Salesforce Security Health Check
Free native feature that rates your org security on a 0-100 scale. Checks password policies, session settings, network access, and sharing rules against recommended baselines. Exports findings as CSV.
Why it ranks here
- Best free security audit for Salesforce; fast and executive-friendly score
- Benchmarks against Salesforce recommendations; no guessing
- Limited to security only; does not cover broader governance
Where it sits
- Narrower than Optimizer: security only, not general org health
- Free like Optimizer; less customizable than Elements governance templates
- Faster than manual Setup audits for password and session policies
How GTM Systems teams use it
- Run before SOX or ISO audits to identify gaps
- Share score with CISO or compliance teams as proof of secure configuration
- Benchmark against industry standards or peer orgs
- Schedule quarterly reviews and track score trends over time
In-depth notes
- Free; included in every Salesforce org
- Baseline is Salesforce opinion; may not match your security policy
- Score can drop after legitimate changes like relaxing IP restrictions for remote work
- Does not audit custom code or third-party apps; only native settings
- Some orgs ignore recommendations that conflict with business needs
Best for
Compliance and security teams that need quick Salesforce-specific audits
Avoid if
You need broader governance or metadata analysis; this is security-only
The rest of Documentation & governance
Elements.cloud Leader Metadata analysis plus process mapping; ties org config to documented business processes #3 
Metazoa Snapshot Strong Metadata backup and comparison tool with dependency views and field usage reports #4 
Sweep Strong Visual process mapping tool that auto-generates flow diagrams from Salesforce automations #5 Field Trip Strong Field usage analytics; shows which custom fields are actually used in records and reports #6 
Salesforce Optimizer Situational Native Salesforce tool that scans org setup and suggests performance and best-practice improvements #8 Config Workbook Situational Excel or Google Sheets template for manually documenting Salesforce configuration and business processes #9 
Salesforce Data Dictionary Niche Native in-app metadata browser showing field definitions, dependencies, and usage Learning guide
Setup
Open Health Check from Setup (no install), run the scan, then review your 0-100 security score and findings against Salesforce baseline standards.
First thing to build
Run your first audit before a SOX or ISO review, fix the top findings to raise your score, then export the results as CSV to share with compliance teams.
What actually matters
- Checks password policies, session settings, network access, and sharing rules
- Benchmarks against Salesforce recommendations automatically
- Does not audit custom code or third-party apps
- Refresh by running a new scan manually each quarter
Watch out
The baseline is Salesforce opinion; your score can drop after legitimate changes like relaxing IP restrictions for remote work.