---
schema_version: "1"
id: 547d562593f83f649d51f0f2ea74d9ae3c7bcb19814f68350b720ffec0a29b3d
title: Track Automated Security Responses in Security Center
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/264-0-0/rn_security_center_response_log.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_center_response_log.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 65aae6d2f29ab2dfd9cbfc795d581161c36fc8ea789c84c291e2e8c0212352f1
description: When Salesforce Security detects a threat, it automatically takes containment action on your behalf. The Response Log in Security Center shows each response in detail, including action type, status, target entity, and timestamps for the threat detection and the response. Because the log shows only completed actions, you can quickly distinguish resolved threats from items that still need your attention.
products:
  - Cross Cloud
release: "264"
---
# Track Automated Security Responses in Security Center

When Salesforce Security detects a threat, it automatically takes containment action on your behalf. The Response Log in Security Center shows each response in detail, including action type, status, target entity, and timestamps for the threat detection and the response. Because the log shows only completed actions, you can quickly distinguish resolved threats from items that still need your attention.

**Where:** This change applies to Lightning Experience in Enterprise and Unlimited editions with the Security Center add-on license. Available at no cost in Developer Edition.

**When:** This feature is available in mid-October 2026.

**How:** From the App Launcher, find and select Security Center. On the dashboard, under Security Landscape, click **Response Log**. To see details for a specific action, click the action's link.

![Security Center response log showing 10 success responses for the Step-Up MFA Reauthorization action.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-release-notes-salesforce_release_notes-264-0-0-production-enus/550ba85b-db1a-4608-9cd4-9a65ec96e1fa/salesforce_release_notes/images/rn_sc_response_log_list.png)

![Security Center response log popup showing details of a Step-Up MFA Reauthorization action, including Status, Action Performed By, and Timestamps.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-release-notes-salesforce_release_notes-264-0-0-production-enus/550ba85b-db1a-4608-9cd4-9a65ec96e1fa/salesforce_release_notes/images/rn_sc_response_log_detail.png)