Note: This release is in preview. Features described here don’t become generally available until the latest general availability date that Salesforce announces for this release. Before then, and where features are noted as beta, pilot, or developer preview, we can’t guarantee general availability within any particular time frame or at all. Make your purchase decisions only on the basis of generally available products and features.

SecurityHealthCheckRisks

Represents your org’s security setting values, risks, and Salesforce-recommended setting values. Only users with the "View Setup and Configuration" user permission can retrieve data from this object. Available in Tooling API version 37.0 and later.

Supported SOAP Calls

query()

Supported REST HTTP Methods

GET

Fields

Field	Details
DurableId	Type string Properties Filter, Group, Nillable, Sort Description Unique identifier for the field. Always retrieve this value before using it, as the value isn’t guaranteed to stay the same from one release to the next. To simplify queries, use this field.
OrgValue	Type string Properties Filter, Nillable, Sort Description The org’s value for the security setting.
OrgValueRaw	Type string Properties Filter, Nillable, Sort Description The org’s value for the security setting as it is stored in the database, usually without units of measure or extra text. For example, if the Minimum Password Length setting’s OrgValue is `8 characters`, the OrgValueRaw is `8`.
RiskType	Type picklist Properties Filter, Group, Nillable, Restricted picklist, Sort Description The level of risk of the org’s security setting value. Valid values are: `HIGH_RISK` `MEDIUM_RISK` `MEETS_STANDARD`
SecurityHealthCheckId	Type string Properties Filter, Group, Nillable, Sort Description The ID of the Health Check score record associated with this field.
Setting	Type string Properties Filter, Group, Nillable, Sort Description The name of the security setting. For example, `Minimum password length`.
SettingGroup	Type string Properties Filter, Group, Nillable, Sort Description The name of the security setting group in which the setting resides in the Setup tree. For example, `Password Policies`.
SettingRiskCategory	Type picklist Properties Filter, Group, Nillable, Restricted picklist, Sort Description The level of risk of the org’s security settings. Available in version 40.0 and later. Valid values are: `HIGH_RISK` `MEDIUM_RISK` `LOW_RISK` `INFORMATIONAL`
StandardValue	Type string Properties Filter, Nillable, Sort Description Salesforce-recommended standard value for the security setting.
StandardValueRaw	Type string Properties Filter, Nillable, Sort Description Salesforce-recommended standard value for the security setting as it is stored in the database, usually without units of measure or extra text. For example, if the Minimum Password Length setting’s StandardValue is `8 characters`, the StandardValueRaw is `8`.

Usage

Use this object to query your org’s security setting values, risks, and Salesforce-recommended setting values. Reading security settings and their security status is useful if you have multiple Salesforce applications that require consistency and compliance in their security posture.

This query gets a list of your org’s high risk settings.

This query gets your org’s Health Check score and a list of your org’s high risk settings.

This query gets your org’s Health Check score and the security settings that meet the Salesforce baseline standard.

This query lists all the values in the Salesforce baseline standard.