OpenClaw and Hermes: Self-Hosted Assistant Research (Oct 2026)

## OpenClaw ### Latest Release - **v2026.10.9** (tagged Oct 29, 2026): gateway-only "extended-stable" release, described as the project's LTS equivalent. Highlights are dependency security patches and rollback fixes. - Source: https://github.com/openclaw/openclaw/releases ### Security Record (Extensive) - GitHub Advisory Database lists many OpenClaw advisories and CVEs from Sep–Oct 2026, including several High-severity items. - openclaw.ai/security reports **1,799 reports filed since January 2026**, 722 fixes published, 39 with CVEs. - 58% of reports closed without an advisory (invalid, duplicate, or by design). - 123 of 137 reports filed as critical were invalid, duplicate, or out of scope. - Security policy states it is "local-first agent infrastructure for trusted operators" and "not designed as a shared multi-tenant boundary between adversarial users on one gateway." - Sources: https://github.com/advisories?query=openclaw, https://openclaw.ai/security ### Architecture Claims (Unverified) - Described as a resident gateway daemon that owns sessions, tools, and channels, with a large channel catalog. - Runs tools on the host by default unless a sandbox (Docker, Podman, SSH, OpenShell, Crabbox) is configured. - Source: https://www.context.dev/blog/openclaw-vs-hermes-agent (secondary; not confirmed on primary docs) ### Other Claims (Unverified) - Stewarded by nonprofit OpenClaw Foundation (501(c)(3)), MIT-licensed, no paid tier. - Written in TypeScript on Node 24.16+ or 26. - ~392,000 GitHub stars as of Oct 18, 2026 (third-party figure, not checked against GitHub directly). - Automatic skill learning (Skill Workshop) enabled by default since v2026.8.1. - Source: https://www.context.dev/blog/openclaw-vs-hermes-agent ## Hermes Agent ### Latest Releases - **v0.22.0** (Oct 13, 2026): guided first-launch setup chat on free trial model, connectors to hosted apps (Linear, Notion) through Nous tool gateway, one-click local model install via llama.cpp, tested SemVer stable release channels, single messaging gateway for all profiles. - **v0.22.5** (Oct 22, 2026): patch release bundling ~81 merged PRs. Described as stable for GitHub release, CLI, Microsoft Store app, Docker, and Hermes Cloud. Full curated notes deferred to v0.23.0. - Sources: https://hermes-agent-lab.com/releases/v0-22-0/, https://github.com/NousResearch/hermes-agent/releases ### Architecture Claims (Unverified) - Python agent by Nous Research (MIT-licensed) that runs tools locally or in Docker, SSH, Singularity, Modal, Daytona, or Vercel Sandbox backends. - Source: https://www.context.dev/blog/openclaw-vs-hermes-agent ### Other Claims (Unverified) - ~255,000 GitHub stars as of Oct 18, 2026 (third-party figure). - Paid offerings (Nous Portal plans, Hermes Cloud, Tool Gateway) are optional. - Source: https://www.context.dev/blog/openclaw-vs-hermes-agent ### Important Caveat: Not Purely Self-Hosted - Hermes v0.22.0 onboarding runs on a free trial model (nous/welcome, once per OS user). - Connectors work through the Nous tool gateway. - Both depend on Nous-hosted services, so they are **not purely self-hosted**. ## Cross-Product Notes - Both ship importers for the other's configuration (openclaw migrate hermes; hermes claw migrate). - Hermes v0.22.5 notes reference an OpenClaw migration and an `hermes import-agent` command. - Neither product was confirmed as "generally available" by an official launch announcement, though both are described as stable SemVer releases. ## Key Limitations for Publication 1. Star counts are from a single third-party page and were not checked against GitHub directly. 2. No independently verified user counts, active installs, or revenue figures found for either product. 3. Many architecture and feature claims come from a secondary comparison blog (context.dev) and should be checked against primary sources before publication. 4. OpenClaw's advisory count includes many reports closed as invalid or out of scope; "high-severity" labels are GitHub's ratings, not confirmed exploitation in the wild. 5. Hermes's dependency on Nous-hosted services complicates the "self-hosted" framing. 6. Feature status is ambiguous: some Hermes v0.22.5 items are "undocumented on purpose" and fully documented only in v0.23.0.