CrowdStrike Brings Endpoint Protection Inside Claude Cowork's Virtual Machine

When Claude Cowork runs code on a user's computer, it does so inside an isolated virtual machine (VM). To the host computer, that VM appears as one opaque process. Security tools on the host cannot see the processes the agent starts, the packages it installs or the network connections it makes. Because host folders can be mounted into the VM, sensitive data may also sit within the agent's reach.

At Fal.Con Europe 2026, CrowdStrike announced it is bringing its Falcon Guardian protection natively into Claude Cowork. It was built with Anthropic in response to enterprise customer demand. The Falcon sensor runs directly inside the Cowork VM on both macOS and Windows, extending protection across the agent lifecycle, from creation through job execution. The integration is in beta on macOS now, with Windows support expected later in November.

CrowdStrike gives an example. An agent asked to format slides installs a popular Python package that an attacker has compromised at its source. The package then reads data from a mounted folder and sends it to a known malicious endpoint. The sensor inside the VM would detect this activity. Because the VM runs the same Linux environment on both operating systems, CrowdStrike says coverage is consistent, and teams can use the same Falcon telemetry they rely on elsewhere.