Palo Alto Networks puts a Cortex XDR sensor inside Claude Cowork's VM so security teams can watch desktop agents
Cowork runs inside a small local virtual machine that keeps the host's EDR agent from seeing what the AI agent does; the new sensor tracks accessed systems, file changes and executed commands.
Why it matters
Desktop AI agents read files, move between applications and run commands, which is exactly the activity endpoint security tools are built to watch. Claude Cowork isolates that work in a local virtual machine as a safety boundary, but the same isolation hid it from corporate security software. This integration puts a sensor inside the boundary and feeds what it sees into Palo Alto's analytics. It is a vendor announcement, so watch for how widely enterprises turn it on and whether other agent sandboxes get the same treatment.
Key facts
- Cowork's work runs inside a small local virtual machine designed as a security boundary
- The isolation prevents the EDR agent from monitoring the agent's activity
- A lightweight XDR sensor runs inside the virtual machine
- It tracks accessed systems, file changes and executed commands