SentinelOne® (NYSE: S), the AI Security leader, today announced an integration with Anthropic’s Claude Cowork that will extend SentinelOne’s AI Security coverage to one of the most critical and popular agentic work applications on the market. The integration will build on SentinelOne’s growing AI security portfolio and strategy, recently unveiled at OneCon 2026, and furthers the company’s commitment to defend the surfaces AI runs on.

As employees direct AI agents across more of their daily work, the places those agents operate become part of an expanding AI attack surface. While a lot of that AI work happens on the endpoint, in cloud workloads, and across enterprise apps, in the case of AI tools like Claude Cowork, the majority of that agentic activity happens in ways that security software on the device often cannot see. The integration between Claude Cowork and SentinelOne’s Singularity™ Platform is designed to shine a light into that potential blindspot, complementing SentinelOne’s signature endpoint detection and response (EDR) and cloud workload security (CWS) offerings and recently unveiled Singularity Agentic Detection and Response (ADR).

SentinelOne Inside the Claude Cowork VM

Claude Cowork does its work inside a virtual machine (VM) on the employee’s device. The integration will place SentinelOne’s runtime security directly inside that VM. Security teams can then see what an AI agent does on the system, receive alerts on suspicious behavior, and autonomously stop attacks using the same runtime detection and response SentinelOne already runs across endpoints.

What the Integration Delivers

  • Visibility inside the Cowork VM. A SentinelOne agent will run inside the VM, so security teams can see what Cowork does there instead of working around a blind spot.

  • Behavioral detection and agentic tracing. The same Behavioral AI detection engine SentinelOne runs on endpoints will apply to activity in the VM, so analysts are alerted to anomalous behavior and agent drift.

  • Coverage across operating systems. The integration will support Claude Cowork across macOS and Windows devices.

  • Customer-controlled rollout. IT teams will enable the integration through device management, so customers decide when and where it turns on.

“Our integration strategy across the AI ecosystem is simple: secure AI work where it happens. Claude Cowork is one of the most popular AI applications on the market, used by millions of workers around the world, so it is exactly where defenders need to be,” said Melissa K. Smith, SVP, Global Strategic Partnerships and Initiatives, at SentinelOne. “With this integration, security teams can say yes to the way their people want to work with AI, with the confidence that SentinelOne is covering that work.”

About SentinelOne

SentinelOne (NYSE: S) is the leader in AI security, setting the standard for using AI and automation to give defenders a decisive operating advantage. Built for those who secure our world, its platform delivers unified coverage across endpoints, identity, cloud, and AI. Powered by Autonomous Security Intelligence, SentinelOne stops attacks at machine speed, reducing risk and delivering clarity and control to stay one step ahead. Headquartered in Mountain View, California, with teams worldwide, SentinelOne protects nearly one-fifth of the Fortune 500 and hundreds of Global 2000 enterprises. From Main Street to Wall Street, the world’s most critical organizations trust SentinelOne with their security.

Third-Party Disclaimer

All third-party product names, logos, and brands mentioned in this publication are the property of their respective owners and are for identification purposes only. Use of these names, logos, and brands does not imply affiliation, endorsement, sponsorship, or association with the third party.

Forward-Looking Statements

This press release includes forward-looking statements. Forward-looking statements are subject to risks and uncertainties, including factors beyond our control, that could cause actual performance or results to differ materially from those expressed in or suggested by the forward-looking statements. These and other risk factors are described in the “Risk Factors” section of our most recent Annual Report on Form 10-K, subsequently quarterly reports filed on Form 10-Q, and other filings made with the U.S. Securities and Exchange Commission (SEC), which are available free of charge on our website at http://investors.SentinelOne.com and on the SEC’s website at <www.sec.gov>.

You are cautioned not to place undue reliance on these forward-looking statements. Any future products, functionality and services may be abandoned or delayed, and as such, you should make decisions to purchase products and services based on features that are currently available.

Any forward-looking statements made in this document are based on our beliefs and assumptions that we believe to be reasonable as of the date hereof. You should not rely upon forward-looking statements as predictions of future events. Except to the extent required by law, we undertake no obligation to update these forward-looking statements to reflect new information or future events.

Category: Investors

Media gallery

About The Author
Business Wire