Anthropic has announced two new security features for its Claude AI: a self-hosted sandbox and a new security guidance plugin.
The sandbox, currently in public beta, was announced at Anthorpic’s Code w/ Claude event in London this week.
According to the company, Claude Managed Agents can now operate in a user-controlled sandbox connected to the user’s private MPC servers.
“Tool execution moves to an environment you configure—your own infrastructure or a managed provider like Cloudflare, Daytona, Modal, or Vercel—while the agent loop that handles orchestration, context management, and error recovery stays on Anthropic’s infrastructure,” Anthropic explained.
It added, “Your network policies, audit logging, and security tooling apply, files and repositories don’t leave your perimeter, and you control compute sizing and the runtime image for compute-heavy work.”
Separately, the company unveiled a security guidance plugin for Claude Code, designed to help developers detect and fix vulnerabilities as they write code.
The plugin scans for vulnerabilities on file edits, after AI-generated changes, and at commit time, analyzing risky code patterns, reviewing full diffs, and examining surrounding context.
Available through the official Anthropic marketplace, the plugin has been widely used internally by the AI company.
“Across our internal rollout and benchmarks, we’ve seen a 30-40% decrease in security-related comments on PRs opened using the plugin,” the company said. “The plugin serves as a lightweight first pass, catching issues before a full code review.”
Last week, Anthropic announced 28 new enterprise security and compliance integrations for Claude.
Related: Anthropic: Mythos Detected 23,000 Potential Vulnerabilities Across 1,000 OSS Projects
Related: Anthropic Silently Patches Claude Code Sandbox Bypass
Related: AI-Powered App Attacks Are Faster, More Frequent and Harder to Stop
