Rating · evidence to 26 Sept 2026
64
- Provisional
- Trust B
The Register / Personal & desktop agents / Claude (desktop app with Cowork)
Register entry · Personal & desktop agents · updated 26 Sept 2026
Claude (desktop app with Cowork)
Anthropic · Personal & desktop agents
Claude's desktop app (macOS, Windows) includes Cowork, a general-purpose agent derived from Claude Code that runs tasks in an isolated environment, works in folders the user connects, uses connectors, the Chrome extension and computer use, and runs scheduled tasks. Since July 2026 Cowork sessions can run in Anthropic's cloud so work continues when the laptop is closed, with web and mobile access. On 16 Sep 2026 Anthropic started folding Cowork into every Claude conversation and added Claude Docs, Slides and in-chat Design. It is closed source and included in paid Claude plans.
What reviewers and users praise
- Reviewers found it completes real file and office tasks with little setup (Wired, Tom's Guide)
- Sandboxed execution and folder scoping by default; approval prompts before deletion
- Polished app with many connectors; users run business workflows on scheduled tasks (Reddit r/ClaudeCowork)
What they criticise
- Usage limits are consumed quickly by agentic work; users call the value proposition poor (HN, reviewers)
- Prompt-injection exposure; a file-exfiltration bypass of the network allowlist was published in Jan 2026
- Frequent product changes break workflows (scheduled-task permissions, lost GitHub write access after the Sep 2026 merge)
- Computer use judged basic and hit-or-miss in hands-on testing (Digital Thoughts)
Experts vs the crowdcrowd cooler by 15
Experts71
Crowd57
| Price | Free, paid from $20 |
|---|---|
| Use it via | Desktop app, Web app, Mobile app, Browser extension |
| Runs on | macos, windows, web |
| Licence | proprietary |
| Updated | Evidence collected 26 Sept 2026 |
How the rating was worked out
Weights for Personal & desktop agents: adoption 30%, experts 35%, crowd 35%. Pillars without enough evidence are left out and the others re-weighted. The method.
| Adoption & momentumweight 30% | — | No public reach signal found |
|---|---|---|
| Expertsindependent reviews · weight 35% | 71 | 4 independent reviews (3 positive · 1 mixed · 0 negative), averaged toward 50 for small samples. |
| Crowdcommunity sample · weight 35% | 57 | 9 dated posts from reddit, hackernews: 5 positive · 1 mixed · 3 negative (positive + ½ mixed) ÷ n, averaged toward 50 for small samples |
| Rating | 64 | Provisional: low confidence (2 of 3 pillars, 9 community posts). |
Evidence checks. 2 posts over the three-per-thread limit not counted. How evidence is checked.
Trust & safety
Seven dimensions graded A–D from documented facts. Overall: B.
A
Permission model
Tasks run in an isolated, temporary environment per session that cannot reach the user's network; Claude asks before acting by default, 'Automatically approve' mode screens each action, permanent deletion always needs an explicit Allow, and computer use asks per application. source
A
Data access scope
Claude reaches the local machine only through the desktop app and 'only for the folders you've connected'; connectors and browser access are granted individually; network egress limited to an allowlist by default. source
B
Data storage
Since Jul 2026 Cowork sessions and files are saved to the user's Claude account on Anthropic's servers; users can delete conversations (removed from back-end storage within 30 days); Enterprise has custom retention controls. source
C
Data retention & training
Consumer plans (Free, Pro, Max) are used for model training when the user leaves the model-training setting on; retention is 30 days, or up to 5 years when training is allowed. Commercial plans (Team, Enterprise, API) are not used for training. source
B
Incident history (24 months)
Jan 2026: PromptArmor showed a prompt-injection attack that exfiltrated files by uploading them to api.anthropic.com, which was on Cowork's default network allowlist. No resolution statement located; Anthropic has since added action screening and plugin/skill security scanning (Aug 2026). No CVE found for the desktop app. source
A
Compliance
Anthropic lists SOC 2 Type I & Type II, ISO 27001:2022, ISO/IEC 42001:2023 and a HIPAA-ready configuration. source
B
Transparency
Closed source; public dated release notes and detailed help-center documentation, including a Cowork safety guide. source
The experts
4 named independent reviews found; dated reviews from the last 12 months are scored.
- positive
This is a general agent that looks well positioned to bring the wildly powerful capabilities of Claude Code to a wider audience.
Simon Willison (simonwillison.net) · 12 Jan 2026 · simonwillison.net - positive
Cowork isn’t perfect in its current state, and its developers plan to keep making updates to the tool based on what users share in their feedback. Still, this is the …
Reece Rogers (WIRED) · 15 Jan 2026 · wired.com - positive
I was skeptical, but once I gave it a try, I realized it was easy enough to use and more helpful than I ever imagined.
Amanda Caswell (Tom's Guide) · 6 Mar 2026 · tomsguide.com - mixed
My honest take: Anthropic is getting close. Not there yet, but close.
Pawel Jozefiak (Digital Thoughts newsletter) · 24 Mar 2026 · thoughts.jock.pl
The crowd
9 coded posts from reddit, hackernews.
5 positive1 mixed3 negative
- positive
Tried Claude Cowork last night, and it was a top 3 most exciting moments I’ve ever had with technology.
r/ClaudeCode · 19 Jan 2026 · reddit.com - positive
Claude Cowork is magical
r/ClaudeAI · 8 Mar 2026 · reddit.com - positive
I run a small b2b consulting company and use Claude - Cowork for the heavy lifting, custom skills for my document formats, newsletters, organization, connectors into Outlook and MS etc.
r/ClaudeCowork · 19 Sept 2026 · reddit.com - mixed
Been using Cowork for months now but surprised there is not a lot available for Social Listening connectors?
r/ClaudeCowork · 22 Sept 2026 · reddit.com - negative
Scheduled tasks now refuse to send DMs or fill forms for me, even with explicit approval.
r/ClaudeCowork · 23 Sept 2026 · reddit.com - negative
Chat + Projects on iOS lost GitHub write access after the Cowork merge — please give chat users a way back.
r/ClaudeCowork · 25 Sept 2026 · reddit.com - negative
I'm starting to explore alternative options because Claude has become an awful value proposition.
news.ycombinator.com (Claude Cowork and chat are now one Claude) · 16 Sept 2026 · news.ycombinator.com - positive
A change for the better. The distinction made it unnecessarily complex for users.
news.ycombinator.com (Claude Cowork and chat are now one Claude) · 16 Sept 2026 · news.ycombinator.com
Pricing
As published, checked 26 Sept 2026.
| Plan | Price | Notes |
|---|---|---|
| Free | Free | Merged Cowork experience rolls out to Free later ('Team and Free plans will follow soon'). |
| Pro | $20 / monthly | $17/month billed annually ($200 up front). |
| Max | $100 / monthly | Max 5x from $100/month; Max 20x tier also offered (price not captured). |
| Team (standard seat) | $25 / monthly | Per seat, $25 billed monthly; premium seat $125 billed monthly. |
| Enterprise | Custom | Seat price plus usage at API rates (page lists US$20/seat/month billed annually plus usage). |
Recent changes
- 16 Sept 2026
Cowork and chat merge into one Claude on web, desktop and mobile (Pro and Max first); Claude Docs, Slides and in-chat Design added in beta. source
- 25 Aug 2026
Memory works across chat and Cowork in the cloud, with editable topics and a sensitive-topics setting. source
- 6 Aug 2026
Skill and plugin security scanning (beta) for Enterprise. source
- 7 Jul 2026
Cowork on web and mobile; sessions can run remotely so work continues with the laptop closed; Microsoft 365 connector write tools. source
Ranked alongside
Other ranked entries in Personal & desktop agents.
Hermes AgentNous Research69
OpenClawOpenClaw Foundation (created by Peter Steinberger)63
ZeroClawZeroClaw Labs61Sources
Every figure above traces to one of these, observed up to 26 Sept 2026.