Security Health Review Tool

The Security Health Review Tool identifies security gaps in an org’s configuration and provides recommendations to strengthen your Salesforce security posture.

Important The Security Health Review Tool is available exclusively to Signature Success Plan customers on Salesforce Platform. Contact your Customer Success Manager if you have more questions.

Security on the Salesforce Platform follows a shared responsibility model. Salesforce protects the underlying infrastructure, while customers are responsible for managing their own environment’s security settings based on their specific org needs.

The relevant Salesforce terms of service or applicable subscription agreements exclusively dictate the rights and obligations of each party.

Note Salesforce provides the information and recommendations in good faith, based on our understanding at the time of the assessment. Salesforce provides these security best practices for informational purposes only.

• Access and Use the Security Health Review Tool
  The Security Health Review Tool provides an expert-grade assessment of your organization’s security posture by analyzing over 400 metadata signals.
• Enable the Health Assessments Agent
  The Health Assessments Agent is an Agentforce-powered AI assistant that helps you interpret and act on your Security Health Review findings directly within Setup.
• Review Identity and Authentication Controls
  Learn about identity and authentication controls.
• Review Authorization and Access Management
  Learn about authorization and access management.
• Review Network Security and Access Restrictions
  Learn about network security and access restrictions.
• Review Data Protection and Encryption
  Learn about data protection and encryption.
• Review Data Governance - Data Privacy, Classification and Retention
  Learn about data governance using data privacy, classification, and retention.
• Review Logging, Monitoring, and Auditability
  Learn about logging, monitoring, and auditability.
• Review Application and Platform Security
  Learn about application and platform security.
• Review API and Integration Security
  Learn about API and integration security.
• Review AI, Agentforce, and Automation Security
  Learn about AI, Agentforce, and automation security.
• Review Salesforce Experience Site and Customer's Customer Management
  Learn about the Salesforce Experience Site and Customer's Customer Management.
• Review Third-Party Apps and Managed App Security Controls
  Learn about third-party apps and managed app security controls.
• Review Mobile Security
  Learn about mobile security.