Getting StartedSetup Wizard

Setup Wizard

On a fresh install, Fleet Command opens into the Welcome Wizard — a guided 6-step checklist that takes you from zero to a fully operational SOC. The wizard reappears on every browser refresh until all steps are complete and you click Get Started.

The 6-Step Checklist

Install ClawNex

Automatic — ticked as soon as the dashboard starts.

Add an AI model provider

Click Open Configuration. The Model Providers card auto-expands and scrolls into view. Configure at least one provider (LM Studio, OpenRouter, OpenAI, Anthropic, etc.).

Install Clawkeeper

Click Install Now to install directly from the wizard. Alternatively, click Open Updates panel for the manual path.

Sync CVE database

Click Sync Now to pull the CVE feed (108 CVEs from jgamblin/OpenClawCVEs). This enables CVE correlation with shield detections.

Configure OpenClaw routing

Click Open Configuration. The OpenClaw Routing card auto-expands. Each provider shows a routing status:

  • ROUTED — traffic flows through LiteLLM proxy for scanning
  • DIRECT — traffic bypasses ClawNex

If openclaw.json has zero LLM providers registered, you will see a blue info box — register a provider in OpenClaw first, then reload.

Run first shield test

Click Open Shield Tests to navigate to the Prompt Shield panel. Run the test suite to confirm the 155 detection rules are firing correctly.

Setup Complete

When every step is ticked green, the wizard header switches to a “You’re all set!” banner with a Get Started button. Click it to dismiss the wizard permanently. Your dismissal is persisted in config_defaults.wizard_dismissed, so Fleet Command loads straight into the fleet table on subsequent visits.

Optional Next Steps

  • Configuration > UI Preferences > Display Name — override the default hostname with a friendly label
  • Configuration > Data Retention — set retention periods for your compliance requirements
  • Stay in OBSERVE mode for 24-48 hours to review traffic before switching to BLOCK mode