--- title: "CrowdStrike, SentinelOne and Evoke Security claimed the same seat inside Anthropic's Claude Cowork in 24 hours" description: "Anthropic's agent workspace created a security blind spot no endpoint tool can watch; SentinelOne, Evoke Security and CrowdStrike each claimed the seat inside it within about a day, and none disclosed what the seat pays. CrowdStrike shareholders are paying a category premium of 168 times forward earnings for it." publisher: "The Inference" section: "Security" published: 2026-11-04T17:15:22.565Z modified: 2026-11-04T17:15:22.565Z canonical: https://theinference.org/article/crowdstrike-sentinelone-and-evoke-security-claimed-the-same-seat-inside-anthropic-s-claude-cowork-in-24-hours language: en keywords: "Cybersecurity, Anthropic, CrowdStrike, SentinelOne, AI Agents" --- # CrowdStrike, SentinelOne and Evoke Security claimed the same seat inside Anthropic's Claude Cowork in 24 hours > Anthropic's agent workspace created a security blind spot no endpoint tool can watch; SentinelOne, Evoke Security and CrowdStrike each claimed the seat inside it within about a day, and none disclosed what the seat pays. CrowdStrike shareholders are paying a category premium of 168 times forward earnings for it. [Anthropic](https://theinference.org/markets/companies/anthropic)'s Claude Cowork lets employees hand real work, files and credentials to agents that run inside a virtual machine on their own device, a space conventional endpoint tools cannot watch [1]. Within about 24 hours, three security vendors claimed the seat inside that machine [1]. Startup Evoke Security [announced an integration it says is planned for a future release](https://www.streetinsider.com/PRNewswire/Evoke+Security+Announces+Upcoming+Integration+with+Claude+Cowork+to+Extend+AI+Agent+Detection+and+Response/27272384.html) on November 2 [3]; [SentinelOne](https://theinference.org/markets/companies/sentinelone) said the same afternoon it would place its own agent inside the VM itself [1]. On November 3 [CrowdStrike](https://theinference.org/markets/companies/crowdstrike) answered at its Fal.Con Europe conference, bringing Falcon Guardian AI detection and response natively into Cowork, built with Anthropic and backed by a Mondelēz International CISO quote [2]. ## The blind spot is real, and priced The prize is real. Cowork's users run business processes, not code, across more than 600,000 organizations by Anthropic's own May sampling, and business process and operations accounted for 33.4% of sessions [6]. In July, the security firm Armadin [published an attack chain that reached root access](https://venturebeat.com/technology/anthropic-brings-claude-cowork-to-mobile-and-web-as-usage-data-shows-most-users-arent-coding) inside Cowork's Windows virtual machine, and its broader finding was that local virtual machines create visibility gaps endpoint products struggle to monitor [6]. Anthropic called that one a non-issue because it required prior local access [6]. That visibility gap is the concern all three integrations are selling against, which is why the same seat drew three claims in a day. ## Two stocks, one seat, two valuations CrowdStrike carries the story's price tag. Its [shares rose 114% in 2026 through October 30](https://finance.yahoo.com/markets/stocks/articles/crowdstrike-ripped-114-2026-mythos-081108253.html), near $250, and it traded around 168 times forward earnings on October 22 against a five-year average of 114 [5]. The agent-security line justifies part of that premium: [AI detection and response ARR](https://theinference.org/article/crowdstrike-says-four-hacking-groups-now-run-ai-agents-on-their-own-its-aidr-line-grew-79-fold) nearly tripled between the April and July quarters [5]. Now the same seat CrowdStrike sells is contested on the same machine by SentinelOne, whose stock trades near $23.16 with an overall SELL rating on StreetInsider's tape [1]. The record does not show that SentinelOne investors have priced in a Cowork seat: [the announcement carries no financial terms](https://www.streetinsider.com/Corporate+News/SentinelOne+to+add+runtime+security+inside+Anthropics+Claude+Cowork+VM/27272832.html), and the tape offers only the price and the rating. The gap is the market's answer so far, [168 times earnings](https://theinference.org/article/crowdstrike-at-189-times-forward-earnings-as-openai-and-anthropic-come-for-the-150-billion-security-budget) against a stock at $23 with a SELL next to it [1]. *Chart: **CrowdStrike books about five times SentinelOne's revenue every quarter** Column chart of quarterly revenue for CrowdStrike and SentinelOne across the eight calendar quarters from Q3 2024 to Q2 2026: CrowdStrike climbs from $1,010M to $1,471M while SentinelOne climbs from $211M to $292M.* *Quarterly revenue, $ millions, calendar quarters; CrowdStrike's figures converted from the $ billions it reports. Sources: CrowdStrike and SentinelOne quarterly figures from SEC filings, retrieved November 4, 2026 [8][9]. [8][9]* *Chart: **CrowdStrike's net new ARR: $256M, a record $333M, then guided $343M to $347M** Bars of CrowdStrike net new annual recurring revenue by quarter: $256M in the April quarter, a record $333M in the July quarter, and October-quarter guidance stated as $343M to $347M shown as two guide bars.* *CrowdStrike net new annual recurring revenue by quarter, $ millions. April and July quarters are reported; the two October-quarter bars are management guidance of $343M to $347M as stated, marked estimate. Sources: Yahoo Finance, November 3, 2026 [5]. [5]* ## Announced seats are not revenue The receipts stop where the releases stop: none of the three discloses commercial terms, and [CrowdStrike's own statement flags that some referenced features are unreleased](https://finance.yahoo.com/technology/ai/articles/crowdstrike-extends-anthropic-claude-cowork-091500640.html) and subject to change [2]. Timing sharpens the check. CrowdStrike guided October-quarter net new ARR to $343 million to $347 million, 29% to 31% growth, a slowdown from July's 51% [5], and it [reports that quarter after the close on December 1](https://finance.yahoo.com/markets/stocks/articles/crowdstrike-announces-date-fiscal-third-130000666.html) [7]. That print lands before any Cowork seat can generate disclosed revenue, so it tests whether the agent-security premium holds on the existing engine, not the new one. The second tell: which vendor's Cowork agent ships to general availability first. ## Takeaway Three vendors claimed the same seat inside Claude Cowork within a day, but none disclosed commercial terms; CrowdStrike's December 1 print tests whether its 168-times premium holds before any Cowork revenue exists. ## Sources 1. [StreetInsider, SentinelOne to add runtime security inside Anthropic's Claude Cowork VM, 2 November 2026](https://www.streetinsider.com/Corporate+News/SentinelOne+to+add+runtime+security+inside+Anthropics+Claude+Cowork+VM/27272832.html) 2. [Business Wire via Yahoo Finance, CrowdStrike Extends Anthropic's Claude Cowork Enterprise AI Adoption with Falcon Guardian Protection, 3 November 2026](https://finance.yahoo.com/technology/ai/articles/crowdstrike-extends-anthropic-claude-cowork-091500640.html) 3. [PRNewswire via StreetInsider, Evoke Security Announces Upcoming Integration with Claude Cowork, 2 November 2026](https://www.streetinsider.com/PRNewswire/Evoke+Security+Announces+Upcoming+Integration+with+Claude+Cowork+to+Extend+AI+Agent+Detection+and+Response/27272384.html) 5. [Yahoo Finance (TFG), CrowdStrike Has Ripped 114% in 2026 on the Mythos Moment, 3 November 2026](https://finance.yahoo.com/markets/stocks/articles/crowdstrike-ripped-114-2026-mythos-081108253.html) 6. [VentureBeat, Anthropic brings Claude Cowork to mobile and web as usage data shows most users aren't coding, 7 July 2026](https://venturebeat.com/technology/anthropic-brings-claude-cowork-to-mobile-and-web-as-usage-data-shows-most-users-arent-coding) 7. [Business Wire via Yahoo Finance, CrowdStrike Announces Date of Fiscal Third Quarter 2027 Financial Results Conference Call, 4 November 2026](https://finance.yahoo.com/markets/stocks/articles/crowdstrike-announces-date-fiscal-third-130000666.html) 8. [SentinelOne, quarterly figures from its SEC filings, retrieved 4 November 2026](https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001583708) 9. [CrowdStrike, quarterly figures from its SEC filings, retrieved 4 November 2026](https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001535527) --- CrowdStrike, SentinelOne and Evoke Security claimed the same seat inside Anthropic's Claude Cowork in 24 hours — The Inference. Canonical: https://theinference.org/article/crowdstrike-sentinelone-and-evoke-security-claimed-the-same-seat-inside-anthropic-s-claude-cowork-in-24-hours