);border-radius:12px;padding:24px}
48
+ .sol-card .icon{font-size:2rem;margin-bottom:10px}
49
+ .sol-card h3{font-size:1rem;margin-bottom:6px}
50
+ .sol-card p{font-size:.9rem;color:var(--gray)}
51
+
52
+ .btn{display:inline-flex;align-items:center;gap:8px;padding:16px 36px;border-radius:10px;font-weight:600;font-size:1.1rem;transition:all .2s;border:none;cursor:pointer;text-decoration:none}
53
+ .btn-primary{background:var(--blue);color:#fff}
54
+ .btn-primary:hover{background:#2563EB}
55
+
56
+ .back-link{position:fixed;top:20px;left:20px;z-index:100;color:var(--gray);font-size:.85rem;background:rgba(15,23,42,.8);padding:8px 16px;border-radius:8px;backdrop-filter:blur(8px)}
57
+ .back-link:hover{color:var(--white)}
58
+
59
+ @media(max-width:768px){
60
+ .slide{min-height:auto;padding:60px 0}
61
+ .validation{grid-template-columns:1fr}
62
+ .compare-table{font-size:.85rem}
63
+ .compare-table th,.compare-table td{padding:10px 12px}
64
+ }
65
+ </style>
66
+ </head>
67
+ <body>
68
+
69
+ <a href="/services/" class="back-link">← Back to Services</a>
70
+
71
+ <!-- Slide 1: Title -->
72
+ <section class="slide">
73
+ <div class="container">
74
+ <div class="slide-content" style="text-align:center">
75
+ <p class="label">ClawMoat AI Agent Services</p>
76
+ <h1>Your SOPs Don't Run Themselves.<br><span class="highlight">Until Now.</span></h1>
77
+ <p class="subtitle" style="margin:0 auto 32px">Done-for-you AI agents that follow your processes, protect your data, and work 24/7.</p>
78
+ <img src="/logo.svg" alt="ClawMoat" style="height:40px;opacity:.6;margin-top:24px">
79
+ </div>
80
+ </div>
81
+ </section>
82
+
83
+ <!-- Slide 2: The Problem -->
84
+ <section class="slide">
85
+ <div class="container">
86
+ <div class="slide-content">
87
+ <p class="label">The Problem</p>
88
+ <h2>Businesses Run on Manual Processes That Don't Scale</h2>
89
+ <p class="subtitle">Every company has SOPs. Almost none of them run automatically.</p>
90
+ <div class="pain-grid">
91
+ <div class="pain-card">
92
+ <div class="icon">⏰</div>
93
+ <h3>Time-Consuming Manual Work</h3>
94
+ <p>Your team spends hours on data entry, follow-ups, reporting, and status updates. Work that follows a process — but requires a human to push buttons.</p>
95
+ </div>
96
+ <div class="pain-card">
97
+ <div class="icon">💸</div>
98
+ <h3>Expensive Employees on Cheap Tasks</h3>
99
+ <p>You're paying $60K-$120K/year for people to do work that follows a checklist. The talent is wasted on process execution.</p>
100
+ </div>
101
+ <div class="pain-card">
102
+ <div class="icon">📋</div>
103
+ <h3>SOPs That Don't Run Themselves</h3>
104
+ <p>You documented the process. You trained the team. But the SOP sits in a folder while humans still do every step manually.</p>
105
+ </div>
106
+ </div>
107
+ </div>
108
+ </div>
109
+ </section>
110
+
111
+ <!-- Slide 3: Market Validation -->
112
+ <section class="slide">
113
+ <div class="container">
114
+ <div class="slide-content">
115
+ <p class="label">Market Validation</p>
116
+ <h2>This Isn't Theoretical. It's Happening Now.</h2>
117
+ <div class="validation">
118
+ <div class="val-card">
119
+ <div class="big">$3,350</div>
120
+ <p><strong>Origin Studios</strong> charges $3,350 per agent for AI agent setup services. Businesses are paying premium prices for this exact service.</p>
121
+ </div>
122
+ <div class="val-card">
123
+ <div class="big">60%</div>
124
+ <p><strong>Jason Calacanis</strong> is automating 60% of his VC firm's operations with AI agents. Not experimenting — replacing actual headcount.</p>
125
+ </div>
126
+ <div class="val-card">
127
+ <div class="big">40K+</div>
128
+ <p><strong>OpenClaw instances</strong> running worldwide. The platform we build on is proven at scale with a massive community.</p>
129
+ </div>
130
+ <div class="val-card">
131
+ <div class="big">277</div>
132
+ <p><strong>Security tests</strong> in ClawMoat. Zero dependencies. MIT licensed. The only open-source agent security layer.</p>
133
+ </div>
134
+ </div>
135
+ </div>
136
+ </div>
137
+ </section>
138
+
139
+ <!-- Slide 4: The Solution -->
140
+ <section class="slide">
141
+ <div class="container">
142
+ <div class="slide-content">
143
+ <p class="label">The Solution</p>
144
+ <h2>ClawMoat-Secured AI Agents, Deployed for You</h2>
145
+ <p class="subtitle">We don't sell software. We deploy working AI agents secured by the only open-source agent security layer.</p>
146
+ <div class="solution-grid">
147
+ <div class="sol-card">
148
+ <div class="icon">🤖</div>
149
+ <h3>Custom Agents</h3>
150
+ <p>Built around your processes. Finance, ops, sales, customer service — each with its own personality, memory, and capabilities.</p>
151
+ </div>
152
+ <div class="sol-card">
153
+ <div class="icon">🛡️</div>
154
+ <h3>Security-First</h3>
155
+ <p>Unlike competitors deploying naked agents, every deployment includes Host Guardian, FinanceGuard, and full audit trails.</p>
156
+ </div>
157
+ <div class="sol-card">
158
+ <div class="icon">💬</div>
159
+ <h3>Natural Interface</h3>
160
+ <p>Your team talks to agents via Telegram, Slack, or WhatsApp. No training. No new tools. Just message them.</p>
161
+ </div>
162
+ <div class="sol-card">
163
+ <div class="icon">🏠</div>
164
+ <h3>Your Hardware</h3>
165
+ <p>Run on your laptop, a $400 mini server, or cloud. Your data stays on your infrastructure. Always.</p>
166
+ </div>
167
+ </div>
168
+ </div>
169
+ </div>
170
+ </section>
171
+
172
+ <!-- Slide 5: Before/After -->
173
+ <section class="slide">
174
+ <div class="container">
175
+ <div class="slide-content">
176
+ <p class="label">Before & After</p>
177
+ <h2>A Day in the Life: CFO Edition</h2>
178
+ <table class="compare-table">
179
+ <thead>
180
+ <tr><th>Task</th><th>Before (Manual)</th><th>After (AI Agent)</th></tr>
181
+ </thead>
182
+ <tbody>
183
+ <tr>
184
+ <td>Morning cash position</td>
185
+ <td class="before">45 min pulling bank data, building spreadsheet</td>
186
+ <td class="after">Agent sends report to Telegram at 7 AM</td>
187
+ </tr>
188
+ <tr>
189
+ <td>AR follow-ups</td>
190
+ <td class="before">Staff spends 2 hrs reviewing who's overdue, drafting emails</td>
191
+ <td class="after">Agent identifies overdue, drafts polite follow-ups, awaits approval</td>
192
+ </tr>
193
+ <tr>
194
+ <td>Expense categorization</td>
195
+ <td class="before">Bookkeeper manually tags 50+ transactions</td>
196
+ <td class="after">Agent categorizes, flags anomalies, you review exceptions</td>
197
+ </tr>
198
+ <tr>
199
+ <td>Board report prep</td>
200
+ <td class="before">3-4 hours pulling data from 5 sources</td>
201
+ <td class="after">Agent compiles draft with charts, you edit and present</td>
202
+ </tr>
203
+ <tr>
204
+ <td>Vendor payment tracking</td>
205
+ <td class="before">Manual spreadsheet, always behind</td>
206
+ <td class="after">Agent tracks due dates, alerts before deadlines</td>
207
+ </tr>
208
+ </tbody>
209
+ </table>
210
+ <p style="color:var(--gray);margin-top:24px;font-style:italic;text-align:center">Same results. A fraction of the time. No new hires.</p>
211
+ </div>
212
+ </div>
213
+ </section>
214
+
215
+ <!-- Slide 6: CTA -->
216
+ <section class="slide">
217
+ <div class="container">
218
+ <div class="slide-content" style="text-align:center">
219
+ <p class="label">Next Step</p>
220
+ <h2>See If AI Agents Fit Your Business</h2>
221
+ <p class="subtitle" style="margin:0 auto 40px">30-minute discovery call. We'll map your processes and show you exactly where agents save you time and money.</p>
222
+ <a href="mailto:hello@clawmoat.com?subject=AI%20Agent%20Setup%20-%20Discovery%20Call" class="btn btn-primary">Schedule a Discovery Call →</a>
223
+ <p style="color:var(--gray);margin-top:24px;font-size:.9rem">No pitch. No pressure. Just an honest assessment of where AI agents can help.</p>
224
+ </div>
225
+ </div>
226
+ </section>
227
+
228
+ </body>
229
+ </html>