# CrowdStrike Secures AI Agents Inside Claude Cowork

DevFeed: [CrowdStrike Secures AI Agents Inside Claude Cowork](<https://devfeed.tech/articles/crowdstrike-secures-ai-agents-inside-claude-cowork-113434.md>)

Original publisher: [Read original article](<https://www.crowdstrike.com/en-us/blog/crowdstrike-secures-ai-agents-inside-claude-cowork/>)

Author: Michael Devins

Published: 2026-11-03T09:25:14.421137Z

Content type: release

Language: en

Sources: [Crowdstrike](<https://devfeed.tech/sources/blog.md>)

Topics: [Claude](<https://devfeed.tech/topics/claude.md>), [anthropic](<https://devfeed.tech/topics/anthropic.md>), [agentic workflows](<https://devfeed.tech/topics/agentic-workflows.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [actions](<https://devfeed.tech/tags/actions.md>), [admin](<https://devfeed.tech/tags/admin.md>), [adversary](<https://devfeed.tech/tags/adversary.md>), [agent](<https://devfeed.tech/tags/agent.md>), [agentic](<https://devfeed.tech/tags/agentic.md>), [agents](<https://devfeed.tech/tags/agents.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [ai-security](<https://devfeed.tech/tags/ai-security.md>), [anthropic](<https://devfeed.tech/tags/anthropic.md>), [claude](<https://devfeed.tech/tags/claude.md>), [claude-code](<https://devfeed.tech/tags/claude-code.md>), [claude-cowork](<https://devfeed.tech/tags/claude-cowork.md>), [code](<https://devfeed.tech/tags/code.md>), [codex](<https://devfeed.tech/tags/codex.md>), [copilot](<https://devfeed.tech/tags/copilot.md>), [cowork](<https://devfeed.tech/tags/cowork.md>), [crowdstrike](<https://devfeed.tech/tags/crowdstrike.md>), [protection](<https://devfeed.tech/tags/protection.md>), [securing-ai](<https://devfeed.tech/tags/securing-ai.md>)

## AI overview

Claude Cowork's isolated VM hides the agent's processes, installed packages, and network connections from host endpoint sensors, even when mounted folders expose host data. CrowdStrike says its Falcon Linux sensor will run inside the Cowork VM to provide runtime visibility and detection for that activity and manage coverage through the Falcon platform. The integration is in beta on macOS; Windows support is expected later in November 2026. The stated scope is visibility and detection inside the VM. The excerpt also describes Falcon Guardian's broader Agent Graph, which combines endpoint network inspection and OS-level visibility, and agent-level enforcement hooks for several other coding agents.

## Source excerpt

CrowdStrike announced it is bringing Falcon Guardian protection natively into Anthropic's Claude Cowork.