Signals · Rising · first seen November 2, 2026
Claude Cowork can now run a company's security sensor inside its private workspace
Anthropic published steps on Nov. 2 for running an endpoint detection and response (EDR) sensor inside the virtual machine where Claude Cowork runs commands on a user's computer, a beta for Team and Enterprise plans on Mac and Windows. Until now, the security software on that computer could not see inside it. Only approved vendors' sensors install, Cowork sessions in Anthropic's cloud are not covered, and the activity goes to the security vendor, not Anthropic.
Why it matters to a business like yours
If staff let Cowork sort files or draft customer letters on work laptops, your security software has been blind to what it did there. Ask your IT partner whether your security vendor is on the approved list and, if it is, to switch it on before more people start using Cowork.
Sources
- Run your endpoint detection and response (EDR) sensor in Claude Cowork on Claude Desktop (Claude Help Center, November 2, 2026)
- Anthropic Enables EDR Monitoring in Claude Cowork to Detect Hidden AI Agent Activity (Cyber Security News, November 2, 2026)
History
- November 3, 2026: Rising