New hardening settings for baseline 9.0

---
title: New hardening settings for baseline 9.0
description: New hardening settings are available in Security Center baseline version 9.0.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/platform-security/instance-security-hardening-settings/new-hardening-settings-for-baseline-nine.html
release: brazil
product: Instance Security Hardening Settings
classification: instance-security-hardening-settings
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 4
keywords: [security hardening, baseline 9.0, security center]
breadcrumb: [New hardening settings, Baseline versions, Hardening settings, Platform Security]
---

# New hardening settings for baseline 9.0

New hardening settings are available in Security Center baseline version 9.0.

-   [Apply static analysis to all users](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-apply-static-analysis-to-all-users.md)
-   [Capture audit records for Code Signing-protected records](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-capture-audit-records-for-code-signing.md)
-   [CSRF enforcement for session-authenticated REST APIs](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-csrf-enforcement-for-session-authenticated-rest-apis.md)
-   [Disable log-and-allow mode for cross-scope dot-walk access](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-disable-log-and-allow-cross-scope-dot-walk-access.md)
-   [Enable anti-CSRF token](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-anti-csrf-token.md)
-   [Enable CRL-based certificate revocation checking for outbound HTTP requests](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-crl-based-checking-for-outbound-http-requests.md)
-   [Enable CSRF enforcement for authenticated processors](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-csrf-enforcement-for-authenticated-processors.md)
-   [Enable MID Server governance checks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-mid-server-governance-checks.md)
-   [Enable sanitization of inbound virtual agent chat messages](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-sanitization-of-inbound-virtual-agent-chat-messages.md)
-   [Enable static analysis](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-static-analysis.md)
-   [Enable synchronous mode for static analysis](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enable-synchronous-mode-for-static-analysis.md)
-   [Enforce CRL certificate revocation checking for outbound HTTP requests](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-certificate-revocation-check.md)
-   [Enforce cross-scope table access when performing dot-walk](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-cross-scope-table-access-when-performing-dot-walk.md)
-   [Enforce domain access control on all tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-domain-access-control-on-all-tables.md)
-   [Enforce least privilege on scoped MCP OAuth tokens](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-least-privilege-in-scoped-outbound-tokens.md)
-   [Enforce signature verification for Flow Designer artifacts](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-signature-verification-for-flow-designer-artifacts.md)
-   [Enable KittyScript sandbox security enforcement](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-kittyscript-sandbox-security.md)
-   [Enforce KittyScript validation for guest sessions](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-kittyscript-validation.md)
-   [Enforce strict deny for ACLs referencing only deleted or non-existent roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-enforce-deny-acls-referencing-deleted-roles.md)
-   [Ensure MID Server Users Have Appropriate Access Levels](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-ensure-mid-server-users-have-appropriate-access-levels.md)
-   [Limit basic authentication restriction allowed users](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-limit-basic-auth-restriction-allowed-users.md)
-   [Limit basic authentication restriction allowed roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-limit-basic-authentication-restriction-allowed-roles.md)
-   [Minimize session activity timeout duration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-session-activity-timeout.md)
-   [Normalise REST API access policy key generation](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-normalise-rest-api-access-policy-key-generation.md)
-   [Prevent disabling of data separation enforcement](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-prevent-disabling-of-data-separation-enforcement.md)
-   [Prevent unauthenticated roleless ACL in scripted ACLs](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-prevent-unauthenticated-roleless-acl-in-scripted-acls.md)
-   [Restrict exposure of validation error details to end users](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-restrict-exposure-of-validation-error-details-to-end-users.md)
-   [Restrict MID IPKI registration key retry attempts](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-restrict-mid-ipki-registration-key-retry.md)
-   [Restrict platform analytics export to authorized roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-restrict-platform-analytics-export.md)
-   [Restrict script authorship to authorized users only](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-restrict-script-authorship-to-authorized-users.md)
-   [Require JWT trust verification for guest embedded sessions](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-require-jwt-trust-verification-for-guest-embedded-sessions.md)
-   [Restrict vault code signing audit exclusion to defaults](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-restrict-vault-code-signing-audit-exclusion-list-to-default-tables.md)
-   [Set basic authentication restriction default decision](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-set-basic-authentication-restriction-default-decision.md)

**Parent Topic:**[New hardening settings](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/hardening-settings-new.md)