CrowdStrike puts its protection sensor in Claude Cowork
The sensor sees what an AI agent installs and sends out. Tools on the host computer could not see this.
At the Fal.Con Europe 2026 conference, CrowdStrike tells that its Falcon Guardian protection is in Claude Cowork of Anthropic. Cowork operates agent code in a virtual machine, a sealed computer in the computer. Host tools see it as one task. The beta test is on macOS. CrowdStrike tells that Windows follows in November.
How it works
The Falcon sensor operates in the virtual machine. It sees the tasks, the software packages and the network links of the agent. Admins turn it on with their device tools. They control it in the Falcon platform.
The numbers
CrowdStrike gave no test results, no customer numbers and no price. It gives one example. An agent installs a Python package that an attacker changed. The package reads data in a connected folder and sends it out. CrowdStrike tells that the sensor can find this.
What is not known
The work is only to see and find attacks. The source does not tell if the sensor can stop an agent. Windows is not in the release at this time.
Insight: Security vendors compete to be in each agent area
CrowdStrike added a kill switch at model gateways and hooks in agents such as Claude Code and Cursor. It is also in the machine where Cowork operates. This looks like a race to be in each area where an agent works, and the vendor in all areas can become the default control. Leaders must select agent protection by area.
Sources
Posted
