Workspace Settings

Workspace settings let you manage the metadata, status, and security configuration of your workspace. Owners have full control over all settings, while Editors can modify basic workspace details like the name and description.

How It Works

Every workspace has a set of configurable properties that define its identity and operational state. These settings are accessible from the workspace's settings panel and include both basic metadata and security-critical operations.

Changes to workspace settings are recorded in the audit log, providing a full history of who changed what and when.

Key Actions

Editing Workspace Details

Users with the Owner or Editor role can update the following fields:

• Name -- The display name of the workspace (1-255 characters). Choose something descriptive that identifies the client or engagement.
• Client Name -- The name of the client organization being assessed. This field is optional and can be cleared.
• Description -- A summary of the engagement scope, objectives, or any relevant context (up to 5,000 characters). This field is optional.
• Start Date -- The planned or actual start date of the assessment. This field is optional and can be cleared.
• End Date -- The planned or actual end date of the assessment. This field is optional and can be cleared.

To update these fields:

1. Navigate to the workspace settings.
2. Modify the fields you want to change.
3. Save your changes.

Managing Workspace Status

Workspaces have three possible statuses that control what actions can be performed:

Status	Description
Active	The default status. All features are available -- you can add data, invite members, run scans, and make changes.
Completed	The assessment is finished. The workspace becomes read-only. Pending invitations are automatically cancelled. The workspace can be reactivated by changing its status back to Active.
Archived	The workspace is permanently read-only. No modifications are allowed, and the status cannot be changed back. Use this for long-term record retention.

Archiving Is Permanent

Once a workspace is archived, it cannot be reactivated. All pending invitations are cancelled, and no further changes can be made. Only archive a workspace when you are certain the engagement is permanently complete and the data should be preserved as-is.

When a workspace is in Completed or Archived status, only status changes are allowed (for Completed workspaces). All other modifications -- including editing the name, description, or dates -- are blocked.

Rotating the Encryption Key

Each workspace has its own Data Encryption Key (DEK) that protects sensitive data such as credentials, notes, and files. Workspace owners can rotate this key, which generates a new encryption key and re-encrypts all workspace data.

To rotate the encryption key:

1. Navigate to workspace settings.
2. Click Rotate Encryption Key.
3. Confirm the operation.

Key rotation runs in the background. During rotation, the workspace is temporarily locked (other requests will receive a "locked" response) to prevent data corruption. The workspace unlocks automatically once rotation completes.

Key Rotation Limits

Encryption key rotation is limited to once per 24 hours per workspace. This prevents accidental repeated rotations. The lock also prevents concurrent rotation attempts -- if rotation is already in progress, additional requests will be rejected.

Deleting a Workspace

Workspace deletion is a permanent, irreversible action that is restricted to the workspace Owner only. Deleting a workspace removes all associated data, including assets, networks, vulnerabilities, credentials, files, compliance records, and the audit log.

To delete a workspace:

1. Navigate to workspace settings.
2. Click Delete Workspace.
3. Confirm the deletion in the confirmation dialog.

Permanent Deletion

Workspace deletion cannot be undone. All data within the workspace -- assets, vulnerabilities, credentials, scan results, compliance records, notes, documents, and the audit log -- will be permanently removed. Make sure you have exported any data you need to retain before deleting.

The workspace must be in Active status to be deleted. If you need to delete a Completed workspace, reactivate it first by changing its status back to Active.

Tips and Notes

• Audit trail -- All workspace setting changes (updates, status changes, key rotations, deletions) are logged in the audit log before they take effect.
• Completed vs. Archived -- Use Completed status for engagements that are finished but may need to be reopened. Use Archived for permanent, read-only retention.
• Key rotation during active work -- While key rotation runs in the background, the workspace is briefly locked. Plan rotations during low-activity periods to avoid disrupting team members.
• Status and invitations -- Changing a workspace to Completed or Archived automatically cancels all pending invitations. Notify invited users before changing the status if they have not yet accepted.

Regular Key Rotation

For sensitive engagements, consider rotating your workspace encryption key periodically (e.g., monthly) or after any team member is removed. This ensures that even if a previous key were compromised, the exposure window is limited.