NanoClaw’s Creator Lands Docker Deal After Wild Six Weeks

▼ Summary
– Gavriel Cohen created NanoClaw, a tiny, open-source, and secure alternative to OpenClaw, during a weekend coding binge, and its introduction on Hacker News went viral.
– The project gained massive attention after a viral post from AI researcher Andrej Karpathy, leading to significant GitHub engagement and prompting Cohen to shut down his startup to focus full-time on NanoClaw.
– Cohen built NanoClaw after discovering OpenClaw’s severe security flaws, including unauthorized access to personal data and its sprawling, unverifiable codebase, aiming for a secure, minimal alternative.
– NanoClaw has now partnered with Docker to integrate Docker Sandboxes, expanding its reach to Docker’s vast developer and enterprise community.
– While NanoClaw will remain free and open source, the newly formed NanoCo plans to build a commercial product with support services, funded initially by a friends-and-family round amid VC interest.
The journey from a weekend coding project to a major industry partnership has been nothing short of extraordinary for developer Gavriel Cohen. His creation, NanoClaw, began as a personal solution to a security concern and has rapidly evolved into a significant open-source project with backing from a tech giant. In just over a month, a simple Hacker News post ignited a chain of events leading to a strategic deal with Docker, fundamentally altering the trajectory of Cohen’s work and his newly formed company, NanoCo.
The story starts with Cohen and his brother Lazer running an AI marketing startup. The business showed promising traction, but Gavriel identified a gap in their workflow automation. While using the popular tool OpenClaw to bridge that gap, a disturbing discovery halted him in his tracks. He found that the agent had downloaded his entire WhatsApp message history, including personal conversations, and stored the data in an unencrypted file on his computer. This incident highlighted widespread criticisms of OpenClaw as a security nightmare, largely due to its broad system access and difficulty in controlling data permissions.
Further investigation revealed another issue: the tool’s immense and opaque codebase. Cohen was shocked to find it included an obscure open-source PDF editing library he had written months prior, a project he wasn’t even maintaining. Realizing the impossibility of auditing such a sprawling system for security, he decided to build his own alternative. Over a single weekend, he developed NanoClaw, a streamlined, secure agent framework built on Apple’s container technology, which isolates software and strictly limits data access. He shared the 500-line project online, expecting little fanfare.
The response was anything but quiet. A post on Hacker News gained initial momentum, but the real explosion came when renowned AI researcher Andrej Karpathy praised NanoClaw on social media. Overnight, Cohen’s phone rang incessantly. The project’s GitHub repository amassed tens of thousands of stars and attracted dozens of contributors. Amid this frenzy, Oleg Šelajev, a developer advocate at Docker, took notice. Šelajev modified NanoClaw to integrate Docker Sandboxes, the container platform’s own secure environment technology, and reached out to Cohen.
Seeing the value in standardization for his growing community, Cohen enthusiastically embraced the change. The collaboration formalized into an official partnership, integrating Docker Sandboxes directly into the NanoClaw project. This move instantly connects NanoClaw to Docker’s vast ecosystem of millions of developers and enterprise customers, providing a trusted, industry-standard foundation for its security model.
For the Cohen brothers, the pace has been relentless. Gavriel shut down the original marketing startup to focus full-time on NanoClaw, with Lazer serving as president of the new venture, NanoCo. While the core NanoClaw software will remain free and open-source, the team is now navigating the challenge of building a sustainable business. They are currently supported by a friends-and-family funding round and are fielding interest from venture capitalists. Their tentative commercial strategy involves offering a supported enterprise product with services like forward-deployed engineers to help companies build and manage secure AI agent systems.
The path ahead is competitive, but the strategic alliance with Docker provides a formidable launchpad. By addressing critical security fears with a minimalist, transparent approach and now leveraging one of the most ubiquitous developer platforms, NanoClaw has positioned itself at the center of a crucial conversation about safety and trust in AI automation. The project’s meteoric rise from a couch-built prototype to an industry-recognized tool demonstrates a powerful demand for simplicity and security in an increasingly complex technological landscape.
(Source: TechCrunch)





