--- title: "Enterprise Security Center for Your Firm | By The People Tech" description: "Anthropic added a security center, inference hooks, centralized management and new access controls to Claude Enterprise in October 2026, several in beta." url: https://bythepeople.tech/claude/whats-new/claude-enterprise-security-center-admin-controls --- [Claude for Business](/claude) [What’s New](/claude/whats-new) Claude Enterprise security center and admin controls New feature Released 5 November 2026 · 5 min read # Your security team can now _see_ how Claude is set up. Anthropic has added a security center, inference hooks, centralized management and new access controls to Claude Enterprise, several of them in beta. The security center shows on one page how your organization's Claude settings compare with Anthropic's recommended configuration, with a link to the place where each setting can be changed. At a glance Plan Claude Enterprise Announced October 2026 Security center Settings vs. recommended Inference hooks Generally available Member sign-out API Beta On this page * [What changed](#changed) * [What it means](#means) * [What to do this week](#steps) * [Questions](#questions) Published by [Fatjon (Tony) Kalemaj](/about-us/fatjon-tony-kalemaj) COO & Head of Applied AI 01 · What changed ## What Anthropic shipped. What changed: reviewing Claude's security settings used to mean going setting by setting across chat, Cowork and Claude Code. Claude Enterprise now has one page for that review, hooks that send prompts and tool calls to the data security tools a company already runs, one admin console at admin.claude.com for company-wide identity settings, and an Admin API call that signs a member out everywhere. In practice, Anthropic says your team keeps the policies it has already written and applies them to Claude. A prompt from a supported Claude product that pastes in a borrower's credit agreement can then go to your data security tool for a check under those same policies. ### 1. Security center 1\. A new page in Organization settings compares your chat, Cowork and Claude Code settings with Anthropic's recommended configuration. Each control shows the current value, the recommended value where there is one, and a link to change it. ### 2. Attestations and reports 2\. Admins can record the state of each control, accept risks and flag issues in one shared workspace. The page downloads as a report that marks which controls were checked automatically and which an Owner confirmed. ### 3. Inference hooks 3\. Prompt hooks send prompts to your security tool for a check, and pre-tool-call hooks check tool calls before they run. Both are generally available and work with security vendors. ### 4. Centralized management 4\. A parent organization gets its own console at admin.claude.com for single sign-on, SCIM, domain verification, groups and Compliance API keys. Companies can connect more than one identity provider, each with its own SSO and SCIM. ### 5. Member sign-out 5\. One Admin API call ends a member's sign-in sessions on every browser and device without removing them from the organization. It is in beta and does not end API keys, running cloud sessions or scheduled routines. ### 6. Self-managed IP allowlist 6\. Enterprise admins can set up and manage their IP allowlist without going through Anthropic. In the Claude Console, the allowlist is in beta and takes up to 1,000 IPv4 or IPv6 addresses or CIDR ranges per organization. ### 7. Claude Desktop controls 7\. Admins can set the most-used Claude Desktop settings with no device management push, and block personal and other outside Claude accounts on managed computers. Owners can limit which workspace folders people use with Claude. ### 8. EDR in Cowork 8\. Admins can run their organization's EDR sensor inside the Cowork virtual machine on the user's computer. The sensor reports to the console your security team already monitors. 02 · What it means ## What it means for _your_ seat. For most firms the first gain is evidence: a single page, and a downloadable report, that shows how Claude is configured against Anthropic's recommendations. The second is reach, because existing DLP policies and EDR sensors can now see what happens inside Claude. Anthropic is clear that the security center is guidance based on its recommendations, not a certification or a guarantee of compliance with any law or standard. ### Leadership Your security team can now show you a one-page answer to whether Claude is set up the way it should be. Anthropic says the report is guidance, not a certification, so your own compliance sign-off still applies. Ask for the downloaded report as part of your next technology review. ### Risk and compliance Attestations let admins work through a security review once, recording each control, accepting risks and flagging issues in one place. The report marks which controls were checked automatically and which an Owner confirmed, a useful distinction to show an auditor. Compliance API keys created at the parent level can read data across organizations, so decide who may hold them. ### IT and engineering Prompt hooks and pre-tool-call hooks route Claude activity to your existing data security tools, so the DLP policies you already have can apply to prompts and tool calls, for example a prompt that pastes in a file from a data room. Your EDR sensor can run inside the Cowork virtual machine and report to your usual console. For API work, the Console IP allowlist (beta) refuses requests from addresses not on your list, which limits where a leaked API key can be used. ### Enterprise admins Company-wide settings such as SSO, SCIM, domain verification, groups and Compliance API keys move to one console at admin.claude.com, with parent owner and parent admin roles. Each organization keeps its own members, roles, IP allowlisting, tenant restrictions and session duration. The sign-out call is POST /v1/organizations/users/{user\_id}/sign\_out and needs the admin-user-sign-out-2026-10-08 beta header. 03 · This week ## What to do this week. 0 of 3 done 1. 01 · Open the security center : Have an Owner open the new page in Organization settings and list each control where your value differs from the recommended one. Download the report and file it with your current security review. 2. 02 · Ask your DLP vendor about hooks : Check whether your data security vendor supports Claude's prompt and pre-tool-call hooks. If it does, plan which existing policies to apply first. 3. 03 · Decide on personal accounts : Agree whether to block personal and other outside Claude accounts in Claude Desktop on managed computers. Write down who can call the sign-out API and when, for example after a lost laptop. Sources Facts and dates are Anthropic’s own. What it means and what to do are our view, from the firms we work with. Drafted with Claude from these sources, checked against them figure by figure, and published 5 November 2026. * [Claude release notes: New security and admin controls for Enterprise plans](https://support.claude.com/en/articles/12138966-release-notes) * [Anthropic: More visibility and control over Claude Enterprise for security teams](https://claude.com/resources/articles/claude-enterprise-security-updates) * [Claude Platform release notes: IP allowlist and member sign-out](https://platform.claude.com/docs/en/release-notes/overview) ## The short answers. ### What is the Claude Enterprise security center? It is a page in Organization settings that compares your Claude settings for chat, Cowork and Claude Code with Anthropic's recommended configuration. For each control it shows the current value, the recommended value where there is one, and a link to change the setting, and it can be downloaded as a report. ### Does the Claude security center certify compliance? No. Anthropic says the security center is guidance based on its recommendations and is not a certification or a guarantee of compliance with any law or standard. ### What does signing a member out of Claude with the Admin API do? In beta, it ends the member's sign-in sessions and trusted devices on every browser and device, and their OAuth tokens for your organization, while keeping them in the organization. It does not end API keys, cloud sessions already running or scheduled routines, and the member can sign in again right away. ### Can Claude Enterprise block personal Claude accounts on work laptops? Yes. Admins can block personal and other outside Claude accounts in Claude Desktop on managed computers, which Anthropic describes as a way to help prevent shadow IT. Read next [2 November 2026 : Message threads in the Claude Messages API](/claude/whats-new/claude-message-threads) [30 October 2026 : Claude Opus 4.8 fast mode deprecation](/claude/whats-new/claude-opus-4-8-fast-mode-deprecation) [28 October 2026 : Smart reports, surveys and pooled group budgets](/claude/whats-new/claude-enterprise-smart-reports-pooled-budgets) Newsletter ## Keep up with _every_ release. One email when something ships or retires that matters to a company: what changed, what it means, the date and what to do. Unsubscribe any time. Work email How did you hear about us? How did you hear about us? ChatGPT Claude Perplexity Another AI assistant Google or Bing search LinkedIn YouTube Someone referred me An event or webinar Our newsletter Somewhere else ## Want this working inside your firm? We run Claude workshops on your own documents and stay on as your teams adopt each release. [Book 30 minutes with Tim](https://calendly.com/timminer-1/chat-with-tim) [hello@bythepeople.tech](mailto:hello@bythepeople.tech?subject=Claude%3A%20Claude%20Enterprise%20security%20center%20and%20admin%20controls)