Open Source · Security Tooling

Anvil Scanner

A turnkey security-hardening scanner for OpenClaw deployments. One static binary — no Python, no virtualenv, no pip install. It scans hosts, containers, and configuration, scores your risk with AI, and hardens with a single command.

Linux (Ubuntu/Debian) · macOS (Intel + Apple Silicon) · Raspberry Pi · Windows 11 / Server

View on GitHub → Commercial Licensing

Capabilities

What it does

Host & SSH hardening

Open ports, running services, and pending updates, plus 44 SSH configuration, algorithm, and permission checks.

Firewall checks

ufw / iptables on Linux, pf and the Application Firewall on macOS, and Windows Defender Firewall on Windows.

AI risk analysis

A 1–10 risk score with prioritized recommendations — powered by Ollama (local), Claude, OpenAI, or Grok.

Threat intelligence

Shodan, AbuseIPDB, CVE exposure, the CISA KEV catalog, and local indicator-of-compromise scanning.

Container scanning

Runtime hardening checks for running containers plus image CVE scanning via grype or trivy.

Safe by design

AES-256-GCM encrypted secrets store, and every modified system file is snapshotted before any change — one-command revert.

Get Started

Install

Grab the latest pre-built binary for your platform — one file, drop it in your PATH, and run.

# Linux (amd64)
curl -L https://github.com/Anvil-Cloud-AI/anvil-scanner/releases/latest/download/anvil-scanner_linux_amd64.tar.gz | tar xz
sudo mv anvil-scanner /usr/local/bin/

# Run a full scan — host + containers + threat intel + AI analysis
sudo anvil-scanner

macOS, Raspberry Pi, and Windows builds and all releases are on GitHub →

Why It Matters

AI-enabled defense, in one command

Anvil Scanner puts the priorities of the June 2026 AI Security Executive Order — AI-enabled defensive tooling, vulnerability detection, and CISA KEV exposure — into a tool any team can run today. It's how we make hardening real for agencies and critical-infrastructure operators alike.

Read the guide: Securing Self-Hosted OpenClaw on AWS →

See our AI Security & Cyber Readiness work →

Licensing

Open, with commercial options

Released under the Business Source License 1.1 — free for internal use on OpenClaw deployments you own or operate, converting to Apache 2.0 on March 28, 2030.

Commercial licensing: licensing@anvilcloud.ai