Home
Tech Grid
News Room
Interviews
CISO POV
Think Stack
Articles
Artificial Intelligence

SentinelOne Expands AI Security Coverage to Claude Cowork

SentinelOne | November 4, 2026 | SentinelOne
press release image

Integration with Claude Cowork to extend runtime security to popular agentic work application

SentinelOne® (NYSE: S), the AI Security leader, today announced an integration with Anthropic’s Claude Cowork that will extend SentinelOne's AI Security coverage to one of the most critical and popular agentic work applications on the market. The integration will build on SentinelOne’s growing AI security portfolio and strategy, recently unveiled at OneCon 2026, and furthers the company’s commitment to defend the surfaces AI runs on.

As employees direct AI agents across more of their daily work, the places those agents operate become part of an expanding AI attack surface. While a lot of that AI work happens on the endpoint, in cloud workloads, and across enterprise apps, in the case of AI tools like Claude Cowork, the majority of that agentic activity happens in ways that security software on the device often cannot see. The integration between Claude Cowork and SentinelOne’s Singularity™ Platform is designed to shine a light into that potential blindspot, complementing SentinelOne’s signature endpoint detection and response (EDR) and cloud workload security (CWS) offerings and recently unveiled Singularity Agentic Detection and Response (ADR).

SentinelOne Inside the Claude Cowork VM

Claude Cowork does its work inside a virtual machine (VM) on the employee's device. The integration will place SentinelOne’s runtime security directly inside that VM. Security teams can then see what an AI agent does on the system, receive alerts on suspicious behavior, and autonomously stop attacks using the same runtime detection and response SentinelOne already runs across endpoints.

What the Integration Delivers

  • Visibility inside the Cowork VM. A SentinelOne agent will run inside the VM, so security teams can see what Cowork does there instead of working around a blind spot.
  • Behavioral detection and agentic tracing. The same Behavioral AI detection engine SentinelOne runs on endpoints will apply to activity in the VM, so analysts are alerted to anomalous behavior and agent drift.
  • Coverage across operating systems. The integration will support Claude Cowork across macOS and Windows devices.
  • Customer-controlled rollout. IT teams will enable the integration through device management, so customers decide when and where it turns on.

“Our integration strategy across the AI ecosystem is simple: secure AI work where it happens. Claude Cowork is one of the most popular AI applications on the market, used by millions of workers around the world, so it is exactly where defenders need to be,” said Melissa K. Smith, SVP, Global Strategic Partnerships and Initiatives, at SentinelOne. “With this integration, security teams can say yes to the way their people want to work with AI, with the confidence that SentinelOne is covering that work.”

About SentinelOne

SentinelOne (NYSE: S) is the leader in AI security, setting the standard for using AI and automation to give defenders a decisive operating advantage. Built for those who secure our world, its platform delivers unified coverage across endpoints, identity, cloud, and AI. Powered by Autonomous Security Intelligence, SentinelOne stops attacks at machine speed, reducing risk and delivering clarity and control to stay one step ahead. Headquartered in Mountain View, California, with teams worldwide, SentinelOne protects nearly one-fifth of the Fortune 500 and hundreds of Global 2000 enterprises. From Main Street to Wall Street, the world's most critical organizations trust SentinelOne with their security.

Enterprise Tech News