Anthropic flips a switch on every Claude Enterprise account on Nov. 16, 2026. Chat and Cowork merge into one agent that day1. It reads files, writes code and finishes projects on its own.
Admins can opt out before then. After that date, the agent runs unless someone turns it off2.
The company calls this the unified Claude experience. One box now takes a quick question or a messy project1. Claude decides which job this is, then runs the bigger task inside a virtual machine Anthropic manages. That machine disappears after 30 days idle2.
What Cowork Actually Does
Here's the job Cowork does. You type a request into Claude, on your laptop, your phone or the web1. If the answer needs code, a spreadsheet or a folder of files, Claude keeps working after you close the laptop2. It returns a finished document, a working chart or a fixed bug, already done.
Daniel Padilla, LabX's chief technology officer, watched his company drop two separate tools for one1. "Before chat and Cowork capabilities were unified, they were separate experiences that had to be used and managed independently," he said. "Bringing them together has made everything simpler, both for our users and administrators."
What It Costs, Checked This Week
A Claude Enterprise seat costs $20 a month, billed once a year, with a 20-seat floor3. That seat buys access. Every task Cowork runs on top gets billed separately, at the same rate Anthropic charges its API customers.
Microsoft Charges $10 More Than Anthropic for the Base Seat
Flat monthly seat price before usage, Claude Enterprise versus Microsoft 365 Copilot, checked Oct. 25, 2026
Each column is the flat seat price a company lists on its own pricing page; Microsoft's column stands taller because its $30 seat costs more than Anthropic's $20 one.
Both prices cover the seat alone. Agent work on either product is billed separately, by API rate on Claude or by metered credit on Microsoft's side.
Sources: Claude by Anthropic [3]; Microsoft [8]. Chart by Ryan Elliott Dennis.
The numbers behind this chart
| Item | Value |
|---|---|
| Claude Enterprise | $20 |
| M365 Copilot | $30 |
Microsoft prices its own agent differently. A Microsoft 365 Copilot license costs $30 a seat each month, on top of the Microsoft 365 plan a company already pays for78. Satya Nadella runs that company. His Copilot Cowork chases the same job: a quick answer or a long task, handled on its own, start to finish.
Both companies then meter the heavier work on top of that seat, charging by the model and the task37. Either sticker price alone hides what a busy month actually costs.
Who Says the Switch Was Worth It
Paul Simpson runs finance and technology for LifeMoves, a nonprofit fighting homelessness in Silicon Valley. His team used to decide which tool fit which step. That choice disappeared this year1.
"We no longer have to choose between chat and Cowork," Simpson said. "With under ten minutes of prompting, Claude worked through stacks of county, state and federal budgets and public meeting documents, mapped how the funding streams connect, and produced a comprehensive report that would have taken our team weeks"1.
That report, Simpson said, will shape LifeMoves' next budget fight. A task that used to eat weeks of staff time now takes minutes1. That account comes from the person who approved spending on it.
The Risk Still Unpatched
Simon Willison tested an early build of Cowork before most companies touched it. He coined the term prompt injection back in 2022, and he liked what he saw. Still, he warned who gets blamed when it fails. "I do not think it is fair to tell regular non-programmer users to watch out for 'suspicious actions that may indicate prompt injection'!" he wrote4.
Two days after Cowork's first launch, researchers at PromptArmor showed why that warning mattered5. They hid an attack inside a Word document, in text colored to match the page. Claude treated the hidden text as an instruction, apart from the victim's own request.
PromptArmor's test pushed Claude to upload the victim's files, Social Security numbers included, straight to the attacker's own Anthropic account5. "At no point in this process is human approval required," its researchers wrote.
Anthropic kept building anyway. Chat and Cowork first merged for Pro and Max plans on Sept. 16, 2026. That was the step before Enterprise got the same change, as Claude's own account posted below.
Claude@claudeaiClaude Cowork and chat are merging into one Claude.
Ask a quick question or hand over a report, and Claude takes it from there, even after you close your laptop. If something's unclear, Claude asks—you keep the final say.
Rolling out to Pro and Max over the next few weeks. pic.twitter.com/87HC2lUjxG
Anthropic has since measured the risk itself, in a report it published Feb. 5, 20266. Inside a locked-down coding sandbox, the kind Cowork's cloud sessions now use, its Opus 4.6 model blocked all 200 scripted break-in attempts.
Move the same attack to a looser, screen-reading setup. The breach rate then climbed to 78.6 percent by the 200th try. It fell to 57.1 percent once Anthropic's safeguards switched on6.
Cowork Takes 10 Months to Go From Test to Default
Key dates in Claude Cowork's rollout, from its January research preview to its Nov. 16 default switch
Each pin marks one dated event; the exploit PromptArmor found sits two days after Cowork's first launch, and the default-on date lands ten months after that.
The Nov. 16 default date is Anthropic's own announced plan, marked here as an estimate since an admin can still change it before that day.
Sources: Claude by Anthropic [1]; Claude Help Center [2]; simonwillison.net [4]; PromptArmor [5]; VentureBeat [6]; Microsoft [7]. Chart by Ryan Elliott Dennis.
The numbers behind this chart
| Date | Event |
|---|---|
| Jan. 12, 2026 | Cowork preview launches. Research preview ships to individual Claude users |
| Jan. 14, 2026 | Cowork exploit found. PromptArmor's hidden prompt injection ships files to an attacker's account |
| Feb. 5, 2026 | Sandbox blocks 200 tries. Anthropic posts break-in rates for its locked-down coding sandbox |
| June 16, 2026 | Copilot Cowork hits GA. Microsoft's rival agent reaches every Copilot tenant |
| Sept. 16, 2026 | Pro, Max unify in Claude. Chat and Cowork merge into one Claude for Pro and Max plans |
| Oct. 23, 2026 | Enterprise reaches GA. The unified agent reaches Claude Enterprise seats |
| Nov. 16, 2026 | Default flips to on. Anthropic's plan, estimated here, unless an admin opts out first |
Read together, the numbers cut both ways. Its locked box, the one that matters for Cowork's new cloud sessions, tested clean. The looser setup, closer to a browser clicking through a stranger's email, still broke under repeated pressure6.
What to Do
Check your Claude Enterprise admin settings this week, ahead of next month's deadline. Look at network egress first. Anthropic turns it off by default, and leaving it off closes the hole PromptArmor found. Set a trial group before turning the switch on for everyone, the way the support page itself recommends.
If you run Microsoft 365 instead, compare the same two numbers: the flat seat price, and the metered bill for actual agent work. A seat price by itself hides what a heavy month costs.
By the Numbers
- $20: Monthly cost of one Claude Enterprise seat, billed annually, with a 20-seat minimum3.
- $30: Microsoft's own monthly add-on cost for one Copilot seat, on top of a base Microsoft 365 license8.
- 200: Scripted break-in attempts Anthropic's locked-down coding sandbox blocked, every single one6.
- 78.6 percent: Share of break-in attempts that got through Anthropic's looser, screen-reading setup by the 200th try, before its safeguards switched on6.
- Two days: How long Cowork's research preview ran before PromptArmor found its file-exfiltration hole45.
- Nov. 16, 2026: Date Anthropic's unified agent switches on by default for every Claude Enterprise seat left untouched2.
- 30 days: How long Cowork's cloud sandbox keeps a session's files before Anthropic deletes them2.
What to Watch
Watch what happens on Nov. 17, the day after the default flips. A fresh PromptArmor-style test aimed at the production sandbox, apart from the earlier research preview, would settle whether the fix holds under real pressure.
Keep an eye, too, on how many of Anthropic's own enterprise customers choose the early switch over the wait. A rush to turn it on ahead of schedule would say more about trust than any press release can.
Sources
- Anthropic, "Claude Cowork and chat come together for Enterprise," Claude by Anthropic, Oct. 23, 2026, https://claude.com/resources/articles/unified-claude-enterprise
- Anthropic, "Set up and manage the new unified Claude experience for your Enterprise organization," Claude Help Center, Oct. 24, 2026, https://support.claude.com/en/articles/17444462-set-up-and-manage-the-new-unified-claude-experience-for-your-enterprise-organization
- Anthropic, "Plans & pricing," Claude by Anthropic, checked Oct. 25, 2026, https://claude.com/pricing
- Simon Willison, "First impressions of Claude Cowork, Anthropic's general agent," simonwillison.net, Jan. 12, 2026, https://simonwillison.net/2026/Jan/12/claude-cowork/
- PromptArmor, "Claude Cowork Exfiltrates Files," PromptArmor, Jan. 14, 2026, https://www.promptarmor.com/resources/claude-cowork-exfiltrates-files
- Louis Columbus, "Anthropic published the prompt injection failure rates that enterprise security teams have been asking every vendor for," VentureBeat, Feb. 10, 2026, https://venturebeat.com/security/prompt-injection-measurable-security-metric-one-ai-developer-publishes-numbers
- Microsoft, "Copilot Cowork is now generally available," Microsoft, June 16, 2026, https://www.microsoft.com/en-us/copilot/blog/2026/06/16/copilot-cowork-is-now-generally-available/
- Microsoft, "Microsoft Copilot Plans and Pricing: Enterprise," Microsoft, checked Oct. 25, 2026, https://www.microsoft.com/en-us/copilot/pricing/enterprise
- BigGo Editorial Team, "Anthropic Integrates Agent Capabilities into Enterprise Claude, Offering Four Controls to Prevent Billing Bloat," BigGo Finance, Oct. 24, 2026, https://finance.biggo.com/news/7c9e703d-f1c3-44c1-b18d-62e2604c1884