Salesforce health check: a free one-week org review

In Setup, type Health Check in the Quick Find box and open it. You need the View Setup and Configuration permission. Settings that miss the baseline can be changed one at a time, and many can be moved to the baseline at once with Fix Risks. Salesforce warns that changing everything at once can affect something like an integration, so check what each change touches first.

Ours covers five areas: licenses and edition, data, automation, permissions and integrations. You get a written list of what we found and why it matters, ranked by what to fix first.

Organization, objects, fields and records. Organization settings control who can log in and how; object and field permissions control what each user can see and edit; record access comes from organization-wide defaults, the role hierarchy and sharing rules. The week's Permissions area checks all four.

Salesforce scores your security settings from 0 to 100 by how closely they match the baseline you measure against: its own standard, or one you import. Settings are grouped by risk, from High-Risk to Informational, and moving a setting to the more restrictive value typically raises the score. The score is a starting point; the week explains which gaps matter for how your team works.

The closer to 100, the closer your security settings are to the baseline you measure against, Salesforce's standard or one you import. Work through the settings marked High-Risk first, and check what each change touches before you make it: Salesforce warns that moving many settings at once can affect something like an integration.

Agentforce works from your Salesforce records and acts with the access you give it, so duplicate records and loose permissions carry straight into what an agent says and does. The week's Data and Permissions areas show both before you switch an agent on.

Health Check in Setup, for security settings. Org Check, a free Salesforce Labs app on AppExchange, for how the org is built. Salesforce Code Analyzer, for Apex and other code. Optimizer used to cover part of this and is now retired. None of them weighs what it finds against how your team uses Salesforce; that is what the week adds.

Health Check, because Optimizer is gone. Health Check reviews security settings and is still in Setup. Optimizer reviewed how the org was built; Salesforce retired it for Hyperforce orgs in the Winter '26 release and for all other orgs in Summer '26.

Ours costs nothing. The week is free because it shows you how we work, on your own org, before you spend anything, and the written list is yours whether or not you work with us afterwards.

Yes, when one of the signs on this page applies: reports rebuilt in spreadsheets, a renewal with no clear view of license use, Workflow Rules or Process Builder still active, automation nobody dares touch, sync errors nobody sees, or doubt about who can export records. Ours costs nothing, and the written list is yours either way.

Two things the week checks slow a save down: automation stacked on the same object, where Workflow Rules, Process Builder processes and Flows all fire on one save, and integrations writing into the same records. The list names what fires on your busiest objects and what to consolidate.

Ours takes one week, followed by a call to walk you through the list. Salesforce's built-in Health Check takes minutes, because it reads security settings only.

Run Salesforce's Health Check after each of its three releases a year, in February, June and October, and whenever security settings change. Book the free one-week health check before a license renewal, when your admin changes, or before new build work starts.

No. You create a user that can view your setup and read your records, usually with the View Setup and Configuration permission. The review reads and changes nothing, and you deactivate the user when the week ends.