Safeguard
Developer Tools•

What is Claude Cowork? Plans, where it runs and its limits

Cowork brings Claude Code style agent work to non-terminal tasks. Plans, cloud versus local sessions, usage cost and current limitations, from Anthropic.

Safeguard Security Team
3 min read

Claude Cowork brings the agentic approach used in Claude Code to knowledge work without a terminal. You describe an outcome and Claude plans and runs multi-step tasks such as organizing files or producing documents. It needs a paid plan: Pro, Max, Team or Enterprise.

What it does

Anthropic's help article says Claude plans the work, splits it into subtasks, runs code and shell commands, may run parallel sub-agents, and delivers outputs you can preview and download. Listed examples include batch renaming files, expense reports from receipts, research synthesis, Excel files with working formulas, slide decks and data cleaning.

Where it runs

Sessions run in the cloud, in an isolated environment on Anthropic's servers, and continue if you close your laptop. Cloud sessions are in beta on Team and Enterprise. Local file, browser and computer access goes through the Desktop app, which must stay open for those tasks.

Availability, as the page states it: Claude Desktop on macOS and Windows for all paid plans; web and mobile on Pro, Max and Team, and on Enterprise where an admin enables them. The article also says chat and Cowork are merging into one experience, so what you see in the message box depends on your rollout.

Usage cost

Multi-step tasks consume much more usage than quick questions. The page suggests grouping related work, starting new chats for unrelated work, asking for quick answers when that is enough, and watching Settings, then Usage.

Instructions and plugins

Global instructions apply to every session. Folder instructions add context for a local folder on desktop. Plugins bundle skills, connectors and sub-agents, and are saved to your account. See how scheduled tasks run for the recurring side.

Current limitations

The page lists: sessions cannot be shared (individual artifacts can), some features are desktop only, including plugins with local MCP servers, and Team and Enterprise users do not see an in-app feedback button.

Data handling

You can delete tasks at any time. They disappear from history immediately and from backend storage within 30 days, per the page. Memory is shared with Cowork only when it runs in the cloud.

Is it right for the job

Cowork suits work you would hand to an assistant: repetitive, document heavy and checkable. It is a poor fit for anything where a mistake is hard to detect, unless you review the output. Read Cowork permission modes before granting folder access.

If those tasks touch source code, Safeguard offers a free dependency scan at gold.safeguard.sh/scan.

Questions to ask before a pilot

Who will own the folders Cowork can read? Which tasks are recurring enough to schedule? Which plan do the pilot users have, and has an admin enabled web and mobile where needed? Start with one low risk task, such as turning meeting notes into a summary, and review the output by hand for a week. That gives you a real measure of usage cost and quality before you widen access.

Quick check

Can I use Cowork on the free plan?

No. The help article says Cowork requires Pro, Max, Team or Enterprise.

Does Cowork need my laptop to stay on?

Only for local file, browser or computer tasks. Cloud sessions continue without it.

Sources

Last reviewed: 19 October 2026.

Never miss an update

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.