Portal Health Check

Portal Health Check is a Setup tool that evaluates the security configuration of Experience Cloud sites (formerly Community portals) against Salesforce's recommended security standards. It identifies vulnerabilities such as excessive guest user permissions, insecure sharing rules, and missing authentication requirements.

Experience Cloud sites (formerly Communities) have unauthenticated guest users, and configuring access for those users is the part most likely to go wrong. Portal Health Check is Salesforce's automated audit. It scans your Experience Cloud configuration against a security baseline and flags the issues that matter most: guest user profiles with too much access, sharing rules that expose records publicly, missing authentication requirements, weak session handling.

The reason it's worth running periodically is that secure-when-launched doesn't stay true automatically. New objects get added with default sharing, new fields get exposed with overly broad field-level security, new sharing rules get created without the guest-access implications considered. Run Portal Health Check whenever you change the configuration of an Experience Cloud site, after any Salesforce release that touches sharing, and on a quarterly cadence regardless. It's free, it's fast, and it catches the kind of mistake that becomes a public news story.