Security Center overview
The Security Center answers the two questions every Salesforce admin gets asked in an audit:
- How safe is our org's configuration? — a security score with the findings behind it.
- Who has access to what? — down to a single object, field, or Apex class, in both directions.
[SCREENSHOT REQUIRED: Security Center account overview with score, KPIs, and orgs table]
How it works
The Security Center analyzes the security-relevant metadata captured by your Metadata Change Tracker — profiles, permission sets, and org security settings — and combines it with the live list of your active users and their permission assignments, read from your org with read-only queries. That combination is what makes the answers concrete: not just "this permission set is risky", but "these five users hold it today".
Because the analysis of your configuration runs on captured snapshots, checking your posture doesn't strain your org; only the user-assignment lookup touches Salesforce, and it's read-only.
What you'll find
- Account overview — the security score and key indicators for every connected org, side by side.
- Org view — one org's score, what needs attention, and its user-access overview.
- User drill-down — for any user: their effective access and why they have it. Every grant shows the profile or permission set it came from.
- Access lookup (reverse direction) — pick a permission, an object, a field, or an Apex class and see exactly which users hold access to it, and through what.
- Risky permissions — dangerous permissions (like Modify All Data) are consistently flagged and explained wherever they appear.
- Score trend — how your org's score evolves across captures.
Before you start
Set up a Metadata Change Tracker for the org first — the Security Center reads its captured snapshots. Fresh captures mean fresh analysis: schedule the tracker regularly.