If you already own a capable machine, start with this: OpenClaw’s gateway does not need it. OpenClaw ships no model. It connects out to OpenAI, Anthropic, OpenRouter or another provider, so the GPU under your desk has nothing to do with the part you are hosting. What the gateway wants is 2 GB of RAM, KVM virtualisation, Docker, and a network position you actually control.
Ranked for that reader: DigitalOcean first, for its security-hardened 1-Click image; your own hardware second, under strict conditions; then Hetzner Cloud, Hostinger, Cloudways and Contabo.
The ranking axis is security posture, not price, because that is the axis that defined OpenClaw’s year. SecurityScorecard counted 40,214 exposed instances across 28,663 unique IPs on 9 February 2026, with 63% of observed deployments vulnerable and 12,812 exploitable via RCE. Almost none of that came from the software’s defaults — it came from operators putting a gateway on the open internet. Where you run it changes your odds.
Key takeaways
- DigitalOcean’s 1-Click image ships OpenClaw 2026.5.6 on Ubuntu 24.04 with Caddy, a generated gateway token, fail2ban and ephemeral agent containers — the hardening list nobody rebuilds by hand at home.
- Contabo’s 99.9% is the only published uptime guarantee among these six. DigitalOcean’s Marketplace listing, Cloudways, Hostinger and Hetzner’s cloud plans publish none — and neither does your broadband.
- Cheapest credible rented gateway here: Hetzner’s CX22 at €4.49/month plus €0.50 for IPv4, excluding VAT.
- Contabo gives you the most desktop-like rented box: 4 vCPU, 8 GB, 100 GB for €5.50/month — on a 24-month commitment.
- Hosting costs $5–$20/month. An actively used agent’s model API bill is estimated at $50–$200/month, so the server is not where cost control lives.
At a glance
| Rank & option | Entry price | What that buys | OpenClaw template? | Published uptime |
|---|---|---|---|---|
| 1. DigitalOcean | Droplet from $12/mo; write-up cites $24/mo minimum | Hardened 1-Click image, 4 GB / 2 vCPU advised for 1–5 users | Yes, security-hardened (plus Hermes) | None on the Marketplace listing |
| 2. Your own hardware | Electricity | Whatever the machine has; 2 GB minimum, 4 GB comfortable | Manual Docker Compose | None |
| 3. Hetzner Cloud | CX22 €4.49/mo + €0.50 IPv4, ex VAT | Plain KVM cloud, six locations | No | None published for cloud plans |
| 4. Hostinger | KVM 1 $6.49/mo promo, $11.99 renewal | 1 vCPU, 4 GB, AMD EPYC, NVMe, 1 Gbps | Yes, one-click Docker template | None published |
| 5. Cloudways | Scout $9.99/mo | 1 vCPU, 2 GB, 50 GB, 2 TB bandwidth, managed | Managed OpenClaw and Hermes | None on the product page |
| 6. Contabo | Cloud VPS 4 €5.50/mo, 24-month term, tax included | 4 vCPU, 8 GB, 100 GB SSD, 200 Mbit/s | No | 99.9% guarantee |
How we ranked these
Four things carried weight. First, how much of OpenClaw’s own hardening baseline arrives already done — loopback binding, fail-closed gateway auth, tight file permissions, sandboxed tool execution. Second, verified published price, including renewal rates, VAT and IPv4 surcharges rather than the headline figure. Third, whether an OpenClaw template exists at all. Fourth, and specific to this list, what the rented option gives you that the machine you already own cannot: distance from your home LAN, a static address, and someone else’s power supply.
#1 Best Overall
- Ample Interior: Explore ample interior space for Micro-ATX or Mini-ITX motherboards, ensuring easy and future expansion
- Components Clearance: Accommodates CPU coolers with a max height of 159mm, GPU cards up to 360mm, and PSU up to 160mm in length.
- Versatile Cooling: Maximize cooling performance with a 240mm liquid cooler and 5 fans.
- Modular I/O Panel: You have the flexibility to adjust its position at the front, top, or bottom on both sides
- Edge-To-Edge Panel: Show off your meticulous build through the transparent side panel with pride.
We did not benchmark anything. No load tests, no uptime monitoring, no latency runs. This is a comparison of published terms, prices and defaults as read on 28–29 August 2026, plus the security documentation that governs all of them. Where a vendor publishes no uptime figure, we say so rather than filling the gap.
1. DigitalOcean: best for hardening you would otherwise have to build yourself
DigitalOcean publishes a security-hardened OpenClaw 1-Click App on its Marketplace, alongside a Hermes Agent app, and has written up publicly what it hardened and why. The image ships OpenClaw 2026.5.6 on Ubuntu 24.04 with Node.js 22 and Docker.
The list is the reason it takes first place. A Caddy reverse proxy with a Let’s Encrypt certificate issued against the IP address, which gets you TLS without owning a domain. A randomly generated gateway token. Device pairing. Agents running in ephemeral Docker containers, so an agent that blows itself up destroys its container rather than the host filesystem. fail2ban turning failed-request logs into firewall rules. Unattended upgrades. Default firewall rules that rate-limit OpenClaw’s ports. Execution restricted by default.
That is a direct answer to the threats DigitalOcean names — eavesdropping, unauthorised access to API keys, agents destroying the host, internet background noise, vulnerable dependencies. You can assemble all of it on hardware you own. Most people assemble about half of it once and never revisit it.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Sizing is where DigitalOcean contradicts itself. The Marketplace documentation recommends 4 GB and 2 vCPU for personal use with one to five users, and points at a Droplet from $12/month. The engineering write-up cites a $24/month minimum, because of the image’s snapshot disk and memory footprint, and notes work to support lower tiers. Budget for $24 and treat $12 as optimistic.
Watch for: no uptime figure appears on the Marketplace listing. The image pins a version that starts ageing the day you deploy it, and patching remains yours. And a vendor whose own two numbers disagree by 2× is a vendor whose pricing page you should read twice.
2. Your own hardware: best for a single operator who never opens a port
The machine you already own is a legitimate host for one user with nothing sensitive on the line, and OpenClaw’s loopback-first defaults suit it well. Running cost is electricity. You need Ubuntu 22.04 or 24.04, Docker Engine and Docker Compose v2, and KVM virtualisation — which a desktop has and shared hosting does not.
Allocate 2 GB as an absolute floor and 4 GB to be comfortable, with 10 GB or more of disk for images, data and logs. A 1 GB allocation gets OOM-killed during install with exit code 137; the image build is where it dies.
Rank #2
- Quality Materials: The high-density 5mm EPE inner lining, combined with wear-resistant 600D Oxford cloth outer layer, effectively absorbs impact and vibration during transportation, providing all-round protection for your computer tower, server, or other valuable electronic devices from bumps, squeezes, and drops
- Large Capacity: Our bag is specifically designed for computer desktop tower case. The size of the desktop carrying case is 20.67 x 9.8 x 18.9 inch. So in addition to loading your desktop computer case, you can also fit other accessories in the box, such as GPU card, radiators, etc. Carrying case sizes that are compatible with mainstream motherboard form factors such as ATX, M-ATX
- Adequate Storage Space: Besides the main compartment, the bag has multiple pockets. Three zippered pockets are on the front: the bottom one for the keyboard, the top-left with elastic straps for cables, and the right fleece elastic one for a mouse or power bank. Two side mesh pockets hold water bottles. A zippered mesh pocket inside the top cover also stores a keyboard and mouse
- Move Solutions: With this bag you won't have to worry about how you're going to get your computer case out of the house. Without this bag, you'll be scratching your head trying to get your case to your new place when you move. And how to take it on a plane on a long business trip or travel, This is a specialized computer travel case, also great move solution
- Portable: Our desktop tower bags are very easy to carry, you can choose to carry the bag by hand, the bag has a soft padded package, very comfortable to carry; usually we choose to carry the bag on both shoulders, in order to maintain the stability of the backpack, we also added a releasable plastic buckle chest strap to reduce the pressure on your shoulders
It ranks this high only under conditions. gateway.bind stays on loopback. You reach it remotely through a VPN or tunnel, never a port forward. agents.defaults.sandbox.mode is set to all, with workspaceAccess at ro or none. The bundled Bonjour plugin is set to minimal or off, because full mDNS mode broadcasts filesystem paths and SSH ports across your network. The gateway does not run as root.
Watch for: your home connection publishes no uptime figure either, and a power cut is an outage. CGNAT means remote access needs a tunnel — and a port forward is precisely how tens of thousands of gateways ended up in the February scans. A privileged agent also sits on the same network as your NAS, your consoles and your personal devices. OpenClaw’s stated threat model is one trusted operator per gateway; it is explicitly not a hostile multi-tenant boundary.
3. Hetzner Cloud: best for people who already administer their own machines
Hetzner has no OpenClaw template and no Hermes template. You install it the way you would at home: Ubuntu, Docker Compose, the same file. For a reader who already runs their own box, that is not a drawback — it is the shortest path to moving an existing setup off the home LAN.
After the April 2026 price revision, the CX22 is €4.49/month and the Arm-based CAX11 is €5.99/month. IPv4 costs an extra €0.50/month and all prices exclude VAT, so the real monthly line is about €4.99 plus tax at the bottom.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Locations cover Falkenstein and Nuremberg in Germany, Helsinki in Finland, Hillsboro and Ashburn in the US, and Singapore. That is enough spread to put the gateway near you without the round-trip penalty of a single-region provider.
This is the pick if what you want from renting is separation, not service. The agent stops being adjacent to your personal devices, gets a static address, and survives your power going out. Everything else stays your job.
Watch for: Hetzner publishes no uptime figure for its cloud plans. Every hardening step is yours — firewall rules with a tight source-IP allowlist, openclaw doctor --generate-gateway-token, permissions of 600 on ~/.openclaw/openclaw.json and 700 on the directory, and openclaw security audit before you expose anything. The headline price also hides both VAT and the IPv4 surcharge.
4. Hostinger: best for a template with headroom for browser automation
Hostinger publishes a one-click OpenClaw Docker template and a Docker manager in hPanel that surfaces container logs, plus its own OpenClaw hardening guide and tutorial series. Among the cheap end of this list, it is the only host doing both the template and the documentation.
Rank #3
- Designed for gamer, perforated metal mesh front and top panel to allow quick heat dissipation and rapid air intake for maximum ventilation. The heighten foot-stands at the bottom help to enhance airflow
- Tool-free Installation
- The perforated front-top panel has implemented one data transfer SuperSpeed USB 3.0 port along with one standard USB 2.0 port, a HD microphone and headset jacks, to grand direct access when needed
- Optimized Ventilation
- Pre-mounting holes to support motherboards up to standard ATX and CPU cooler installation, long graphic card also supported as well as Advanced Cable Management and Liquid Cooling System
KVM 1 is 1 vCPU and 4 GB at $6.49/month promotional, renewing at $11.99. KVM 2 is 2 vCPU and 8 GB at $8.99 promotional, $14.99 renewal. KVM 4 is 4 vCPU and 16 GB at $12.99, renewing at $28.99. KVM 8 is 8 vCPU and 32 GB at $25.99, renewing at $49.99. Servers run AMD EPYC with NVMe storage on a 1 Gbps network, with a public API, a free domain for a year, a built-in firewall with DDoS protection, and a 30-day money-back guarantee.
The 4 GB entry tier matters here. That is the step where browser automation and voice stop being cramped, and Hostinger reaches it at the price other hosts charge for 2 GB.
Watch for: renewal pricing roughly doubles on the larger plans — KVM 4 goes from $12.99 to $28.99 — so price year two, not month one. There is no Hermes template at the time of writing, no AI credits or model access included, and no uptime percentage published. Data centres are described by continent rather than city, so you cannot pin a precise region before buying.
5. Cloudways: best for handing patching and backups to someone else
Cloudways, part of DigitalOcean, made Managed AI Agents generally available in 2026, supporting both OpenClaw and Hermes. You get a dedicated instance per customer, Cloudways-validated agent version updates, automated daily backups, managed SSL, SSH access, region selection and 24/7 support.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Plans run Scout at $9.99/month for 1 vCPU, 2 GB, 50 GB and 2 TB of bandwidth; Operator at $19.99 for 2 vCPU, 4 GB, 80 GB and 3 TB; Squad at $39.99 for 4 vCPU, 8 GB, 160 GB and 5 TB; and Swarm at $79.99 for 8 vCPU, 16 GB, 320 GB and 6 TB. A 50% limited-time discount was running at the time of writing. Cloudways states plainly that your LLM costs stay with your provider and are never bundled into the Cloudways bill — a clearer statement than most of this market manages.
For someone who owns hardware, the honest appeal is narrow but real: validated version updates and daily backups are the two things a home rig almost never gets, and the exposure numbers were largely a story about unpatched, unattended deployments.
Watch for: the managed model means a third party holds your gateway token and, in practice, your provider API keys — the exact material that was exposed in February. No uptime percentage or SLA is published on the product page. Updates land on Cloudways’ validation schedule rather than the upstream release date, which cuts both ways: fewer broken mornings, slower security patches.
6. Contabo: best for cores and RAM per euro
Contabo has no agent template and no agent documentation. What it has is specifications. Cloud VPS 4 is 4 vCPU, 8 GB RAM and 100 GB SSD for €5.50/month on a 24-month subscription, tax included, on a 200 Mbit/s port. VPS 6 is 6 vCPU, 12 GB and 200 GB at €7.50. VPS 8 is 8 vCPU, 24 GB and 300 GB at €14.00, with larger tiers above that.
Recommended Free Tools
Rank #4
- FRAME Modular Case System - The revolutionary FRAME system gives new meaning to the word customization. Want to upgrade the motherboard tray to billet aluminum? Want to swap out your front I/O panel for more USB ports? Now you can. A case that can change and grow with your needs (or just your mood). The options are nearly limitless
- 3x CORSAIR RS ARGB PWM Fans - High-performance fans pre-installed in the front of case. Support daisy-chainable 4-pin PWM connections and Zero RPM mode for near-silent operation at low loads. Each Fan has eight LEDs and easily controllable with your motherboard’s +5V ARGB connector
- CORSAIR InfiniRail Fan Mounting System - This steel multi-point mounting system offers unmatched flexibility in front and roof fan configuration. Simply slide the rail to mount fans up to 200mm (140mm in the roof) wherever you like, ensuring targeted airflow
- Clean Lines or Turbo Cooled - The internal side panel near the motherboard tray can be used as a cable cover for clean cable management, or you can remove it and mount fans to the side for increased cooling potential
- 3D Y-Pattern Airflow Panel - Optimized for high airflow and minimal restriction, the steel front panel is perforated in three dimensions with a Y-pattern that provides a low-obstruction path for cool air
Traffic is unlimited, DDoS protection and a firewall are free, auto-backup is a paid add-on, and there are nine regions across 11 locations covering the EU, UK, US, Singapore, Japan, India and Australia. Contabo also publishes a 99.9% uptime guarantee — the only published uptime figure anywhere in this list.
For a reader used to real hardware, this is the rented box that feels closest to a spare desktop: enough cores and memory to run browser automation, voice and a stack of skills without thinking about it.
Watch for: the €5.50 price assumes a 24-month commitment, which is a long bet on a product category this young. vCPUs are shared, so four Contabo cores are not four of your desktop’s cores. There is no agent template or documentation to lean on, backups cost extra, and there is no compliance story if that matters to you.
Sizing: what to rent, or what to give the machine at home
The same ladder applies whether the RAM is yours or rented. Community setup guides land consistently on 2 GB as the practical floor and 4 GB as comfortable, and DigitalOcean’s documentation recommends 4 GB and 2 vCPU for personal use with one to five users.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitches| Workload | vCPU / RAM / disk | Rented equivalent here | At home |
|---|---|---|---|
| One user, chat channels only | 1 vCPU / 2 GB / 25–50 GB | Cloudways Scout $9.99; Hetzner CX22 €4.49 | A VM or container slice on any modern desktop |
| Browser automation or voice switched on | 2 vCPU / 4 GB / 80 GB | Hostinger KVM 1 $6.49 promo; Cloudways Operator $19.99; DigitalOcean’s recommended tier | Comfortable on a gaming PC; give it a dedicated VM |
| Small team, heavy tool use | 4 vCPU / 8 GB / 160 GB | Contabo Cloud VPS 4 €5.50; Cloudways Squad $39.99 | Viable, but a team now depends on your broadband |
| Running a local model | Separate GPU instance | Not covered by any plan above | The one job your rig is genuinely better at |
Note the last row. The gateway is a small always-on service; a local model is a different machine entirely. Keeping them separate is the correct architecture regardless of who owns the metal.
Where the money actually goes
| Line item | Monthly | Notes |
|---|---|---|
| Hosting | $5–$20 | Covers every credible option in this list |
| Model API | $50–$200 | Community estimates for an actively used assistant; billed separately, always |
| Per complex task | ~$0.30 | Commonly cited figure on budget models |
Ten complex tasks a day works out at roughly $90 a month — about nine times a $10 server. Saving $10 by running the gateway on hardware you already own is real, but it is not where cost control lives. Capped context, restricted automatic browser use and cheaper models for routine channel replies are.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to choose
Follow the constraint that actually applies to you.
- You are the only user, nothing sensitive is connected, and you will reach it over Tailscale or a VPN: use the machine you own. Keep the bind on loopback and do not port-forward.
- You want the hardened defaults without spending an evening building them: DigitalOcean, and budget the $24/month figure rather than the $12 one.
- You are comfortable with a Compose file and just want the agent off your home network: Hetzner, at roughly €4.99 plus VAT.
- You want a template and 4 GB for browser automation: Hostinger, but price the renewal.
- You know you will not be the patch team: Cloudways, accepting that they hold your token.
- You want the most cores and RAM per euro and can commit for two years: Contabo.
Whichever you pick, the same short checklist applies before anything touches a network: never expose the gateway unauthenticated on 0.0.0.0, generate a real token, set file permissions to 600 and 700, turn sandboxing on, set mDNS to minimal or off, and run openclaw security audit after every config change. The project repository and its security documentation are the authority here, not any host’s blog post.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Best Value
- Main Compartment: The main compartment is specially designed for the desktop computer tower, compatible with ATX/M-ATX mainframe chassisinterior. Dimension: 20.1"*8.66"*18.5"(51*22*47cm), exterior dimension: 20.5"*10.1"*18.7"(52.5*26*48cm). Please check your desktop computer tower size to confirm whether it is suitable before purchasing.
- Multiple Pockets: Multiple pockets design can storage many computer accessories, like the keyboard and earphones, computer radiators, hard drives. In addition, side pockets with buckles can keep your belongings from being lost.
- All-Round Protection: Internal foam padding and thickened pearl cotton cushions provide all-around protection for your computer host. And there are 4 bottom no-slip feet pads that can reduce the friction with the ground and keep the computer and accessories from damage.
- Portable Carrying Backpack: You can carry the computer tower with the adjustable ergonomic padded shoulder strap, or use the top padded handle. Also, there is a buckle chest strap that can keep shoulder straps from slipping off the sides.
- Premium Material: Made of tear-resistant and water-resistant outer material with padded lining, which can effectively keep your power station away from dust, scratches, and moisture.
FAQ
Does any of these plans include the AI model?
No. OpenClaw contains no model. It connects out to OpenAI, Anthropic, OpenRouter or another supported provider, and that API billing is separate from hosting in every case. Cloudways states it directly: your LLM costs stay with your provider and are never bundled into the Cloudways bill. Nobody in this list includes AI credits. Community estimates put an actively used assistant at $50–$200 a month, with a commonly cited figure of about $0.30 per complex task on budget models. Plan for the API bill to be several times your server bill, and size your prompt and tool discipline accordingly.
Can I run OpenClaw on shared hosting or a cheap container VPS?
No. OpenClaw needs KVM virtualisation, which rules out shared hosting and container-based VPS products entirely. Every option in this list is KVM or your own metal for that reason. On memory: 2 GB is the practical floor and 4 GB is comfortable, with 10 GB or more of disk for images, data and logs. A 1 GB server is commonly OOM-killed during install with exit code 137, because the image build is what exhausts memory. If a host advertises 1 GB at an attractive price, treat the usable configuration as one tier up.
Is my own machine genuinely less safe than a VPS?
Not inherently. OpenClaw’s defaults are safe: the gateway binds to loopback, authentication is required and fails closed, and a built-in audit command exists. The February exposure count came from operators opening gateways to the internet without auth or a firewall, and a port forward from a home router is exactly that. The two real differences are blast radius and attention. A home gateway sits on the same network as your personal devices, and nobody patches it on a schedule. A hardened rented image removes the first problem and reduces the second.
What about the specialist managed OpenClaw startups charging from about $2 a month?
A whole category of managed-OpenClaw-only sellers appeared in 2026, with prices reported from around $2/month at the cheapest end. We are not naming features or plans for them, because none of it is verifiable. The structural point stands regardless: a managed provider holds your gateway token and usually your model API keys, which is precisely the material exposed in the February scans. Most are months old, with no published SLA, no security audit and no breach history to assess. Ask where the instance runs, who can access it, what happens to your data if the company folds, and whether you can export and self-host the same day.
Which of these publish an uptime guarantee?
One. Contabo publishes a 99.9% uptime guarantee. DigitalOcean’s Marketplace listing carries no uptime figure, Cloudways publishes none on its Managed AI Agents product page, Hostinger publishes no uptime percentage, and Hetzner publishes none for its cloud plans. Your home broadband, obviously, publishes none either. This is worth stating plainly because affiliate round-ups routinely attach invented availability numbers to hosts that have never claimed them. If uptime is contractually important to you, the absence of a published figure is itself the finding.
Do I still need to harden a one-click or managed install?
Yes. A hardened image sets sensible defaults; it does not audit your configuration afterwards. Run openclaw security audit after every config change and before any network exposure — --deep probes a live gateway, --fix applies safe remediations and enables allowlists, and --json gives structured output. Keep the gateway off root, keep dmPolicy: "open" switched off unless you have deliberately opted in, and firewall to a tight source-IP allowlist rather than broad port forwarding. Note that session.dmScope: "per-channel-peer" prevents cross-user context leakage in messaging, but it is not a host-admin boundary.
Verdict
If you own capable hardware and you are the only person using the agent, keep it at home — provided the gateway stays on loopback, you reach it through a tunnel rather than a port forward, and sandboxing is on. That configuration is cheaper than everything below it and no less safe on the day you set it up.
The moment any of those conditions breaks, DigitalOcean is the pick. Its hardened image is the only option here that arrives with a direct answer to the attack chain that produced 2026’s exposure numbers, and $24 a month buys you a stack you would otherwise have to build and maintain personally.
Free tools Windows power users keep installed
One-click scans. No signup required.
Hetzner at €4.49 plus €0.50 for IPv4 is the right answer for anyone who already administers their own machines and simply wants the agent off the home LAN. Hostinger suits readers who want a template and 4 GB at $6.49 promotional — price the $11.99 renewal before committing. Cloudways earns its premium only if you genuinely will not patch. And Contabo is the value pick at 4 vCPU and 8 GB for €5.50, if a 24-month commitment and shared cores sit comfortably with you.
Going deeper than a shortlist: Your Gaming PC Is Already an AI Agent Server – Should You Use It?. Running Hermes Agent on Your Own GPU Instead of Paying an API.
Every price, plan and specification above was read from vendor material on 28 and 29 August 2026; promotional rates and renewal terms move quickly in this market, so confirm the current figures before you buy.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
