You are here:
Additional Salesforce Security Customizations
Salesforce offers other security products and features that address more complex security and compliance requirements. Use these features for more advanced or stringent data handling and residency, monitoring, and security scenarios. These solutions, some available at an additional cost, work in partnership with the security tools available to every admin.
Required Editions
| Available in: both Salesforce Classic and Lightning Experience |
| Edition and license requirements vary by feature. For more specific edition requirements, see each feature's documentation. |
Activations
Activations tracks information about the devices and browsers from which your users verify their identity. When a user logs in from a new device or browser, Salesforce prompts them to confirm their identity. Activations add a layer of security beyond their basic username and password usage. Review verified login IP addresses and client browsers on the Activations page in Setup.
Salesforce Shield
Salesforce Shield is a suite of four products that builds enterprise-grade security, compliance, and governance into your Salesforce apps. Shield products work alongside the rest of Salesforce and are available through Setup or the Shield app. The Shield app is a central hub for your Shield services and includes shortcuts to your configurations in Setup. Setup assistants guide you through each product and insights such as usage metrics, data trends, and job statuses.
- Data Detect finds and classifies sensitive data across your org and Data 360 by using native Salesforce technology. Because your data never leaves the platform, there's no need for third-party services or data transfers. Align data with sensitivity levels and categories, then act to protect what matters most.
- Event Monitoring tracks detailed performance, security, and usage data across your Salesforce apps. See who's accessing critical business data, when, and from where, then build policies that proactively keep data secure. Machine learning surfaces information about potential threats. Bring Event Monitoring data into tools such as CRM Analytics, Splunk, or New Relic for deeper analysis. Then use Platform Event-Triggered Flows and Transaction Security Policies to define and monitor security policy enforcement in near real-time.
- Field Audit Trail preserves the state and value of your data at any point in time. Control your data retention strategy for regulatory compliance, internal auditing, and forensic investigations. Building on top of Field History Tracking, Field Audit Trail expands how much data you can retain.
- Shield Platform Encryption natively encrypts data at rest, including individual fields, the transactional database, and Data 360, with data store-specific keys. You can generate and store key material outside Salesforce for full control over your key lifecycle. When you encrypt your most sensitive data, you manage your security and compliance posture and address privacy policies, regulatory requirements, and contractual obligations.
Security Center
Security Center shows your security, privacy, and governance posture across all your Salesforce orgs and tenants. It surfaces data across more security metrics data than Security Center Essentials. See health check scores, access settings, and user and login metrics and trends. Use Security Center to spot risks faster, shorten security review cycles, and respond to suspicious activity before it becomes a problem. Security Center with Agentforce streamlines and organizes incident and security data so that you can track and respond to incidents faster with guided remediations.
Private Connect
Private Connect creates a fully managed, private network connection between your Salesforce org and your Amazon Web Services (AWS) Virtual Private Cloud (VPC). Route cross-cloud traffic through this private connection instead of the public internet to reduce your exposure to external security threats.
Frontdoor.jsp
Frontdoor.jsp bridges an existing web session into Salesforce from a custom web interface, such as a Salesforce site. Use Frontdoor.jsp to connect users to Salesforce by using their existing session ID and server URL without requiring a separate login. These bridges are useful for custom portals or web apps that integrate with your org.

