PlugMate and PlugClaw run PlugOS separately, but use the host’s network

PlugMate and PlugClaw run PlugOS on separate hardware, but both rely on their host device for network access. PlugClaw adds an Ubuntu virtual machine running OpenClaw, an AI agent that can interact with apps. In its review of the two devices, CNX Software found the firewall turned off by default on its tested unit—a practical detail for anyone considering the products for app separation or privacy.

One separate PlugOS computer, two software configurations

Each device is a USB-C mini-computer built around TrustKernel’s PlugOS. The manufacturer lists PlugMate as model PS01, with a MediaTek Helio G80 processor, 4 GB of RAM, 128 GB of storage and an operating system based on Android 14. Its listed dimensions are 50 × 19 × 8 mm and its stated weight is 14.3 g. TrustKernel’s PlugMate listing also specifies an aluminum-and-PC construction, a USB Type-C interface rated at 480 Mbps and maximum USB DC input of 5 V/1 A. The listing includes FCC, CE, RoHS and MFi marks, and lists a Type-C data cable in the PlugMate package.

CNX Software reviewed a PlugMate with 4 GB of RAM and 128 GB of storage, and a PlugClaw with 6 GB and 128 GB. Its account describes PlugClaw as adding an Ubuntu virtual machine that runs OpenClaw. The distinction is software, not a different kind of host connection: either stick still depends on the connected device for power, display, input and networking.

What the separation does—and does not—cover

PlugOS provides controls for per-app network access and virtualized device identifiers and peripherals. But virtualizing a GPS location does not change the host network’s public IP address: CNX Software reports that traffic still exits through the host’s network. A simulated SIM identifier also does not provide mobile service. The products have no modem or SIM slot, so they cannot make calls or receive texts through that feature.

The firewall finding deserves attention, but it applies to CNX Software’s tested unit: its firewall was off by default. PlugOS has per-app network controls, so check those settings rather than assuming they are already enabled. The review also describes duress and failed-attempt reset functions among the software’s controls.

The host remains part of the setup, too. It supplies the network connection and handles display and input, so the separate PlugOS environment does not remove the host from the chain. If your main goal is to keep apps apart on a phone you already use, a software-based private space is another approach; CNX Software contrasts those host-based spaces with the products’ separate hardware.

Compatibility and everyday limits in the reported tests

CNX Software measured 306 single-core and 782 multi-core in Geekbench 7 on its PlugMate sample. The reviewer also reported smooth 1080p YouTube playback and everyday performance comparable to a phone. Those are observations from that sample, not a cross-device benchmark. On compatibility, CNX reported successful tests with Android and Fedora, while its 2017 Intel Mac could not install the client. Its review also described the Linux client as beta and Windows on Arm as unsupported at the time of testing.

The same review found that unplugging without first shutting down in PlugOS could corrupt the eMMC file system. Shut the device down from PlugOS before disconnecting it. CNX’s tested unit also displayed an August 5, 2025 security patch when the review was published on October 12, 2026; that date refers to the patch shown on that unit.

J.Force Gaming, which published a separate hands-on review, described PlugMate as getting warm during use. That is the creator’s qualitative observation, not a temperature measurement. The video shows PlugMate setup and PlugOS controls, including firewall and virtual-peripheral settings.

Which one fits: PlugMate or PlugClaw?

Choose based on the software you want to run. PlugMate provides the separate PlugOS environment; PlugClaw adds the Ubuntu VM and OpenClaw agent described in CNX Software’s review. In the reviewer’s demonstration, OpenClaw operated the built-in calculator, though slowly. A task involving downloading an app stalled at a Cloudflare challenge. The review also reports that using the agent required a one-time code sent to a phone number or email.

That makes PlugClaw’s added layer a specific reason to consider it, not a guarantee that an agent can complete every app task. For either product, the host network remains in the picture, and the firewall setting on CNX Software’s tested unit was off by default.