Dots vs PicoClaw

Dots

Actions that affect accounts or share information pass an automatic review, and custom rules can require approval or a hand-off. Dots is a beta on Pro plans from $100 a month, and no status page, terms, privacy policy or way to delete individual saved notes was found in the pages we could read.

PicoClaw

Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project.

Dots

1. Say what may be sent. Asking a dot to draft replies does not permit sending them, and an action outside a stated scope needs another decision
2. Stop three things separately. Pause stops the main task only, delegated tasks stop in Activity and recurring tasks in Scheduled, and completed actions are not undone
3. Connect each thing separately. A messaging channel grants no access to an inbox, an app or a computer
4. Sign out of websites and disconnect apps yourself when removing access. Revoking dots access or disconnecting an app does not delete information already obtained
5. Keep the connected computer online with the ChatGPT app open for local work. Only one personal computer can be connected at a time

PicoClaw

1. Set allow_from to the owner's user ID on every channel before starting the gateway. An empty list accepts messages from anyone
2. Set tools.exec.allow_remote to false unless chats must run shell commands. The shipped default is true, whatever docs/guides/configuration.md says
3. Set isolation.enabled to true on Linux (needs bwrap) or run in a container. The deny patterns do not inspect child processes
4. Use PICOCLAW_KEY_PASSPHRASE for credential encryption. One docs page names PICOCLAW_CREDENTIAL_PASSPHRASE, which the source does not read
5. Treat the README's ClawdChat line (read a remote skill file and follow it) as untrusted third-party instructions