Workspace Settings
Workspace settings let you manage the metadata, status, and security configuration of your workspace. Owners have full control over all settings, while Editors can modify basic workspace details like the name and description.
How It Works
All settings changes are recorded in the workspace audit log.
Key Actions
Managing Workspace Status
Workspaces have three possible statuses that control what actions can be performed:
| Status | Description |
|---|---|
| Active | All features available. Default status. |
| Completed | Read-only. Pending invitations cancelled. Can be reactivated to Active. |
| Archived | Permanently read-only. Cannot be reactivated. |
Once a workspace is archived, it cannot be reactivated. All pending invitations are cancelled, and no further changes can be made. Only archive a workspace when you are certain the engagement is permanently complete and the data should be preserved as-is.
When a workspace is in Completed or Archived status, only status changes are allowed (for Completed workspaces). All other modifications -- including editing the name, description, or dates -- are blocked.
Rotating the Encryption Key
Each workspace has its own Data Encryption Key (DEK) that protects sensitive data such as credentials, notes, and files. Workspace owners can rotate this key, which generates a new encryption key and re-encrypts all workspace data.
To rotate the encryption key:
- Navigate to workspace settings.
- Click Rotate Encryption Key.
- Confirm the operation.
Key rotation runs in the background. During rotation, the workspace is temporarily locked (other requests will receive a "locked" response) to prevent data corruption. The workspace unlocks automatically once rotation completes.
Encryption key rotation is limited to once per 24 hours per workspace. This prevents accidental repeated rotations. The lock also prevents concurrent rotation attempts -- if rotation is already in progress, additional requests will be rejected.
Deleting a Workspace
Workspace deletion is a permanent, irreversible action that is restricted to the workspace Owner only. Deleting a workspace removes all associated data, including assets, networks, vulnerabilities, credentials, files, compliance records, and the audit log.
To delete a workspace:
- Navigate to workspace settings.
- Click Delete Workspace.
- Confirm the deletion in the confirmation dialog.
Workspace deletion cannot be undone. All data within the workspace -- assets, vulnerabilities, credentials, scan results, compliance records, notes, documents, and the audit log -- will be permanently removed. Make sure you have exported any data you need to retain before deleting.
The workspace must be in Active status to be deleted. If you need to delete a Completed workspace, reactivate it first by changing its status back to Active.