Workspaces

A workspace is a top-level container that isolates data, members, and detection content. A workspace represents a business entity: an entire organization, a department within a larger one, or a customer if you operate as an MSSP.

Each operation on this page requires specific permissions. See Permissions for the authoritative role-to-permission map.

Workspace and tenant

The cybersecurity industry often refers to this concept as a tenant, particularly in MSSP and multi-customer contexts. LogCraft uses workspace throughout its product and documentation. Treat the two terms as equivalent.

What a workspace contains

Everything in a workspace is scoped to that workspace and isolated from other workspaces. From the workspace navigation:

Where it lives	Item
Detection Factory	Security Assets, Use Cases
Settings	Members, Instances, Labels, Templates

Create a workspace

1. Open Global Settings > Workspaces.
2. Click Create workspace.
3. Enter a name.
4. Click Create.

Workspace names must be unique across the deployment.

Rename a workspace

Renaming is performed from Global Settings only. It is not available from within the workspace.

1. Open Global Settings > Workspaces.
2. Select the workspace.
3. Edit the name.
4. Click Save.

The new name takes effect immediately.

Delete a workspace

1. Open Global Settings > Workspaces.
2. Select the workspace.
3. Click Delete.

Deletion is irreversible

Deleting a workspace immediately removes everything scoped to it: members, instances, Security Assets, Use Cases, labels, templates, MITRE data, comments, notifications, uploads, and activity history. Audit log entries are preserved with the workspace link cleared.

This operation cannot be undone.