Every OpenClaw hosting guide has the same problem
Search "best cloud for OpenClaw" and you will find articles from Kimi, xCloud, MilesWeb, and half a dozen other hosting providers. Each one lists its own platform first. Several claim independent methodology and show no supporting data.
OpenClaw has 135,000+ GitHub stars. It is one of the most-starred open-source projects in the world. The cloud infrastructure comparison content for it is almost entirely vendor-produced promotional material.
This guide is different. No hosting provider paid for it, no affiliate links, no sponsored placement. Eight providers evaluated across the criteria that actually matter for OpenClaw deployments: pricing, performance, setup friction, security defaults, network quality, Ollama compatibility, and what happens when something breaks.
What OpenClaw actually requires from a host
Understanding OpenClaw's architecture prevents over-provisioning (and under-provisioning).
OpenClaw consists of three components:
Gateway daemon: The core process that manages agent identities, handles messaging platform connections (Discord, WhatsApp, Telegram, Slack, Signal, iMessage), and routes messages to your AI backend. Lightweight: runs in 256 to 512MB RAM.
AI backend (inference): Where LLM calls go. Either a cloud API (Anthropic, OpenAI, Google) or a local Ollama instance. If you use cloud APIs, the server needs only network access. If you run Ollama locally, you need significant RAM (8GB minimum for a 7B model).
Workspace storage: Files, memory, job configurations, and SOUL.md agent identity files. Typically 1 to 5GB for personal deployments.
Practical minimums by deployment type:
| Deployment | CPU | RAM | Storage | Monthly cost range |
|---|---|---|---|---|
| OpenClaw + cloud API | 1 vCPU | 1GB | 10GB | $5 to $8/month |
| OpenClaw + Ollama 7B model | 2 vCPU | 10GB | 30GB | $12 to $25/month |
| OpenClaw + Ollama 13B model | 4 vCPU | 18GB | 50GB | $35 to $80/month |
| Multi-agent team deployment | 4 vCPU | 8GB | 50GB | $25 to $60/month |
Most personal OpenClaw deployments fall into the first row: a cheap VPS with cloud API inference.
The eight providers: independent evaluation
1. Hetzner Cloud
Best for: Budget-conscious deployments, EU-based users, developers who prefer straightforward infrastructure
Pricing:
- CX22 (2 vCPU, 4GB RAM, 40GB SSD): $4.49/month EU, ~$6/month US (Ashburn, VA)
- CX32 (4 vCPU, 8GB RAM, 80GB SSD): $8.98/month EU
- CX52 (8 vCPU, 16GB RAM, 160GB SSD): $17.96/month EU
Verdict on pricing: The best price-to-performance ratio in this comparison at the entry tier. The CX32 at $8.98/month handles OpenClaw with Ollama 7B comfortably with RAM headroom.
Setup experience: Standard Ubuntu 24.04 images, straightforward SSH access. OpenClaw installation takes under 15 minutes following the official documentation. No Docker pre-installed but trivial to add. No one-click OpenClaw app (unlike some competitors) but that is not a significant friction point.
Network quality: Consistently strong. Multiple independent benchmarks show Hetzner outperforming similarly priced VPS competitors on latency and packet loss. EU network is excellent. US Ashburn datacenter performs well for East Coast deployments; West Coast users see higher latency.
Ollama compatibility: No issues on AMD64. ARM instances exist (CX-series is AMD64; CAX-series is ARM64). OpenClaw's binary dependencies occasionally create friction on ARM64, so stick with AMD64 unless you have a specific reason.
Security defaults: No firewall pre-configured. You must enable Hetzner's Cloud Firewall or configure ufw manually. This is a setup step that every deployment should take but that some users skip. Fail2ban not pre-installed.
What breaks: ARM instance type selection requires care. Storage volumes are separate from the server and require mounting. No managed database option for teams that want a hosted PostgreSQL alongside their OpenClaw instance.
Bottom line: Best pure-value option for personal deployments. The extra 15 minutes of manual setup relative to managed platforms is easily worth the 40 to 50% cost savings.
2. DigitalOcean Droplets
Best for: US and global deployments, developers who value managed experience, teams that want backups built in
Pricing:
- Basic 1 vCPU / 1GB RAM / 25GB SSD: $6/month
- Basic 2 vCPU / 2GB RAM / 50GB SSD: $12/month
- Basic 4 vCPU / 8GB RAM / 160GB SSD: $48/month (good for Ollama)
Verdict on pricing: Higher than Hetzner at comparable specs. The $12/month 2GB Droplet competes with Hetzner's $4.49/month CX22 on specs, at 2.7x the price. The premium is for ecosystem: managed databases, one-click apps, managed Kubernetes, App Platform, and Spaces object storage are all available if you need them.
Setup experience: The strongest managed setup experience in this comparison. One-click Docker Droplets eliminate OS configuration. The DigitalOcean Marketplace has community-maintained deployment stacks. Comprehensive documentation. Console access from the web UI is helpful when SSH access breaks.
Network quality: Excellent global coverage with 14 datacenter regions. NYC, SFO, AMS, LON, SGP, BLR, SYD among others. For deployments serving users across multiple geographies, DigitalOcean's regional diversity is a genuine advantage.
Ollama compatibility: No issues. AMD64 Droplets run Ollama without friction. The 4 vCPU / 8GB RAM Droplet at $48/month handles a 7B model reasonably but is expensive for that workload. Hetzner's CX32 at $8.98/month delivers comparable performance for Ollama use cases.
Automatic backups: Available for 20% additional monthly cost. For a $12/month Droplet, backups add $2.40/month. This is a meaningful differentiator for production deployments where losing the OpenClaw configuration would require rebuilding.
Security defaults: UFW not pre-configured but documented. Managed firewalls available. DigitalOcean's security team publishes clear hardening documentation. SSH key requirement enforced by default (password auth disabled).
What breaks: Pricing is noticeably higher than European competitors for equivalent specs. No ARM option at the entry tier. The 1GB Droplet is adequate for OpenClaw with cloud API inference but tight if you add any additional services.
Bottom line: The best managed experience and strongest ecosystem. Worth the premium for teams that want DigitalOcean's broader infrastructure alongside their OpenClaw deployment. Not the right choice if pure OpenClaw hosting cost is the primary criterion.
3. Akamai Cloud (formerly Linode)
Best for: Teams already in the Akamai/Linode ecosystem, distributed edge deployments
Pricing:
- Nanode (1 vCPU, 1GB RAM, 25GB): $5/month
- Linode 2GB (1 vCPU, 2GB RAM, 50GB): $10/month
- Linode 4GB (2 vCPU, 4GB RAM, 80GB): $20/month
Verdict on pricing: Between Hetzner and DigitalOcean. Competitive but not category-leading at any tier.
Setup experience: Clean, traditional VPS experience. Ubuntu 24.04 available. No one-click OpenClaw marketplace app. Documentation is solid. The web-based console (Lish) is useful for recovery scenarios.
Network quality: Strong. Akamai's acquisition brings significant global edge capacity. 11 datacenter regions. For latency-sensitive Discord bot deployments, proximity to Discord's servers (US East, US West, Amsterdam, Singapore) matters and Akamai covers all of them.
Security defaults: Similar to Hetzner and DigitalOcean: you configure your own firewall. The Linode Firewall product provides cloud-managed rules. Documentation on hardening is available.
Ollama compatibility: No issues on AMD64. Dedicated GPU instances available for teams that want GPU-accelerated local inference, though at significant cost ($100+/month).
What breaks: Pricing is not the lowest in its tier. The transition from Linode to Akamai Cloud branding created some documentation inconsistency. Customer support response times are variable.
Bottom line: A solid tier-2 choice. If you are already using Linode/Akamai for other infrastructure, consolidating OpenClaw there is sensible. If you are starting fresh, Hetzner beats it on price and DigitalOcean beats it on ecosystem.
4. OVHcloud
Best for: European deployments, GDPR-critical workloads, high-bandwidth requirements
Pricing:
- VPS Starter (2 vCPU, 2GB RAM, 40GB SSD): ~$4.50/month
- VPS Value (4 vCPU, 4GB RAM, 80GB SSD): ~$7.50/month
- VPS Essential (4 vCPU, 8GB RAM, 160GB SSD): ~$13/month
Verdict on pricing: Comparable to Hetzner at the entry tier. Strong value for European-hosted workloads.
Setup experience: More complex than DigitalOcean. The control panel is less polished. Initial provisioning can take longer. For developers comfortable with CLI and manual server configuration, this is a minor friction. For those expecting a managed-platform experience, it is a steeper learning curve.
Network quality: OVHcloud's European backbone is excellent. Strong connectivity across France, UK, Germany, and Poland datacenters. North American datacenters (Beauharnois, Vint Hill) are good but not exceptional for US-West deployments.
GDPR: Data sovereign to France/EU with clear data residency controls. For European businesses with strict GDPR requirements, OVHcloud's French ownership and EU-only data processing is a meaningful compliance advantage.
Security defaults: No firewall pre-configured. OVHcloud Anti-DDoS is included on all plans, which is a meaningful feature for public-facing OpenClaw deployments that may receive automated probing.
What breaks: Customer support is slower than DigitalOcean. The billing interface has historically been confusing. ARM instances are not available at entry price points.
Bottom line: Strong choice for European users prioritizing price, GDPR compliance, or high-bandwidth workloads. OVHcloud's included DDoS protection is a genuine differentiator for public-facing agents.
5. Contabo
Best for: Maximum RAM per dollar, Ollama-heavy deployments
Pricing:
- VPS S (4 vCPU, 8GB RAM, 50GB SSD): ~$5/month
- VPS M (6 vCPU, 16GB RAM, 100GB SSD): ~$8.50/month
- VPS L (8 vCPU, 24GB RAM, 200GB SSD): ~$11/month
Verdict on pricing: The most RAM per dollar of any provider in this comparison. The 16GB RAM VPS at $8.50/month handles Ollama with a 13B model, which costs $35 to $80/month elsewhere.
The important caveat: Contabo delivers this value by overprovisioning shared physical hardware. CPU performance is variable depending on neighbor load. Sustained CPU-intensive workloads (like Ollama inference) will see inconsistent performance compared to dedicated vCPU providers.
Setup experience: Basic. Standard VPS provisioning. No managed platform features. The control panel is functional but dated. Not suitable for teams that want managed backups, monitoring, or one-click apps.
Network quality: Mixed. German and US datacenters available. Latency benchmarks are inconsistent. Not the right choice for latency-sensitive real-time agent interactions.
Ollama compatibility: Works, but CPU performance variability affects inference throughput. For batch processing or background tasks, Contabo's RAM-per-dollar advantage matters. For real-time interactive agents, the CPU inconsistency is disqualifying.
What breaks: CPU performance variability is the known and documented trade-off. Support response times are long. No SLA on CPU performance. Disk I/O can be slow under neighbor load.
Bottom line: Genuinely useful for one specific scenario: deploying Ollama with a large model (13B+) on a tight budget where latency is not critical. Not recommended for interactive OpenClaw agents where response consistency matters.
6. Hostinger VPS
Best for: Developers prioritizing simplicity, managed experience at mid-range pricing
Pricing:
- KVM 1 (1 vCPU, 4GB RAM, 50GB SSD): ~$5/month
- KVM 2 (2 vCPU, 8GB RAM, 100GB SSD): ~$8/month
- KVM 4 (4 vCPU, 16GB RAM, 200GB SSD): ~$15/month
Verdict on pricing: Strong value, particularly for the KVM 2 and KVM 4 tiers. 8GB RAM at $8/month is competitive with any provider in this comparison.
Setup experience: Better than traditional VPS providers. Hostinger's hPanel is cleaner than Contabo or OVHcloud. One-click OS installation. The managed WordPress/application experience bleeds into their VPS offering in useful ways.
Network quality: Datacenters across US, EU, UK, India, Singapore, and Brazil. For global agent deployments where regional latency to messaging platform servers matters, the geographic coverage is solid.
Security defaults: UFW available, basic setup required. No pre-configured security stack but documentation is clear.
What breaks: Hostinger's primary market is shared hosting and managed WordPress. The VPS line is secondary, and the support team's VPS expertise is inconsistent. Niche OpenClaw configuration issues may exceed what support can help with.
Bottom line: A legitimate mid-range option, particularly for developers who value a cleaner control panel than traditional VPS providers. The 8GB RAM at $8/month positions it competitively for Ollama deployments.
7. OpenClaw Cloud (official managed service)
Best for: Users who want zero server management, guaranteed compatibility, official support
Pricing: ~$8 to $25/month depending on tier (pricing subject to change; check openclaw.com for current rates)
Verdict on pricing: More expensive than self-managed VPS at equivalent compute. The premium is for managed infrastructure, automatic updates, and official support from the OpenClaw team.
Setup experience: The simplest setup of any option in this comparison. OpenClaw Cloud handles installation, updates, and monitoring. No SSH, no server configuration, no Docker. Deploy in minutes with a browser.
Compatibility: Guaranteed. Running the official managed service eliminates the "does this build work on my VPS architecture" class of problems. Updates tested and deployed by the OpenClaw team.
Security: Maintained by the OpenClaw team, which means known CVEs (including CVE-2026-25253) are patched on the managed platform without user action. This is a meaningful differentiator for users without server administration skills.
What breaks: Less control over the underlying infrastructure. If you need a specific configuration, custom MCP server install, or adjacent services (custom reverse proxy, Langfuse observability), self-managed gives you more flexibility.
Bottom line: The right choice for non-technical users or for organizations where the opportunity cost of server management exceeds the cost premium. Technical users save money and gain control by self-managing.
8. ClawCloud
Best for: OpenClaw-specific managed deployments, users who want a dedicated OpenClaw platform
Pricing: ~$8 to $20/month (check clawcloud.run for current rates)
Verdict on pricing: Positioned similarly to OpenClaw Cloud. The managed platform premium over self-managed VPS.
Setup experience: Focused entirely on OpenClaw and related agent deployments. The control panel is designed around OpenClaw's architecture, making it more intuitive for OpenClaw-specific configuration than a generic VPS control panel.
What breaks: Less ecosystem breadth than DigitalOcean. A newer platform with a less established support track record. If ClawCloud as a business encounters difficulties, migration to a self-managed VPS is straightforward but requires planning.
Bottom line: Worth evaluating alongside OpenClaw Cloud for users who want managed hosting. The platform focus means the OpenClaw-specific UX is often cleaner than using a generic VPS platform.
The security dimension: what every comparison misses
OpenClaw's rapid growth has outpaced its security documentation. Several issues require attention regardless of which hosting provider you choose.
CVE-2026-25253: patch status by provider
CVE-2026-25253 affects the OpenClaw Gateway daemon's handling of certain webhook payloads. The vulnerability was disclosed in early 2026.
- OpenClaw Cloud: Patched at the managed platform level. No user action required.
- ClawCloud: Patched in recent versions. Verify your installed version.
- Self-managed (Hetzner, DigitalOcean, Akamai, etc.): Manual update required. Check your installed version against the advisory at the OpenClaw GitHub releases page.
To check your version and update:
# Check current version
openclaw --version
# Update via npm (if installed globally)
npm update -g openclaw
# Verify update
openclaw --version
Gateway port exposure
Default OpenClaw installations expose the Gateway admin interface on port 18789. This port should never be public-facing.
# Correct: restrict to localhost only
sudo ufw deny 18789
sudo ufw allow from 127.0.0.1 to any port 18789
# Or allow only your specific management IP
sudo ufw allow from YOUR_MANAGEMENT_IP to any port 18789
Discord bot token security
OpenClaw's Discord integration uses long-lived bot tokens stored in configuration files. Protect them:
# Set correct permissions on the env file
chmod 600 /root/.openclaw.env
chmod 700 /root/.openclaw/
# Never store tokens in .openclaw.json in plaintext on shared hosts
# Use environment variables with proper file permissions
If your server is compromised, rotate Discord bot tokens immediately through the Discord Developer Portal. Long-lived tokens are persistent: a compromised token remains valid until manually revoked.
SSH hardening for OpenClaw hosts
The minimum SSH hardening configuration for any public VPS running OpenClaw:
# /etc/ssh/sshd_config
PermitRootLogin prohibit-password # or 'no' if you use a non-root user
PasswordAuthentication no
PubkeyAuthentication yes
MaxAuthTries 3
LoginGraceTime 30
# After editing, restart SSH
sudo systemctl restart sshd
# Install fail2ban
sudo apt install fail2ban -y
sudo systemctl enable fail2ban
sudo systemctl start fail2ban
UFW baseline rules
# Default policy: deny all incoming, allow all outgoing
sudo ufw default deny incoming
sudo ufw default allow outgoing
# Allow SSH (change 22 to your custom port if you've changed it)
sudo ufw allow 22/tcp
# Allow HTTPS if you're running a web interface
sudo ufw allow 443/tcp
# Enable
sudo ufw enable
# Verify
sudo ufw status verbose
The deployment decision: which provider for which situation
You want the cheapest option and are comfortable with server administration: Hetzner CX22 at $4.49/month. Fastest path to cost-efficient production.
You want a managed experience with strong ecosystem: DigitalOcean $12/month Droplet. Best documentation, automatic backups, clean UI.
You are running Ollama with a 7B model on a budget: Hetzner CX32 at $8.98/month or Hostinger KVM 2 at $8/month. Both provide 8GB RAM at under $10/month.
You are running Ollama with a 13B model: Contabo VPS M at $8.50/month if latency consistency is acceptable, or Hetzner CX42 (16 vCPU, 32GB RAM) at $34/month if performance consistency matters.
You need EU data residency for GDPR: OVHcloud or Hetzner EU. Both keep data in European datacenters with clear data sovereignty.
You want zero server administration: OpenClaw Cloud or ClawCloud managed platforms. Pay the premium, skip the ops work.
You are deploying multiple OpenClaw agents (e.g., one per brand or persona): DigitalOcean Droplets with a managed load balancer, or Hetzner servers with nginx reverse proxy. One VPS per agent is the simplest architecture for isolation.
Deployment checklist before going live
Regardless of provider, verify these before your OpenClaw deployment handles real traffic:
- SSH key-only authentication enabled, password authentication disabled
- UFW or cloud firewall configured: deny all, allow only SSH and required ports
- Port 18789 (Gateway admin) not publicly exposed
- Fail2ban installed and active
- OpenClaw version checked against CVE database
-
.openclaw.envfile permissions set to 600 -
.openclaw/directory permissions set to 700 - Discord bot token stored in env file, not in openclaw.json
- API keys (Anthropic, OpenAI, etc.) in env file with restricted read permissions
- Automated backups configured (cloud provider backup or cron to remote storage)
- Monitoring alert set up: notify if server goes offline for more than 5 minutes
Ready to deploy your OpenClaw infrastructure?
If you are evaluating OpenClaw for a team deployment and want guidance on the right infrastructure configuration for your specific setup, use case, and budget, we work with technical teams to scope agent deployments efficiently.
For the complete AI agent framework comparison that covers OpenClaw alongside LangGraph, CrewAI, and 12 other frameworks, see the AI agent frameworks comparison 2026. For cost optimization after your deployment is running, the frugal AI agent stack guide covers the multi-model routing and context management strategies that reduce operating costs by 40 to 70 percent.
Frequently Asked Questions
What is the best cloud for hosting OpenClaw agents in 2026?
For personal and small-team deployments under $20/month, Hetzner Cloud (CX22 at $4.49/month in EU or $6/month US) offers the best price-to-performance ratio with reliable uptime and straightforward setup. For US-based deployments requiring low latency across North America, DigitalOcean Droplets ($6/month for 1 vCPU/1GB or $12/month for 2 vCPU/2GB) offer the best managed experience with one-click Docker and automatic backups. For teams needing managed infrastructure with zero server management, OpenClaw Cloud and ClawCloud offer fully managed options starting at $8 to $15/month.
What are the minimum server specs to run OpenClaw?
OpenClaw Gateway daemon requires 512MB RAM minimum, but 1GB RAM is the practical minimum for stable operation. 1 vCPU handles personal workloads; 2 vCPU is recommended for multi-agent deployments or if running Ollama locally on the same server. For running OpenClaw with a local Ollama model (7B parameters), you need at minimum 8GB RAM and 8GB disk for model storage. Without local Ollama (using API-based inference), a $6/month 1GB VPS handles OpenClaw comfortably.
Can you run OpenClaw for free?
Oracle Cloud Always Free tier provides 4 ARM CPUs and 24GB RAM at zero cost, making it the only option for genuinely free OpenClaw hosting. The caveats: ARM instances in popular regions are frequently unavailable for new accounts due to demand, ARM architecture occasionally creates compatibility issues with OpenClaw's binary dependencies, and Oracle's free tier terms are subject to change. Hetzner at $4.49/month is a more reliable alternative for near-free hosting.
What security vulnerabilities exist in OpenClaw that hosting providers do not mention?
OpenClaw has known CVEs including CVE-2026-25253, which affects the Gateway daemon's handling of certain webhook payloads. Additionally, the default OpenClaw configuration exposes the Gateway admin interface on port 18789 without authentication on some versions. Any public-facing OpenClaw deployment should close this port to public access, restrict it to localhost or known IP addresses, and run fail2ban to block brute-force attempts on the SSH port. OpenClaw's Discord integrations use long-lived bot tokens that should be rotated if the server is compromised.
How does OpenClaw differ from CrewAI and LangGraph for agent deployment?
OpenClaw is a personal AI assistant product, not a developer framework. You deploy OpenClaw to get an AI assistant that connects to your messaging apps (Discord, WhatsApp, Telegram, Slack, Signal, iMessage) and can perform computer actions. You do not write agent code in OpenClaw. CrewAI and LangGraph are developer frameworks where you write Python code defining agent roles, tasks, and workflows. If you want to build an AI-powered product that serves other users, you need CrewAI or LangGraph. If you want a personal or team AI assistant accessible through messaging platforms, OpenClaw is the right choice.
Tags