Is Claude Code safe for the enterprise? What the official settings cover, and what they don't

Summary

An article examines what Claude Code's official security settings cover and where they fall short for enterprise deployments. It reports that auto mode missed 17% of risky actions in Anthropic's own test set, that a working bypass appeared twelve days after auto mode became the default, and that managed settings bind only Claude Code and can be edited by a developer with local admin rights.

Related items

• InfoOpenAI, Anthropic, and Nvidia had record lobbying quartersSame vendor · The Verge (AI)
• Info1Password lets AI agents use your passwords without seeing themSame vendor · The Verge (AI)
• InfoClaude did not invent scorpion antivenomSame vendor · The Verge (AI)
• InfoAnthropic takes on Muse with Claude Duet, its new AI agentSame vendor · The Verge (AI)
• Info‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake TargetsSame vendor · SecurityWeek