Anthropic updated Claude Enterprise security and admin features: Inference Hooks (prompt hooks and pre-tool-call hooks) are generally available so prompts and tool calls can hit the organization's existing DLP/security stack for allow/deny before the model or tool runs. The same post also introduces a Security Center, centralized management, and additional access controls (mostly beta).

Key Takeaways

  • ✓Official: claude.com article More visibility and control over Claude Enterprise for security teams
  • ✓GA: Prompt hooks and pre-tool-call hooks into existing enterprise DLP/security tools
  • ✓Coverage: prompts and tools/skills/plugins/MCP on supported products; one org setup
  • ✓Same post, mostly beta: Security Center, centralized management, Admin API sign-out, self-serve IP allowlist, Desktop shadow-IT block, Cowork EDR
  • ✓Limits: Enterprise; hooks see transcript/tool-call text, not raw file bytes; configure timeout fail policy
Anthropic: Claude Enterprise Inference Hooks Generally Available for Prompt and Pre-Tool-Call DLP Checks
🖼️Official Media
Click to view high-res
🧭

Heavy Claude Code use: compare subscription limits and API bills

Compare 40 dev plans & simulate token costs vs $20/mo subscriptions

🔬

In-Depth Technical Analysis

Core Background & Industry Pain Points

Once enterprises put Claude into chat, Claude Code, Cowork, and MCP/plugins, security teams need the same DLP stack to gate prompts before the model sees them and tool calls before they run, plus a single view of org settings versus Anthropic recommendations. Scattered toggles make audits and shadow-IT control hard.

Architecture Highlights & Internals

Anthropic updated Claude Enterprise: Inference Hooks (prompt hooks and pre-tool-call hooks) are generally available, sending prompts and tool calls to existing data-security tools for allow/deny. The same post also lists a Security Center (beta), centralized management (beta), Admin API sign-out and self-serve IP allowlists (beta), blocking personal/outside Claude accounts on managed Claude Desktop, and running the org EDR sensor inside the local Cowork VM (beta, detection mode).

Authoritative Benchmarks & Measured Scores

This is an enterprise security/admin feature release; Anthropic published no latency or block-rate benchmarks. Per the product page, Inference Hooks are GA; Security Center, centralized management, sign-out, IP allowlists, Desktop controls, and Cowork EDR are largely beta—do not treat the whole announcement as GA.

Developer Hands-on Guide

Enterprise Owners configure Hooks under Organization settings, point Claude at the company DLP HTTPS endpoint, and choose fail-open versus fail-closed on timeout. Hooks cover prompts and tools/skills/plugins/MCP on supported products; Anthropic notes hooks see transcript/tool-call text, not raw file bytes. Validate policies in staging before enabling pre-tool-call hooks broadly.

Action HubReady to adopt this in production?

Benchmark side-by-side against alternatives, or calculate monthly token cost vs subscription break-even.

Up NextAnthropic guide: fold most subagents back into one main agent loop with on-demand skills and tools; one customer ran about 2x faster
Read Now→