---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Baseline version 8.0

# New hardening settings for baseline 8.0 {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
New hardening settings have been released with Security Center baseline version 8.0.

* [Enforce field-level ACLs on records created from the filtered list view UI query string](https://www.servicenow.com/docs/74a1GyfIhaJs9tc0ZZvGSA "Use a system property to prevent list filters from affecting the initial values of created records.")
* [Enable IAM and boundary checks for Amazon Bedrock access](https://www.servicenow.com/docs/U71acmj5xLuznZtRajd5Nw "Enable IAM and Boundary Checks for Amazon Bedrock access.")
* [Enable Guardian for External Agents](https://www.servicenow.com/docs/TKbUMsIDXgO~wopCZ6yRCA "Use a system property to protect your Language Learning Models (LLMs) with Guardian.")
* [Enable Identity and Access Audit tool](https://www.servicenow.com/docs/os_X2rnxlss2SaZ~T4hO2A "Use Identity and Access Audit to track changes to user accounts, groups, and roles.")
* [Validate MIME Type of Attachments from Inbound Emails](https://www.servicenow.com/docs/XNH~fQhf5XiCjYRm1KecGQ "Use a system property to validate attachments uploaded from inbound emails.")
* [Enable Jelly JS interpolation protection](https://www.servicenow.com/docs/ai1JKRlI7Z7Y25YrwbU05w "Use the glide.ui.jelly.js_interpolation.protect property to ensure that any JavaScript about to be executed on a Jelly page is protected from injection with the help of Jelly interpolation.")
* [Prohibit Use of KBA as Single Factor for AI Voice](https://www.servicenow.com/docs/JMeFaTQNqZC0HIxbqTxMmA "Use a system property to prevent Knowledge Based Authentication (KBA) from being the only factor of authentication required to authenticate to the platform for AI voice.")
* [Require Multi-Factor Authentication for AI Voice Agent](https://www.servicenow.com/docs/Z5HYLLhnJQkBSBTEf_DRdw "Use a system property to control whether Multi-Factor Authentication (MFA) is required for the AI voice agent authentication feature.")
* [Log Impersonation History](https://www.servicenow.com/docs/UXPQP1_VHJi8pYwk9Rjcig "Enable impersonation history logging using a system property.")
* [Validate MIME type for multi-extension filenames and polyglot files](https://www.servicenow.com/docs/1kDIpaIY2rR8fOTZWFp7pg "Use a system property to prevent attachments from bypassing MIME-type restrictions.")
* [Enable Jelly JS interpolation protection for nested expressions](https://www.servicenow.com/docs/RMBRH1n1QfUZQgOMbs8tHA "Manage the interpolation protection on your instance.")
* [Enable Role Masking for Agents](https://www.servicenow.com/docs/dj6Hqp3Cexzj0Y59_WA_uA "Use a system property to enable the role masking feature.")
* [Disable adding default roles to skill ACLs](https://www.servicenow.com/docs/zGrT1Ea3TDWweA5xgcXxIg "Use system properties to control what roles are automatically added to generative AI skill ACLs.")
* [Prevent Reuse of REST API Sessions in UI/Web](https://www.servicenow.com/docs/_akdHNglu7ZEMdvaWLdpxg "Prevent REST API session cookies from bypassing Single Sign-On (SSO) and Multi-Factor Authentication (MFA) controls using a system property.")
* [Enable Anti-CSRF Token for Userperf](https://www.servicenow.com/docs/cQ4lN7dWJzJE_qk5BmvI1A "Use a system property to ensure CSRF (Cross-Site Request Forgery) protection is enforced when setting user preferences.")
* [Track Impersonation Events](https://www.servicenow.com/docs/t64z1diw46fXtFrkvqJgvg "Enable impersonation event tracking using a system property.")
* [Disable Voice Chat Guest Impersonation](https://www.servicenow.com/docs/dH06ruTS9bzF6cQq7s~73g "Use a system property to ensure that voice interactions/conversations are recorded under the appropriate internal integration user.")
* [Prevent OAuth Clients from Using Implicit Grant](https://www.servicenow.com/docs/ckpWDj0UjThxlyQ7tjff2g "Use a system property to avoid the use of the implicit grant type.")
* [Enforce Scope Access Controls on New Tables](https://www.servicenow.com/docs/sipTWgLVnAey6mXK840KJA "Use a system property to enforce cross-scope access checks for newly created tables.")
{#new-hardening-settings-for-baseline-eight__ul_dfr_hks_43c}