Home / Help centre / Security & privacy
Security & privacy
Is my workspace's data kept separate from other organizations?
Yes. Every organisation (workspace) has its own private database schema, so its users, roles, targets, scans and findings are never shared with another organisation. Inside your workspace, role-based permissions and group scoping then decide who sees what.
The short version
Your workspace is a walled area. Your users, roles, targets, scans and findings live in a private database schema that belongs to your organisation alone. Another customer cannot reach them, and you cannot reach theirs.
| Layer | What keeps it separate |
|---|---|
| Between organisations | A private database schema per workspace |
| Inside your workspace | Role-based permissions |
| Targets and profiles | Grants scoped to groups of targets |
| Activity feed | Organisation-wide for administrators, team-scoped for leads, own actions for others |
How it works in Cyberlop
The documentation states it directly. Cyberlop keeps every organisation in its own private database schema, and users, targets, scans and findings never cross from one organisation to another. This is the idea behind multi-tenancy done with a hard boundary, not just a filter on a shared table.
Scan workers add another layer. Each scan runs in its own isolated, temporary container, so one scan cannot read another scan’s files.
Inside the workspace, people see only what their role allows. Permissions follow the pattern area:action, such as scan:run or issue:triage, and you can scope grants to groups of targets. The activity feed also shows less to people with narrower roles.
That second layer is yours to manage. Give each person the smallest role that lets them do the job, following least privilege.
What to do next
- See how scan isolation works.
- Read who sees which activity entries.
- Review the security page for the full list of controls.
Questions about your set-up? Contact us at /contact.
Related questions
- Is each scan isolated from other scans?
- Who can see which entries in the activity feed?
- Which permissions can I give a custom role?
- Can Cyberlop staff see my source code?
- Can I delete scans, targets and data whenever I want?
Cyberlop activity feed: what it records and how to use it for audits
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Security question we did not answer?
Our team will answer it directly, or walk through it on a call with your security lead.