How we contain Claude across products

Anthropic has released a comprehensive overview of the containment technologies utilized in its products, including Claude.ai, Claude Code, and Claude Cowork. These technologies involve the use of sandboxes, virtual machines, and file system limits to prevent sensitive data leakage. For instance, if credentials are not entered into the sandbox, they cannot be leaked, significantly enhancing security. Claude.ai employs gVisor technology, while Claude Code relies on Seatbelt in macOS and Bubblewrap in Linux. Claude Cowork operates within a full virtual machine, ensuring greater isolation of processes.