Overview

Security Observatory

Everything you need to review, in one place. Five review areas cover findings, identity, external connections, entitlements and the evidence behind them. Server-side collection and retained evidence stay inside Salesforce; authenticated-browser CSV preparation and the downloaded file are separate boundaries.

Request access when available

Product guide

Overview plus five review areas

Each review area shows what the Observatory surfaces and how far the evidence goes.

Findings

Triage retained risk evidence and open safe detail.

Open Findings →

Identity & Access

Users, sessions, login evidence and broad access posture.

Open Identity & Access →

External Connections

OAuth, credentials, sites and endpoint exposure.

Open External Connections →

Entitlements & Assets

Licence capacity, privileged access and governed assets.

Open Entitlements & Assets →

Evidence & Coverage

Rendered state, Coverage, retained comparison and bounded export controls.

Open Evidence & Coverage →

Product boundaries

Separated runtime boundariesCollection and retention occur inside the subscriber Salesforce organisation. The LWC prepares the allow-listed CSV in the authenticated browser session; downloading it creates a file outside Salesforce.
Read-only assessmentThe Observatory is advisory. It does not remediate or modify the Salesforce security configuration it assesses. Product-owned records retain scan results, evidence, findings and comparison data.
Evidence-boundedUnavailable sources and validation limits remain visible.
Sandbox-firstNot yet available for public installation.

Licence assignment evidence: in V1, each scan retains up to 1,000 assignment evidence records for each of the three licence families — Package Licences, Permission Set Licences and Salesforce User Licences — so at most 3,000 across those families per scan. This limits retained evidence only; it does not limit how many Salesforce users, licences or assignments your org can have. Where the full population cannot be retained safely, that evidence is reported as Incomplete rather than shown as complete.

Assignment identities are Everything-only. The 3,000-record maximum is theoretical; actual safe capture may be lower — including zero — because Salesforce transaction and DML headroom must be preserved. A zero captured count does not mean zero assignments and cannot be Complete; an unknown expected count remains unknown. Licence-capacity totals and Balanced holding summaries are separate from individual assignment evidence, and capped retained counts are not organisation totals.