What is Salesforce Health Check and Security Center, and how do you use them architecturally?

Health Check: A Salesforce Setup tool that evaluates your org's security configuration against the Salesforce Baseline Standard (or a custom security standard). It produces a score (0–100) across categories: Remote Site Settings, Session Settings, Password Policies, Network Access, and Certificate/Key settings. Each finding is rated as High Risk, Medium Risk, Low Risk, or Informational.

Security Center: Available for multi-org environments (Enterprise/Unlimited with add-on). Aggregates Health Check scores across multiple orgs into a central Security Center org. Allows org comparison, trend tracking, and bulk remediation guidance.

Architectural use:
- Run Health Check during every architecture review and before go-live.
- Set a minimum acceptable score (e.g., 90+) as a deployment gate in CI/CD pipelines.
- Use Security Center to enforce security baseline consistency across multi-org landscapes.
- Address high-risk findings first: overly permissive session settings (long timeout, no re-authentication), weak password policies, and broad Remote Site Settings.
- Custom security standards allow organisations to add their own internal security controls to the check.