ByteDance issues internal OpenClaw security rules, launches ByteClaw

ByteDance’s security team issued internal rules for using OpenClaw-style AI tools and launched ByteClaw as an approved employee-facing option.

ByteClaw is built on Volcano Engine’s enterprise version of ArkClaw and is meant to provide controlled, company-approved AI access.

The guidance flags key risks including prompt injection, data leakage, supply-chain issues, access-control mistakes, and malicious plugins.

ByteDance is telling staff to use approved tools and avoid connecting these AI tools directly to core production systems.