In the Salesforce Security Health Check, the setting "Number of Objects with Default External Access Set to Public" is displayed even if the org has not enabled Communities (also known as Experience Cloud). For orgs without communities, this setting's value is "0" and the status is marked as "Compliant." Customers without communities can safely ignore this setting.
Note: On the Sharing Settings Setup page, you can view and modify the default external access settings even if communities are not enabled. However, these access level settings have no effect until there are external users in your org.
This is expected behavior in Salesforce. The "Number of Objects with Default External Access Set to Public" setting appears in Security Health Check for all orgs, regardless of whether Communities (Experience Cloud) is enabled.
For orgs without communities or external users, this setting always shows a value of "0" and a status of "Compliant." No action is required. The Default External Access settings on the Sharing Settings page are visible but have no functional effect until external users exist in the org.
If your org does have external users (via Communities or Experience Cloud), you should review this setting to ensure it is appropriately configured for your security requirements.
000389905

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.