Astro holding a security sign next to text that says, "Freemium and Premium Salesforce Security Tools."

Salesforce Security: Enhanced Visibility with Freemium and Premium Tools


Salesforce Admins have access to a variety of tools that provide visibility into the security of their Salesforce orgs. At Salesforce, we believe in a holistic approach to security that addresses both low-hanging fruit (like easy-to-fix settings) as well as more complex needs. To help admins with this, Salesforce offers native dashboards and reporting tools (Health Check, Salesforce Optimizer, etc.), as well as paid products that provide enhanced visibility of security considerations (Security Center).

Though some are built-in and others come at a cost, there is deep inherent value in all of these tools depending on your security needs. Let’s dive into these amazing tools!

Health Check (built-in)

Salesforce orgs are built with security in mind, but there are certain things left up to you—the customer—to configure based on the unique needs of your company. Health Check gives admins visibility into all of your security settings in one view. You can find and run Health Check in the Quick Start menu by typing “Health Check.”

Configuring settings in a certain ways, like selecting more secure password requirements or limiting a user’s session length, will increase or decrease your Health Check score depending on what you choose. A summary score (0-100) shows how your org measures against a security baseline like the Salesforce Baseline Standard. You also have the ability to upload up to five custom baselines to use instead of the Salesforce Baseline Standard! Once you’ve initially updated your security settings to get a good score, we recommend running Health Check after every release (three times a year) to ensure that nothing has changed within your org and you can address any new security settings right away.

Salesforce Optimizer (built-in)

Salesforce Optimizer is another built-in tool available to admins to increase the visibility of crucial components of a Salesforce org (such as a handful of security-related components). Optimizer takes a snapshot of your Salesforce org and looks for potential problems in your implementation—it’s pretty powerful! In terms of security, the tool gives you detailed data right inside your org on more than 50 metrics covering everything from users with admin-level permissions, storage, fields, custom code, custom layouts for objects, reports and dashboards, and much more.

User Access and Permissions Assistant (free on AppExchange)

The User Access and Permissions Assistant gives admins the ability to manage permissions and permission assignments like never before. This ability is especially important given the recent announcement of end of life (EOL) of permissions on profiles, which will go live in the Spring ’26 Release.

This app, available for free on AppExchange, allows you to:

  • Analyze a user’s permission and the permission origins.
  • Report on permissions by user, by permission set, or by dependency, and extract.
  • Manage permission set groups and see combined permissions, manage muting, and manage assignments in an easy wizard.

The best part? This tool is fully supported by Salesforce!

Security Center (add-on)

The last tool we’ll dig into is Security Center, one of our add-on products. Yes, it’s an additional cost, but the value it provides in terms of security is endless. Think of it like Health Check on another level: It consolidates security information across ALL of your Salesforce orgs into one view and even includes other security feeds. It’s especially useful for larger companies that manage many orgs and have enhanced security needs.

This extremely powerful product further simplifies the management of security across Salesforce, making sure customers have a strong understanding of their security posture and driving insights to improve it where necessary. Security Center does this by tracking more than 60 key user permissions and org configuration metrics for each of your Salesforce orgs, and then consolidating them into a single view so you have a clear view into your security posture across your entire Salesforce environment.

When it comes to security, the more you do proactively to protect your data will pay off in dividends by avoiding unnecessary risk. Hopefully, this guide to Salesforce’s freemium and premium security visibility tools is helpful!

Additional resources

Introducing Files and Attachments Backup in Salesforce Backup.

Introducing Files and Attachments Backup in Salesforce Backup | Spring ’24

What is Salesforce Backup? Salesforce Backup is our native backup and restore solution designed to safeguard customers’ valuable data. Geared for user-friendly operation, Salesforce Backup automatically creates backup copies of business data, empowering organizations to effortlessly restore data and recover from even the most challenging scenarios. With the Spring ’24 Release, we’re thrilled to announce […]

Introducing Salesforce Backup.

Introducing Salesforce Backup: Your Data’s Safety Net

What is Salesforce Backup? On August 15, Salesforce announced the general availability of Salesforce Backup, a native backup and restore solution designed to safeguard customers’ valuable data. Built with ease of use in mind, Salesforce Backup automatically creates backup copies of business data, empowering any organization to restore data and recover from even the worst-case […]

Cloudy with a laptop standing next to text that says, "Security + AI Basics for Salesforce Admins."

Security + AI Basics for Salesforce Admins

Artificial intelligence (AI) is everywhere right now and everyone is talking about it. From having fun with generative imaging to staring in wonder at driverless cars, it seems that AI is popping up all over the place. Salesforce has made a ton of AI announcements with Sales GPT, Service GPT, Slack GPT, and beyond. As […]