LibreFang vs The Landscape

Benchmarks: Measured, Not Marketed

All data from official documentation and public repositories — February 2026.

Cold Start Time (lower is better)

ZeroClaw   ██░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░   10 ms
LibreFang  ██████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░  180 ms    ★
LangGraph  █████████████████░░░░░░░░░░░░░░░░░░░░░░░░░  2.5 sec
CrewAI     ████████████████████░░░░░░░░░░░░░░░░░░░░░░  3.0 sec
AutoGen    ██████████████████████████░░░░░░░░░░░░░░░░░  4.0 sec
OpenClaw   █████████████████████████████████████████░░  5.98 sec

Idle Memory Usage (lower is better)

ZeroClaw   █░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░    5 MB
LibreFang  ████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░   40 MB    ★
LangGraph  ██████████████████░░░░░░░░░░░░░░░░░░░░░░░░░  180 MB
CrewAI     ████████████████████░░░░░░░░░░░░░░░░░░░░░░░  200 MB
AutoGen    █████████████████████████░░░░░░░░░░░░░░░░░░  250 MB
OpenClaw   ████████████████████████████████████████░░░░  394 MB

Install Size (lower is better)

ZeroClaw   █░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░  8.8 MB
LibreFang  ███░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░   32 MB    ★
CrewAI     ████████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░  100 MB
LangGraph  ████████████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░  150 MB
AutoGen    ████████████████░░░░░░░░░░░░░░░░░░░░░░░░░░░  200 MB
OpenClaw   ████████████████████████████████████████░░░░  500 MB

Security Systems (higher is better)

LibreFang  ████████████████████████████████████████████   16      ★
ZeroClaw   ███████████████░░░░░░░░░░░░░░░░░░░░░░░░░░░░    6
OpenClaw   ████████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░    3
AutoGen    █████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░    2
LangGraph  █████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░    2
CrewAI     ███░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░    1

Channel Adapters (higher is better)

LibreFang  ████████████████████████████████████████████   40      ★
ZeroClaw   ███████████████░░░░░░░░░░░░░░░░░░░░░░░░░░░░   15
OpenClaw   █████████████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░   13
CrewAI     ░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░    0
AutoGen    ░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░    0
LangGraph  ░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░    0

LLM Providers (higher is better)

ZeroClaw   ████████████████████████████████████████████   28
LibreFang  ██████████████████████████████████████████░░   27      ★
LangGraph  ██████████████████████░░░░░░░░░░░░░░░░░░░░░   15
CrewAI     ██████████████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░   10
OpenClaw   ██████████████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░   10
AutoGen    ███████████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░    8

Feature-by-Feature Comparison

Feature	LibreFang	OpenClaw	ZeroClaw	CrewAI	AutoGen	LangGraph
Language	Rust	TypeScript	Rust	Python	Python	Python
Autonomous Hands	14 built-in	None	None	None	None	None
Security Layers	16 discrete	3 basic	6 layers	1 basic	Docker	AES enc.
Agent Sandbox	WASM dual-metered	None	Allowlists	None	Docker	None
Channel Adapters	40	13	15	0	0	0
Built-in Tools	53 + MCP + A2A	50+	12	Plugins	MCP	LC tools
Memory	SQLite + vector	File-based	SQLite FTS5	4-layer	External	Checkpoints
Desktop App	Tauri 2.0	None	None	None	Studio	None
Audit Trail	Merkle hash-chain	Logs	Logs	Tracing	Logs	Checkpoints
Cold Start	<200ms	~6s	~10ms	~3s	~4s	~2.5s
Install Size	~32 MB	~500 MB	~8.8 MB	~100 MB	~200 MB	~150 MB
License	MIT	MIT	MIT	MIT	MIT	MIT

16 Security Systems — Defense in Depth

Every layer is independently testable and operates without a single point of failure.

#	System	What It Does
1	WASM Dual-Metered Sandbox	Tool code runs in WebAssembly with fuel metering + epoch interruption. A watchdog thread kills runaway code.
2	Merkle Hash-Chain Audit Trail	Every action is cryptographically linked to the previous one. Tamper with one entry and the entire chain breaks.
3	Information Flow Taint Tracking	Labels propagate through execution — secrets are tracked from source to sink.
4	Ed25519 Signed Agent Manifests	Every agent identity and capability set is cryptographically signed.
5	SSRF Protection	Blocks private IPs, cloud metadata endpoints, and DNS rebinding attacks.
6	Secret Zeroization	`Zeroizing<String>` auto-wipes API keys from memory the instant they're no longer needed.
7	OFP Mutual Authentication	HMAC-SHA256 nonce-based, constant-time verification for P2P networking.
8	Capability Gates	Role-based access control — agents declare required tools, the kernel enforces it.
9	Security Headers	CSP, X-Frame-Options, HSTS, X-Content-Type-Options on every response.
10	Health Endpoint Redaction	Public health check returns minimal info. Full diagnostics require authentication.
11	Subprocess Sandbox	`env_clear()` + selective variable passthrough. Process tree isolation with cross-platform kill.
12	Prompt Injection Scanner	Detects override attempts, data exfiltration patterns, and shell reference injection in skills.
13	Loop Guard	SHA256-based tool call loop detection with circuit breaker. Handles ping-pong patterns.
14	Session Repair	7-phase message history validation and automatic recovery from corruption.
15	Path Traversal Prevention	Canonicalization with symlink escape prevention. `../` doesn't work here.
16	GCRA Rate Limiter	Cost-aware token bucket rate limiting with per-IP tracking and stale cleanup.