Claude Runs Across Six Surfaces in Your Company. Your Security Team Sees One.

Summary: A vendor account describes an enterprise customer whose security team believed its entire AI footprint was Copilot, until a first scan found Claude ranked first, OpenAI second, and Copilot third. The article says Claude operates across six surfaces - Enterprise and Connected Apps, Projects, MCP servers, Claude Code, Managed Agents, and the Platform Console - each with its own identity model and failure mode, and that no CIS Benchmark or NIST mapping exists specifically for it.
Key Takeaway: An agent with access to Salesforce and Google Drive, whose owner left last month, with permissions never revoked and no guardrails, is three unremarkable facts that combine into a critical risk - and a tool watching only one surface will never show you the combination.

Read the original at The Hacker News ↗