Simplified and secure access control
The main innovation is a new sandboxing system that reduces the number of approval prompts by 84%. Instead of constantly approving every action, such as running a command, editing a file, or testing, you define the boundaries in advance. Claude can access only the current project directory and cannot access sensitive system files such as SSH keys or .bashrc. Network isolation allows connections only to approved domains—if someone tries to trick Claude into connecting to a hacker-controlled server, the connection fails at the operating system level. If Claude attempts to access anything outside the sandbox, you receive an immediate notification and can allow it once or adjust the settings.
This approach addresses the dilemma faced by AI coding tools: you want the AI to help by accessing files and the terminal, but without risks such as prompt injection, where hackers trick the AI into performing malicious actions. In Anthropic's internal testing, this not only simplified workflows but also improved security by preventing approval fatigue and the risk of "dangerously bypassing permissions." Each web session runs in a separate secure sandbox where GitHub credentials never enter the environment—instead, Claude uses its own proxy, which verifies every Git operation. Even if the code in the sandbox were compromised, your actual credentials would remain secure.
Availability and additional details
Claude Code on the web is available to users with a Pro subscription for $20 per month (approximately CZK 460) and a Max subscription for $100 or $200 per month (approximately CZK 2,300 or CZK 4,600). Usage has reportedly increased tenfold since May 2025, generating more than $500 million annually for Anthropic (approximately CZK 11.5 billion). Anthropic has openly shared the sandboxing code, allowing other AI tools to adopt it as well. It also integrates with Claude Skills, which Simon Willison says turn Claude into an ideal general-purpose agent, and with McKay Wrigley's tutorial on using Claude Code as a general-purpose agent. To get started, visit claude.com/code, where you can connect your first repository and begin delegating tasks.
