Review your security posture in one place
Published: September 1, 2026
Security-relevant settings for a project live across several pages in Manage. A new Security tab collects them into one view, available at both project and organization level.
The Security tab shows:
- Members and how many hold admin access
- Long-lived API tokens with no expiration set
- CORS configuration, including origins worth reviewing
- Which datasets are publicly readable
- SAML status, on plans that include it
Each recommendation links to the page where you can act on it. The tab is read-only and free for all users, with no configuration required.
Related documentation
Roles
Sanity enforces user access control with roles. Roles help control resource access to datasets and documents.
CORS and browser security
Best practices for configuring CORS origins securely while letting trusted websites interact with your Sanity Dataset.
Authentication and tokens
How to create tokens and make authenticated requests.