The Security Health Check is your centralized page for reviewing the status of your workspace security. It gives you a clear, digestible snapshot of what’s enabled, what needs attention, and where to go to turn on recommended protections.
While it doesn’t cover every security control in Intercom, it focuses on the settings that have the biggest impact on safeguarding your data and your customers. At a glance, you’ll see whether your workspace is secure or needs review, along with specific items that may require action.
This makes security management easier, faster, and more transparent, giving you confidence that your workspace meets your organization’s protection standards.
How to use Security Health Check
View your workspace’s security status
Review the Overall Security Status.
If unsafe settings are found, the status displays Issues found.
Otherwise, you’ll see Secure.
Expand each section to review detailed items that require attention.
Understand the Health Check sections
The Health Check groups settings into practical areas you already manage:
Authentication & Access – SSO and two-factor authentication (2FA) methods, secure session length, IP allowlisting, and identity verification links.
Messenger Security – Domain restrictions, session duration, mobile API endpoints, and HIPAA-friendly notification content.
Data Protection – PAN redaction, link safety warnings, file attachment controls, and protected attributes.
Mobile SDKs – Android and iOS identity verification setup, certificates, encrypted mode, and push configuration.
Each item includes a quick status and short explanation so you know exactly what’s working and what needs review.
Take action directly
When a setting needs attention, the Health Check helps you move fast.
Each row includes inline options such as Edit, Configure, or Open to go directly to the relevant settings page.
Small info icons next to each control link to the corresponding Help Center article so you can learn what the control does and how to enable it.
Note:
All outgoing links are sanitized to prevent unsafe redirects, ensuring a secure experience when making updates.
You need "Can manage general and security settings" permission to edit and configure your security settings.
If a workspace security contact is configured, their email appears at the top of the Health Check page for quick follow-up or escalation.
When to review the Health Check
We recommend reviewing your Security Health Check regularly, especially after:
Onboarding new teammates
Changing identity providers
Deploying the Messenger to new domains
Releasing mobile app updates
Keeping these high-impact settings up to date is one of the most effective ways to harden your Intercom workspace, prevent misconfiguration, and uphold your organization’s security standards.
FAQs
What does “Needs review” mean?
What does “Needs review” mean?
It indicates that one or more high-impact security configurations are disabled or misconfigured, such as email/password sign-in enabled or Messenger security disabled.
Can I fix settings directly from the Health Check?
Can I fix settings directly from the Health Check?
Yes. Use the inline Edit, Configure, or Open links to jump straight to the corresponding security settings.
Need more help? Get support from our Community Forum
Find answers and get help from Intercom Support and Community Experts