Anthropic has unveiled a new beta feature that integrates endpoint detection and response (EDR) sensors into Claude Cowork’s local virtual machine, allowing businesses to monitor AI activities more effectively. This development aims to fill a security gap where traditional monitoring software fails to detect shell commands and code executed within Cowork’s isolated environment.
Enhanced Security Monitoring
The newly introduced EDR feature is available for Team and Enterprise plans on both macOS and Windows platforms. It extends its functionality to Claude Desktop when connected to major cloud services like Amazon Bedrock, Google Cloud Vertex AI, or Microsoft Foundry. However, Anthropic emphasizes that this monitoring capability is confined to the local virtual machine and does not apply to sessions hosted on their servers.
Claude Cowork employs a virtual machine to separate code execution from the user’s computer, which inherently prevents EDR sensors on the host machine from inspecting the guest environment’s activities. By installing a sensor within the VM, security teams gain visibility into operations that were previously beyond their reach.
Importance of EDR Integration
As AI tools become more autonomous, the significance of effective monitoring increases. Previous reports highlighted Claude’s ability to interact with desktop applications, raising concerns about how organizations track these automated processes. A recently identified vulnerability in Claude Cowork’s sandbox demonstrated the need for vigilant monitoring within these environments.
Each time the Cowork VM is initiated, Claude Desktop transfers the pre-configured sensor package into it. The installation process checks the package’s signature against an approved vendor key, ensuring security and integrity. Supported vendors include CrowdStrike, Evoke Security, Neo, and others, with the installed sensors reporting activity to their respective clouds.
Configuration and Testing Requirements
To leverage this feature, administrators must ensure their Claude Desktop is updated to version 4.4212.0 or later. Windows setups require specific configurations such as the MSIX build, Windows 10 or 11, and enabled hardware virtualization. Configuration on macOS uses mobile device management, whereas Windows employs registry policies.
Anthropic advises customers to thoroughly test the software before and after deploying updates to Claude or the sensors. The beta version incurs no additional cost from Anthropic, although vendors may apply their own charges. This integration provides enhanced local visibility, though it does not cover every aspect of Cowork sessions.
Organizations must also review how vendors handle data collected from prompts, files, and Claude responses, as this information is sent to the EDR provider rather than Anthropic. Proper testing and review are crucial to ensuring data security and minimizing risks.
