Security Health Check review and remediation
Key Takeaway
Health Check scores your org's security settings against a baseline. High-Risk settings count the most, and Informational settings don't count toward the score at all.
Security Health Check is a Setup page that scores your org's security settings against a baseline. A baseline is a set of recommended values for each setting. The default baseline is the Salesforce Baseline Standard. You can import a custom baseline when your company's security rules differ. Admins use Health Check to find risky settings, decide which fixes come first by risk level, and catch drops in security over time. You can also fix weak settings from the same page.
Where to find Health Check
To open Health Check, enter Health Check in the "Quick Find" box in Setup. Health Check shows your security settings on a single page, with each one compared to the baseline values.
Health Check works in both Salesforce Classic and Lightning Experience, in Professional, Enterprise, Performance, Unlimited, and Developer Editions. Health Check comes with the org at no extra cost.
To view Health Check and export baselines, you need the "View Health Check" permission. To import a custom baseline, you need "Manage Health Check". The "View Security Center" or "Manage Security Center" permission also allows either action.