Each tool, and when to pick it
Salesforce Health Check
Health Check lives in Setup and gives one summary score for how the org's security settings compare with a baseline. Salesforce describes it as a way for admins to identify and fix potential vulnerabilities in security settings from a single page. Settings are grouped into High-Risk, Medium-Risk, Low-Risk and Informational, and Informational settings do not count toward the score. You can compare against the Salesforce Baseline Standard or a custom baseline.
When to pick it: Start here, whatever else you use. It is already in the org and it is the reference score for security settings. It does not look at automation, data model, Apex or unused metadata, so it is a security baseline and not a full org assessment.
Org Check
Org Check is a Salesforce Labs project described as an easy-to-install Salesforce application and sf plugin for quickly analysing an org and its technical debt. The app is installed in the org being analysed and has a UI for viewing and exporting results. The sf plugin runs on your own machine against any org you can reach with the CLI and writes JSON, CSV or XLSX. Both use the same analysis logic, and the source is public on GitHub under the MIT licence.
When to pick it: Pick Org Check when you want a technical-debt scan with no vendor account and no licence to buy, when you are comfortable installing a package or running a CLI command, and when you want to read or extend the code yourself. You run it and you act on the results.
Gearset
Gearset is a Salesforce DevOps platform with two products relevant to org health. Org Intelligence maps an org's metadata, automations, dependencies and permissions and adds AI-generated summaries and an agent you can query, so teams can see the impact of a change before making it and find technical debt, unused fields and redundant automations. Observability monitors Flow and Apex errors and org limits such as API, storage and email limits, with alerts in Slack and Microsoft Teams.
When to pick it: Pick Gearset when the need is deployment pipelines, change monitoring and ongoing error and limit alerting, or when your team already ships through Gearset. For that job it is the stronger choice than anything else on this page.
Elements.cloud
Elements.cloud positions its org healthcheck for consultants assessing a client org and for teams maintaining their own. It gives a structured view of metadata, customisations and technical debt, flags data skew, inefficient automations and hidden dependencies, and reviews the risks in profiles and permissions. It also lets you ask questions about the org's metadata in natural language. The same platform is used for documentation and change-impact analysis.
When to pick it: Pick Elements.cloud when the assessment is the start of a larger documentation, dependency-analysis or org-redesign effort and you want the findings to live next to that documentation.
Metazoa Snapshot
Snapshot is an org management toolset covering technical-debt removal, security optimisation, compliance documentation, change-impact analysis, release management and org split, clone and merge work. Its reports can be scheduled, and Metazoa's services team offers an org monitoring service that watches any number of orgs and sends email alerts when something looks wrong.
When to pick it: Pick Snapshot for large or regulated environments that need recurring compliance and security reports, or when the health work is part of an org merge, split or large cleanup project.
Wrenk
Wrenk runs a health check against a connected Salesforce org and scores only what the customer owns. Managed-package metadata is attributed to its vendor and left out of your score, and checks for products the org does not have are reported as not assessed instead of passed or failed. Each finding states what was measured and what could not be read. Wrenk can also make the fix: it plans the change, runs it in a sandbox first when one is connected, and asks for explicit confirmation before any production write. It works in the Wrenk web app and inside Claude and ChatGPT through an MCP connector, and it also supports HubSpot portals.
When to pick it: Pick Wrenk when you want the findings and the remediation in one place, when you work in Claude or ChatGPT, or when you also run HubSpot. If you only need a deployment pipeline, Gearset fits better. If you only need a free scan you run yourself, use Org Check.