Cowork. The New Browser Wars

Somewhere between January and March of this year, five different vendors shipped what is fundamentally the same product. They gave it five different names. Anthropic called theirs Claude Cowork. Microsoft called theirs Copilot Cowork. Alibaba called theirs CoPaw, then rebranded to QwenPaw a week ago. OpenAI pushed ChatGPT Agent into general availability and followed up two days ago with a Codex desktop expansion that made native Computer Use a first-class feature. Google shipped Gemini 2.5 Computer Use in public preview as part of Project Mariner.

Under the branding, these are the same shape. A model that takes a goal, plans the steps, and executes across your files, apps, and tenant without you holding its hand for every click. Some run in an isolated VM on your machine. Some run in a virtual computer hosted in the cloud. Some live inside your M365 tenant and never touch the local filesystem. The surface area differs. The pattern does not.

This is the browser wars, round two.

What the pattern actually is

The first browser wars were not about rendering engines. Netscape and Internet Explorer were fighting over who got to sit between the user and the web, because whoever owned that interface owned distribution for everything that came after it. Chrome won round two because Google understood the same thing. The access layer is the platform.

Agents are the new access layer. The cowork pattern is the new browser. Whoever becomes the default runtime for how knowledge workers actually get things done owns the next decade of enterprise software distribution. That is not hyperbole. That is what Microsoft, Salesforce, and Google are modeling in their 2026 roadmaps, and it is what Anthropic is betting its enterprise strategy on.

The heat is already on

Anthropic is coming hard at the business market. Cowork is still research preview by name, but the shipped feature set is not a research project. Enterprise controls, OpenTelemetry, plugin governance, projects, mobile access, scheduled tasks. That is a company stacking the deck for an enterprise land grab, and they are doing it from a position nobody else in AI has. Anthropic sells Cowork direct, and Anthropic also sits inside Microsoft's own Cowork as the model substrate under the subprocessor agreement that went into effect in January. Claude is inside the tent and outside the tent at the same time.

Microsoft noticed. And Microsoft has a playbook for moments like this, one they have run successfully many times. The playbook is governance. Not features, not benchmarks, not model quality. Governance.

Watch how Copilot Cowork is being positioned. The language in the Microsoft Learn docs, the partner blogs, and the community posts coming out of Europe this month converge on a single message. Sure, Claude Cowork is powerful, but do you really want it running outside your tenant, outside your Purview, outside your EU Data Boundary, outside your audit logs? It is a classic competitive move, it is well-executed, and it is working. A Team Copilot piece published this morning in the Netherlands runs the script almost word for word, and it is the sort of thing a compliance officer will forward to their CIO by noon Monday.

To be fair, the governance point is not wrong. Claude Cowork activity is not captured in audit logs, the Compliance API, or data exports, and Anthropic themselves tell customers not to use it for regulated workloads. That is fact.

What is also fact is that Anthropic models inside Copilot Cowork are explicitly excluded from the EU Data Boundary, which is why Anthropic is off by default for EU, EFTA, and UK tenants.

EU organizations are not getting a clean story from either side. Both products force the same uncomfortable conversation about where inference actually happens and what that means for a GDPR-bound tenant.

The honest read is that Microsoft is winning the governance narrative because governance is where Microsoft has always been strongest, and Anthropic is winning the raw capability narrative because they are shipping faster than anyone on the enterprise side. Both things can be true. Both usually are, in this kind of fight.

The next twelve months

Here is what I think plays out between now and M365Con 2027.

Anthropic pushes deeper into the enterprise through both direct sales and the Microsoft subprocessor channel, and the tension between those two motions gets louder. OpenAI responds to the Codex Cowork encroachment with a much more aggressive M365-adjacent integration story, probably leveraging the GPT-5.4 native Computer Use capability that is already running ahead of its peers on OSWorld. Google ships a Workspace-native cowork equivalent to protect the flank that Gemini Computer Use is only partially covering today. Alibaba and the open-source agentic runtimes like QwenPaw become the default in markets where US hyperscaler lock-in is a political liability, not a technical one.

And somewhere in the middle of all of that, a third wave of entrants shows up that nobody is modeling yet. That is how the browser wars always went. Netscape and IE were not the end of the story. Firefox, Chrome, and Safari were.

Why this is the good stuff

This is what competition is supposed to feel like. Real companies with real products fighting for real enterprise budgets with real technical differentiation, instead of benchmark theater and Twitter screenshots. Microsoft playing the governance card is not dirty pool, it is Microsoft doing what Microsoft has always done well. Anthropic coming after the business market is not overreach, it is a research lab turning into a real software company. Alibaba open-sourcing a competing runtime is not a threat, it is pressure on the market to keep pricing and portability honest.

The winners of this fight will not be decided by model leaderboards. They will be decided by the teams who understand that agentic AI is the next platform, and platforms are won by companies who understand distribution, governance, and developer gravity as well as they understand capability.

We are early. The next twelve months are going to be loud. That is exactly why this is fun. This is the work we signed up for, and the stakes are finally high enough to match the ambition of the people building in it.