Security Center: see, scan and act on every app in your workspace

Every app your team ships is one more thing to secure — and checking them one at a time doesn't scale. Security Center brings your whole workspace's security into a single view.

TL;DR: Security Center

• Security Center gives workspace admins one place to see, scan and act on the security of every app in the workspace.
• Every app in one view: owner, visibility, risks and last scan.
• Scan across the workspace, up to 20 apps at a time, now with two new checks: Software Composition Analysis (SCA) and static code analysis (SAST).
• Act from the same screen: unpublish, transfer ownership or run bulk actions.
• Available now on Enterprise, under Settings, Security & Control.

Security Center gives you one place to see, scan and act on the security of every app in your workspace. Instead of checking apps one at a time, you get the whole portfolio in one view, scan across all of it, and act on what matters. Here's how it works.

See every app in one view

Security Center lives under Settings, Security & Control, and shows every app in your workspace in one table: who owns it, whether it's private or public, the risks a scan has found and when it was last scanned. Three tiles up top show the shape of your workspace at a glance: total apps, apps at critical or high risk and apps that haven't been scanned yet. From there, sort and filter by risk level, visibility, has SSO, scan state or activity, add the columns you care about, and export the view for reporting.

Scan across the workspace

Security Center is built on Base44's Security Scan, the per-app check that already looks for issues like exposed secrets, backend function risks, RLS gaps and security headers. Security scan now includes two new checks, Software Composition Analysis (SCA), which scans your app's dependencies, and static code analysis (SAST), which scans the code.

Security Center brings all of that together. Run a scan on a single app or across the workspace and every result lands in one view, showing the severity from critical to low, so it's clear where to look first.

The real shift is seeing it all in one place. Instead of checking apps one by one, Security Center gives you a single, centralized view of every app's security, with the visibility and control to decide what needs action and what's fine to leave.

Act on what matters

Seeing the risk is step one. Acting on it is where the Security Center earns its place. From the same screen you can unpublish a risky app, transfer ownership or run those actions in bulk across a set of apps. Pending publish requests show up in one list too, so nothing slips through an inbox.

Security Center is about seeing your whole workspace clearly and making faster, better-informed decisions about what actually needs your attention.

Available now

Security Center is available on Enterprise, under Settings, Security & Control. Open it to see every app in your workspace and run your first scan across all of them. For setup and the full technical detail, read the Security Center guide.

Security Center FAQ

What does Security Center scan for?

Security Center surfaces the results of Base44's Security Scan, which checks each app for exposed secrets, backend function risks, row-level security (RLS) gaps and security header issues, plus two new checks: Software Composition Analysis (SCA), which scans app dependencies, and static code analysis (SAST).

How many apps can I scan at once?

Up to 20 at a time. Run a scan on a single app or select a group, and Security Center works through them in batches.

What's the difference between Security Center and the per-app Security Scan?

Security Scan runs on a single app, inside that app, and now includes the new SCA and SAST checks. Security Center brings every app's scan results together across your whole workspace, and lets you scan in bulk and act on findings across many apps at once.

Is Security Center available on my plan?

Security Center is available on Enterprise. You'll find it under Settings, Security & Control.

Related reading

• Enterprise connector controls and role-based publishing: now IT can finally say yes
• Base44 production pack: three new features to help you publish with confidence