Anthropic Ships Claude Security Center, Inference Hooks GA

Anthropic's Claude enterprise security update, posted November 5, 2026, introduces an in-product Security Center that lines up a customer's Claude settings against the company's own recommended configuration and flags the gaps.

The page covers chat, Cowork, and Claude Code together. In the company's words, it lets admins "review Claude's security settings for chat, Cowork, and Claude Code on one page, instead of setting by setting." It is in beta and can be exported as an audit report; organizations on the Compliance API get the same results through that interface.

Inference hooks are now generally available. Prompt hooks ship outgoing prompts to a customer's existing security tool for inspection; pre-tool-call hooks intercept tool calls before they run. The pitch, in the post's words, is that "data loss prevention (DLP) and security policies can apply to prompts and tool calls as people work" without the team rewriting them. A separate console at admin.claude.com handles parent-organization management across Claude Enterprise and Claude Platform orgs, including single sign-on, SCIM directory sync, domain verification, and Compliance API keys.

EDR integration inside Cowork is in beta on macOS and Windows. Admins can run their organization's sensor inside the Cowork virtual machine on user devices, and Claude verifies the sensor package's signature from the EDR vendor before installing it. The behavior has a limit stated plainly: "Sensors run in detection mode: they report activity to your security team and don't block it." Claude Desktop can also be locked down on managed computers to block personal and other outside Claude accounts, aimed at shadow IT.

The release lands a day after a Claude Code bug report alleged that user emails were leaking through a User-Agent header, one of 368 Anthropic stories on our tracker over the last 90 days.