Introduction

This document describes how to deploy OpenClaw in a confidential VM (cVM) and provides related security configuration guidance. It applies to OpenClaw released in April and later versions (the latest version is recommended). Deploying OpenClaw in a cVM enhances its runtime security, ensuring that sensitive OpenClaw data is protected against unauthorized access by external malicious actors.