> ## Documentation Index
> Fetch the complete documentation index at: https://openclaw.veiseule.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# security

# `openclaw security`

Xavfsizlik vositalari (audit va ixtiyoriy tuzatishlar).

Bog‘liq:

* `openclaw sessions`

## Audit

```bash theme={"theme":{"light":"min-light","dark":"min-dark"}}
openclaw security audit
openclaw security audit --deep
openclaw security audit --fix
```

The audit warns when multiple DM senders share the main session and recommends **secure DM mode**: `session.dmScope="per-channel-peer"` (or `per-account-channel-peer` for multi-account channels) for shared inboxes.
It also warns when small models (`<=300B`) are used without sandboxing and with web/browser tools enabled.
Webhook ingress uchun, `hooks.defaultSessionKey` o‘rnatilmagan bo‘lsa, so‘rovdagi `sessionKey` override’lari yoqilgan bo‘lsa yoki override’lar `hooks.allowedSessionKeyPrefixes` siz yoqilgan bo‘lsa ogohlantiradi.
Shuningdek, sandbox rejimi o‘chiq bo‘lsa-da sandbox Docker sozlamalari o‘rnatilganida, `gateway.nodes.denyCommands` samarasiz pattern-ga o‘xshash yoki noma’lum yozuvlardan foydalanganda, global `tools.profile="minimal"` agent tool profillari tomonidan bekor qilinganda hamda o‘rnatilgan extension plugin toollari permissiv tool siyosati ostida mavjud bo‘lishi mumkin bo‘lsa ogohlantiradi.