Workspaces are available on all paid plans. Accounts with the Free Edition have access to a single default workspace only.
What workspaces contain
Each workspace includes:| Item | Description |
|---|---|
| Assets and targets | The targets you add for security testing |
| Scans | All scan history for this workspace |
| Scheduled scans | Recurring scans configured for workspace targets |
| Findings | Vulnerabilities discovered in workspace scans |
| Attack surface data | Technology fingerprints and discovered hosts |
| Notification settings | Workspace-specific alert configurations |
| Handlers | XSS Exploiter and HTTP Request Logger data scoped to the workspace |
You can assign a VPN profile to a workspace. When assigned, all scans in that workspace route through your internal network. Learn more about VPN profiles.
Creating a workspace
Go to the Workspaces page, or use the sidebar dropdown:Switching workspaces
Organization strategies
| Strategy | Good for | Example |
|---|---|---|
| By client | Consulting firms and MSPs | One workspace per client to keep data separate |
| By project | Internal security teams | Workspaces for initiatives like “Q4 Assessment” or “New Product Launch” |
| By environment | DevSecOps teams | Separate workspaces for Development, Staging, and Production |
Sharing workspaces
Share workspaces with team members on your account. When sharing, you grant one of the following access levels:| Access level | What they can do |
|---|---|
| No access | Cannot view or interact with the workspace |
| View | See assets, scans, and findings. Cannot start scans or modify anything. |
| Edit | Full access to start scans, manage assets, and work with findings. Cannot delete the workspace. |
How sharing works
- The workspace owner shares a workspace with selected team members
- Team members see the shared workspace in their workspace list
- Team members can switch to the shared workspace and work according to their permissions
- Scans started by team members appear in the shared workspace, visible to all members with access
For workspace owners
- Share workspaces from the workspace page or from Settings > Team > Sharing
- Choose which workspaces to share and with which team members
- Set appropriate access levels for each team member
- Revoke access at any time by removing sharing permissions
For team members
- Shared workspaces appear in your workspace dropdown
- Your access level determines what actions you can take
- Switch between your own workspaces and shared workspaces freely
- Scans you start in a shared workspace are visible to all members with access
Deleting a workspace
Go to the Workspaces page, select one or more workspaces, and click Delete. You’ll be asked what to do with the contents:- Move assets: Transfer all assets and their data to your default workspace
- Delete everything: Permanently remove all assets, scans, and findings
Best practices
Use descriptive names
Use descriptive names
Name workspaces clearly so you and your team can quickly identify them. Include client names, project codes, or environment indicators.
Set up workspace notifications
Set up workspace notifications
Configure notification settings per workspace to get alerts relevant to each project. This prevents notification overload from unrelated scans.
Assign VPN profiles strategically
Assign VPN profiles strategically
If you’re scanning internal networks, assign the appropriate VPN profile to the workspace so all team members use the correct network path.
Review sharing access regularly
Review sharing access regularly
Periodically audit who has access to which workspaces and what access levels they have, especially after team changes or project completions.