Take Charge of Your Security with Security Command Center (Beta)

Maintaining security, privacy, and governance policies across multiple tenants is critical and often time-intensive work. Enter Security Command Center, a tool for monitoring all of your tenants’ security settings in one app. Use Security Command Center to see who’s logging in with which authentication protocols, review permission assignment changes, and more. You can even review average and per-tenant health check scores without going to each tenants’ Health Check page.
Where: This feature is available in all editions.
Note

Note

As a beta feature, Security Command Center is a preview and isn’t part of the “Services” under your master subscription agreement with Salesforce. Use this feature at your sole discretion, and make your purchase decisions only on the basis of generally available products and features. Salesforce doesn’t guarantee general availability of this feature within any particular time frame or at all, and we can discontinue it at any time. This feature is for evaluation purposes only, not for production use. It’s offered as is and isn’t supported, and Salesforce has no liability for any harm or damage arising out of or in connection with it. All restrictions, Salesforce reservation of rights, obligations concerning the Services, and terms for related Non-Salesforce Applications and Content apply equally to your use of this feature. For information on enabling this feature in your org, contact Salesforce.

Who: Security Command Center is available as an add-on subscription. To view the dashboard and metric pages, assign the View Security Command Center Pages permission. To manage connected tenants, assign the Manage Security Command Center permission.

Why: When you know how your tenants are performing, you can limit risks and shorten security review processes. Security Command Center gives you clear insights into how you're meeting your security goals so that you can respond proactively to suspicious conditions. And during periods of growth or change, Security Command Center can help you monitor changes that touch sensitive customer data.

How: Contact Salesforce to enable Security Command Center. Salesforce works with you to add the app to a tenant of your choice. After it’s enabled, log in to that tenant and select Security Command Center from the App Launcher. You control which of your tenants feed data into the Security Command Center app. Security Command Center gathers updates from all connected orgs once per day.

The dashboard shows aggregate data from all connected tenants. You can see average health check scores for all connected orgs (1) and day-to-day changes for all supported metrics in connected orgs (2). Each metric includes a timestamp of when the app last updated (3). Want to see what’s happened on a specific day? Click a metric name.

The Security Command Center dashboard showing an average health check score, login metrics for connected tenants, and data about users with the View All Data permission.

The metric detail view shows a daily snapshot of changes for each metric. The Changes view shows day-over-day changes, while the All Data view displays all data broken down by tenant. See something of interest? Choose a date from the picker (4). The lower half of the screen lists details that give you critical context for settings, actions, and events of interest (5). And because Security Command Center stores details for 6 months, you can monitor changes to user behavior over time during periods of change.

The Security Command Center detail page shows charts for changes in each metric over time, and all data for each metric broken down by tenant.