--- title: New hardening settings for baseline 9.0 description: New hardening settings are available in Security Center baseline version 9.0. locale: en-US canonical_url: https://www.servicenow.com/docs/r/platform-security/instance-security-hardening-settings/new-hardening-settings-for-baseline-nine.html release: brazil product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 4 keywords: [security hardening, baseline 9.0, security center] breadcrumb: [New hardening settings, Baseline versions, Hardening settings, Platform Security] --- # New hardening settings for baseline 9.0 New hardening settings are available in Security Center baseline version 9.0. - [Apply static analysis to all users](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-apply-static-analysis-to-all-users.md) - [Capture audit records for Code Signing-protected records](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-capture-audit-records-for-code-signing.md) - [CSRF enforcement for session-authenticated REST APIs](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-csrf-enforcement-for-session-authenticated-rest-apis.md) - [Disable log-and-allow mode for cross-scope dot-walk access](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-disable-log-and-allow-cross-scope-dot-walk-access.md) - [Enable anti-CSRF token](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-anti-csrf-token.md) - [Enable CRL-based certificate revocation checking for outbound HTTP requests](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-crl-based-checking-for-outbound-http-requests.md) - [Enable CSRF enforcement for authenticated processors](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-csrf-enforcement-for-authenticated-processors.md) - [Enable MID Server governance checks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-mid-server-governance-checks.md) - [Enable sanitization of inbound virtual agent chat messages](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-sanitization-of-inbound-virtual-agent-chat-messages.md) - [Enable static analysis](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-static-analysis.md) - [Enable synchronous mode for static analysis](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-synchronous-mode-for-static-analysis.md) - [Enforce CRL certificate revocation checking for outbound HTTP requests](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-certificate-revocation-check.md) - [Enforce cross-scope table access when performing dot-walk](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-cross-scope-table-access-when-performing-dot-walk.md) - [Enforce domain access control on all tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-domain-access-control-on-all-tables.md) - [Enforce least privilege on scoped MCP OAuth tokens](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-least-privilege-in-scoped-outbound-tokens.md) - [Enforce signature verification for Flow Designer artifacts](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-signature-verification-for-flow-designer-artifacts.md) - [Enable KittyScript sandbox security enforcement](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-kittyscript-sandbox-security.md) - [Enforce KittyScript validation for guest sessions](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-kittyscript-validation.md) - [Enforce strict deny for ACLs referencing only deleted or non-existent roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-deny-acls-referencing-deleted-roles.md) - [Ensure MID Server Users Have Appropriate Access Levels](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-ensure-mid-server-users-have-appropriate-access-levels.md) - [Limit basic authentication restriction allowed users](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-limit-basic-auth-restriction-allowed-users.md) - [Limit basic authentication restriction allowed roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-limit-basic-authentication-restriction-allowed-roles.md) - [Minimize session activity timeout duration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-session-activity-timeout.md) - [Normalise REST API access policy key generation](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-normalise-rest-api-access-policy-key-generation.md) - [Prevent disabling of data separation enforcement](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-prevent-disabling-of-data-separation-enforcement.md) - [Prevent unauthenticated roleless ACL in scripted ACLs](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-prevent-unauthenticated-roleless-acl-in-scripted-acls.md) - [Restrict exposure of validation error details to end users](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-restrict-exposure-of-validation-error-details-to-end-users.md) - [Restrict MID IPKI registration key retry attempts](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-restrict-mid-ipki-registration-key-retry.md) - [Restrict platform analytics export to authorized roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-restrict-platform-analytics-export.md) - [Restrict script authorship to authorized users only](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-restrict-script-authorship-to-authorized-users.md) - [Require JWT trust verification for guest embedded sessions](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-require-jwt-trust-verification-for-guest-embedded-sessions.md) - [Restrict vault code signing audit exclusion to defaults](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-restrict-vault-code-signing-audit-exclusion-list-to-default-tables.md) - [Set basic authentication restriction default decision](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-set-basic-authentication-restriction-default-decision.md) **Parent Topic:**[New hardening settings](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/hardening-settings-new.md)