Skip to main content


Platform Timeout

The Lacework Console terminates an idle user session after a configurable amount of time, 1 hour by default. You can adjust the platform timeout duration in the Lacework Console at the organization level or the account level.

If you use the organization timeout, you cannot specify the timeout at the account level. (It is greyed out.)

If you don’t have an organization associated with your account, you can configure the idle timeout at the account level.

You can change the idle timeout from a minimum duration of 30 minutes up to a maximum of 24 hours. For example, if you select a timeout of 30 minutes, the session times out after 30 minutes of inactivity.

To specify the platform timeout, go to Settings > General. Under Platform Timeout, select the platform’s idle timeout from the drop-down.

Changes to the idle timeout value appear in Lacework Console audit logs. To view which user changed the timeout setting, when the change was made, and the old and new values, go to Settings > Audit Logs.

When you log in, Lacework creates a session with the current timeout. If you change the timeout duration, it does not affect active sessions. An active session only uses the timeout from the settings at the time of session creation. For example:

  1. Timeout is set to 1 hour.
  2. You log in for the first time. The timeout is 1 hour.
  3. You change the timeout to 2 hours.
  4. Your session timeout is still set to 1 hour.

Compliance Report Schedule

Use the Send reports at drop-down to select a time when Lacework starts generating and distributing reports. This applies both to built-in reports, such as the Daily Summary and Weekly Snapshot reports, and to custom reports.

Note that this setting determines when report generation begins. The actual time when recipients receive reports may be some time later due to the time it takes for report processing to occur.

Also note that changes to this setting can take up to one or two report cycles to take effect. This setting affects report generation only, not event summary generation. Event summaries start generating at 12 PM GMT.

Lacework Policy Subscription

Toggle on Automatically enable Lacework default policies to enable any future Lacework default policies when they are introduced. You can also select which severities to enable. Existing policies are not affected.

Resource Management Collection Schedule

Use these settings to configure when Lacework starts resource collection and how frequently it performs the collection:

  • Start collection at - Sets the start time for resource collection.
  • Collection interval - Currently, resource collection is performed every 24 hours.

Before changing the collection time, it is important to note how changing the schedule can impact ongoing collections. If there is an ongoing collection underway (whether an on-demand collection or a scheduled collection) when the setting is changed, the ongoing collection is cancelled.

Suppressed Rule Filter

Toggle to filter suppressed rules from compliance assessments.

Continuous Assessments

Select what images are monitored for changes in vulnerabilities for a period of 30 days:

  • Reassess active images

Selecting this option means Lacework will reassess all active images in last 24 hours.


If you want to reassess images with a specific tag or label, contact Lacework Support.

Lacework AI Assist


This section describes a preview feature.

This setting enables the Lacework AI Assist in the Lacework Console. AI Assist is generative AI technology that provides information in the context of a specific alert, including an explanation of the alert, remediation steps, and more.

Lacework AI Assist generates content by training on various sources, including the Lacework documentation and knowledge bases, Lacework policies, and industry security knowledge and information.

Lacework does not use content exchanged by users with the assistant in training its models, ensuring privacy of user interactions.

After enabling the Lacework AI Assist, users can access the assistant by clicking the chat icon on the right side of the details view of any anomaly or compliance alert.