Security Health Review Tool

The Security Health Review Tool identifies security gaps in an org’s configuration and provides recommendations to strengthen your Salesforce security posture.

Watch how to use the Security Health Review tool to protect your data.

Important The Security Health Review Tool is available exclusively to Signature Success Plan customers on Salesforce Platform. Contact your Customer Success Manager if you have more questions.

Tip Some features, including the new Mandatory signal category, only take effect in new reports. Generate a new report to use the latest features.

Security on the Salesforce Platform follows a shared responsibility model. Salesforce protects the underlying infrastructure, while customers are responsible for managing their own environment’s security settings based on their specific org needs.

The relevant Salesforce terms of service or applicable subscription agreements exclusively dictate the rights and obligations of each party.

Note Salesforce provides the information and recommendations in good faith, based on our understanding at the time of the assessment. Salesforce provides these security best practices for informational purposes only.

• Access and Use the Security Health Review Tool
  The Security Health Review tool provides an expert-grade assessment of your org’s security posture by analyzing metadata signals directly in Salesforce Setup. Use it to identify critical security findings, track remediation progress, and maintain compliance with Salesforce security standards.
• Review and Manage Security Health Review Findings
  Use the Security Health Review findings view to investigate security gaps in your org, track remediation progress, and document compensating controls or risk decisions.
• Assign Access to the Security Health Review Tool
  Control who can view and manage Security Health Review reports and findings using two dedicated system permissions: View Health Assessments and Manage Health Assessments.
• Enable the Health Assessments Agent
  The Health Assessments Agent is an Agentforce-powered AI assistant that helps you interpret and act on your Security Health Review findings directly within Setup.
• Review Identity and Authentication Controls
  Learn about identity and authentication controls.
• Review Authorization and Access Management
  Learn about authorization and access management.
• Review Network Security and Access Restrictions
  Learn about network security and access restrictions.
• Review Data Protection and Encryption
  Learn about data protection and encryption.
• Review Data Governance - Data Privacy, Classification and Retention
  Learn about data governance using data privacy, classification, and retention.
• Review Logging, Monitoring, and Auditability
  Learn about logging, monitoring, and auditability.
• Review Application and Platform Security
  Learn about application and platform security.
• Review API and Integration Security
  Learn about API and integration security.
• Review AI, Agentforce, and Automation Security
  Learn about AI, Agentforce, and automation security.
• Review Salesforce Experience Site and Customer's Customer Management
  Learn about the Salesforce Experience Site and Customer's Customer Management.
• Review Third-Party Apps and Managed App Security Controls
  Learn about third-party apps and managed app security controls.
• Review Mobile Security
  Learn about mobile security.