What is the Health Check score and how do you improve it?

The Health Check tool (Setup > Health Check) gives an org a security score (0–100) by comparing security settings against Salesforce's Baseline Standard or a custom security baseline. It evaluates: password policies (complexity, expiry, history), session settings (timeout duration, HTTPS enforcement, clickjack protection), login access policies, My Domain settings, and remote site settings. Each setting is rated as Meeting Standard, Failing, or a Risk Level. To improve the score:

1. Increase minimum password length and complexity requirements.
2. Reduce session timeout to shorter periods.
3. Enable HTTPS for Visualforce pages.
4. Enable clickjack protection.
5. Review and restrict remote site settings.
6. Enable certificate-based authentication where applicable. Health Check does not capture all security risks — use it alongside Shield and regular security reviews.