BEGIN:VCALENDAR VERSION:2.0 PRODID:-//EzProtect - ECPv6.17.3.1//NONSGML v1.0//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:EzProtect X-ORIGINAL-URL:https://ezprotect.io X-WR-CALDESC:Events for EzProtect REFRESH-INTERVAL;VALUE=DURATION:PT1H X-Robots-Tag:noindex X-PUBLISHED-TTL:PT1H BEGIN:VTIMEZONE TZID:America/Vancouver BEGIN:DAYLIGHT TZOFFSETFROM:-0800 TZOFFSETTO:-0700 TZNAME:PDT DTSTART:20250309T100000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0700 TZOFFSETTO:-0800 TZNAME:PST DTSTART:20251102T090000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:-0800 TZOFFSETTO:-0700 TZNAME:PDT DTSTART:20260308T100000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0700 TZOFFSETTO:-0700 TZNAME:MST DTSTART:20261101T090000 END:STANDARD END:VTIMEZONE BEGIN:VTIMEZONE TZID:America/Chicago BEGIN:DAYLIGHT TZOFFSETFROM:-0600 TZOFFSETTO:-0500 TZNAME:CDT DTSTART:20250309T080000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0500 TZOFFSETTO:-0600 TZNAME:CST DTSTART:20251102T070000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:-0600 TZOFFSETTO:-0500 TZNAME:CDT DTSTART:20260308T080000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0500 TZOFFSETTO:-0600 TZNAME:CST DTSTART:20261101T070000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:-0600 TZOFFSETTO:-0500 TZNAME:CDT DTSTART:20270314T080000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0500 TZOFFSETTO:-0600 TZNAME:CST DTSTART:20271107T070000 END:STANDARD END:VTIMEZONE BEGIN:VTIMEZONE TZID:America/Los_Angeles BEGIN:DAYLIGHT TZOFFSETFROM:-0800 TZOFFSETTO:-0700 TZNAME:PDT DTSTART:20250309T100000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0700 TZOFFSETTO:-0800 TZNAME:PST DTSTART:20251102T090000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:-0800 TZOFFSETTO:-0700 TZNAME:PDT DTSTART:20260308T100000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0700 TZOFFSETTO:-0800 TZNAME:PST DTSTART:20261101T090000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:-0800 TZOFFSETTO:-0700 TZNAME:PDT DTSTART:20270314T100000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0700 TZOFFSETTO:-0800 TZNAME:PST DTSTART:20271107T090000 END:STANDARD END:VTIMEZONE BEGIN:VEVENT DTSTART;TZID=America/Vancouver:20260903T090000 DTEND;TZID=America/Vancouver:20260903T100000 DTSTAMP:20260808T184722Z CREATED:20260808T184722Z LAST-MODIFIED:20260808T184722Z UID:2415-1788426000-1788429600@ezprotect.io SUMMARY:Salesforce Security Office Hours with Saman Attar DESCRIPTION:Winter ’27 enforcement begins in September 2026\, and two of its changes reach into custom code that admins are often asked to approve without being able to read it. Profile Filtering limits users to seeing their own profile name unless they hold the View All Profiles permission\, so anything that reads another user’s profile name stops working for the people who lack it. Those references appear in validation rules and flows\, and they appear in Apex. The real security question is what happens next? \nGranting View All Profiles more widely restores the broken feature immediately and widens profile visibility across the org at the same time\, which makes the faster remediation the weaker one. The retirement of the OAuth 2.0 username-password flow raises the same question\, because Salesforce is removing that flow for the specific reason that it passes user credentials directly in HTTP requests\, and every connected app integration still using it will break. \nThis session gives admins and consultants enough Apex reading ability to open a class\, follow what a query is asking for\, how to check your Flows\, and Validation Rules as well. and judge whether it is exposed to either change. Demo will only be for how to do an Apex profile check and will not demo anything for the OAuth 2.0 retirement. \nNo prior Apex experience is assumed. Attendees will leave able to assess their own org’s code against the Winter ’27 changes\, where to go in Setup to enable settings ahead of the next release in your Sandbox\, and to recognize when a proposed fix restores a feature by loosening access. \nGuest speaker Saman Attar\, Senior Software Engineer at F5 and Founder of CampApex.org\, joins Matt Meyers\, CTA\, CoFounder and CEO of EzProtect. \nRegister for this event and we will see you online.  \n \n \n \n \n \n \n Register URL:https://ezprotect.io/event/salesforce-security-winter-27-apex-profile-filtering/ CATEGORIES:Virtual ATTACH;FMTTYPE=image/jpeg:https://ezprotect.io/wp-content/uploads/2026/08/Salesforce-Security-Office-Hours_Web-2026-08-08T134409.244-scaled.jpg END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/Chicago:20260915T080000 DTEND;TZID=America/Chicago:20260917T170000 DTSTAMP:20260901T193843Z CREATED:20260901T193843Z LAST-MODIFIED:20260901T193843Z UID:2945-1789459200-1789664400@ezprotect.io SUMMARY:Meet EzProtect at Dreamforce 2026 DESCRIPTION:EzProtect is coming to Dreamforce 2026\, and we are bringing our Salesforce security experts to San Francisco.  \nConnect with our Salesforce security experts\, AnneMarie Bos and Matt Meyers\, CTA and CEO and Founder of EzProtect\, to learn how EzProtect scans every file and URL with Sophos and Bitdefender before a threat ever reaches your org. \nJoin Matt on stage for his session\, “A Governance Playbook for Agentforce and MCP\,” on Thursday September 17 at 2:00 PM in Moscone South\, Content Pavilion\, Stage 6. He will cover the governance patterns that keep agents accountable as they connect to tools across your business\, including trust boundaries\, human approvals\, observability\, and secure agent orchestration. \nWe look forward to seeing our Salesforce partners\, customers\, and security community in San Francisco. URL:https://ezprotect.io/event/salesforce-security-dreamforce-2026/ CATEGORIES:In-Person ATTACH;FMTTYPE=image/jpeg:https://ezprotect.io/wp-content/uploads/2026/09/Dreamforce-Events-1-scaled.jpg END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/Vancouver:20261001T090000 DTEND;TZID=America/Vancouver:20261001T100000 DTSTAMP:20260908T000510Z CREATED:20260902T202849Z LAST-MODIFIED:20260908T000510Z UID:2982-1790845200-1790848800@ezprotect.io SUMMARY:Salesforce Security Office Hours with Mike Rogan DESCRIPTION:Connecting an AI client to a Salesforce org is now a short setup task. An admin activates the MCP servers\, creates an External Client App\, and a user authorizes the connection from Claude. From that moment the agent operates with exactly the permissions of the person who authorized it. Every tool call respects that user’s object permissions\, field level security\, and sharing rules\, and every action carries that user’s name in the audit trail. \nThat design is sound\, and it is also the problem. Most orgs have never audited what one user can reach. The permission set granted for a 2022 project is still assigned\, and the profile cloned from System Administrator is still in use. None of that mattered much when access meant a person clicking through screens. It matters when an agent queries the same surface in seconds. \nThis session treats the MCP connection as an access review trigger rather than an integration task. It examines the controls Salesforce ships for this purpose\, including read only servers\, Named Queries\, and restrictions on which profiles can connect. \nAttendees will leave with an access review sequence to run before the first connection is authorized\, and the API log filter that shows what agents did afterward. \nThis is an interactive session. Bring your burning questions about Salesforce security and get them answered live by guest speaker Mike Rogan\, Founder and CTO of Wayfinder\, and host Matt Meyers\, CTA\, CoFounder and CEO of EzProtect. \nRegister for this event and we will see you online.  \n \n \n \n \n \n \n Register URL:https://ezprotect.io/event/salesforce-mcp-access-review/ CATEGORIES:Virtual ATTACH;FMTTYPE=image/jpeg:https://ezprotect.io/wp-content/uploads/2026/09/Salesforce-Security-Office-Hours_Web-4-scaled.jpg END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/Vancouver:20261015T090000 DTEND;TZID=America/Vancouver:20261015T100000 DTSTAMP:20260930T083343Z CREATED:20260929T162738Z LAST-MODIFIED:20260930T083343Z UID:3256-1792054800-1792058400@ezprotect.io SUMMARY:Salesforce Security Office Hours with Nicolas Vuillamy DESCRIPTION:A Salesforce team decides to adopt an open source tool. The evaluation stops at whether it works\, because the person testing it is solving a delivery problem and nobody owns the question of what else it can reach. \nOpen source is how most Salesforce teams get capabilities they could never get approved as a purchase\, and treating it as free is not the same as treating it as safe. The practices that separate those two are not complicated\, but they get applied inconsistently\, and the gaps surface only after something runs with production credentials. \nThis session follows a single adoption decision from first install to steady state. Attendees see how to read a project for maintenance and publisher signals before trusting it\, why a pinned version behaves differently from a floating tag in a pipeline\, what credentials the tool actually needs and how to grant it less\, where secrets slip into a repository during ordinary work\, and how to keep it patched once it is load bearing. \nAttendees will leave with a review standard they can apply to any open source project their team adopts\, and the argument for why open source becomes the more defensible choice when it is operated deliberately. \nNicolas Vuillamy is CTO France at Cloudity and creator of the open source projects sfdx-hardis and MegaLinter. He joins host Matt Meyers\, CTA and CoFounder and CEO of EzProtect. Bring your toughest Salesforce security questions\, because Nicolas and Matt will take them live. \nRegister for this event and we will see you online.  \n \n \n \n \n \n \n Register URL:https://ezprotect.io/event/salesforce-open-source-security/ CATEGORIES:Virtual ATTACH;FMTTYPE=image/jpeg:https://ezprotect.io/wp-content/uploads/2026/09/Salesforce-Security-Office-Hours_Web-9-scaled.jpg END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/Vancouver:20261023T070000 DTEND;TZID=America/Vancouver:20261023T130000 DTSTAMP:20260908T133610Z CREATED:20260908T060138Z LAST-MODIFIED:20260908T133610Z UID:3063-1792738800-1792760400@ezprotect.io SUMMARY:Security Dreamin' 2026 DESCRIPTION:Nobody secures a Salesforce org alone. Security Dreamin’ makes security education accessible\, practical\, and genuinely fun\, balancing technical depth with the leadership skills that get change approved. URL:https://ezprotect.io/event/security-dreamin-2026/ CATEGORIES:Virtual ATTACH;FMTTYPE=image/png:https://ezprotect.io/wp-content/uploads/2026/09/Security-Dreamin-GHL-1040-x-462-px-Final.png END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/Vancouver:20261029T090000 DTEND;TZID=America/Vancouver:20261029T100000 DTSTAMP:20261015T033846Z CREATED:20261012T212022Z LAST-MODIFIED:20261015T033846Z UID:3313-1793264400-1793268000@ezprotect.io SUMMARY:Salesforce Security Office Hours with Andre van Kampen DESCRIPTION:Vendors describe a package as native because it installs inside Salesforce. That word says nothing about whether the package makes callouts\, so a listing that sends data to an external endpoint gets marketed the same way as one that never leaves the org. \nYou cannot read the code in a managed package\, and Salesforce states that partner applications are non-Salesforce applications\, that it makes no guarantees about them regardless of any review\, and that customers are responsible for evaluating their quality and security. Agent actions raise the stakes\, because they run on their own and chain into other actions with nobody approving each one. \nThis session replaces the standard vendor questionnaire with questions that produce evidence. Attendees see which questions are meaningless on this platform\, what to demand instead\, including permission sets with written justification and every external endpoint with the fields sent\, and how to test a native claim by removing remote site settings to find what breaks. \nAttendees will leave with a Salesforce-specific vendor evaluation to run before the next install\, and a way to verify what a listing does rather than accept what it claims. \nAndré van Kampen is a Salesforce MVP Hall of Fame member\, Data Quality Advocate at Plauti\, and owner of ISV Forum. He joins host Matt Meyers\, CTA and CoFounder and CEO of EzProtect. Get your toughest Salesforce security questions answered live. \nRegister for this event and we will see you online.  \n \n \n \n \n \n \n Register URL:https://ezprotect.io/event/salesforce-package-security/ CATEGORIES:Virtual ATTACH;FMTTYPE=image/jpeg:https://ezprotect.io/wp-content/uploads/2026/10/Salesforce-Security-Office-Hours_Web-14-scaled.jpg END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/Los_Angeles:20261112T090000 DTEND;TZID=America/Los_Angeles:20261112T100000 DTSTAMP:20261022T060905Z CREATED:20261021T105656Z LAST-MODIFIED:20261022T060905Z UID:3349-1794474000-1794477600@ezprotect.io SUMMARY:Salesforce Security Office Hours with Waqas Nazir DESCRIPTION:Your newest Salesforce developer never sleeps\, and it never asks why a permissions error appeared. Agentforce Vibes now creates and modifies Apex classes\, Lightning Web Components\, triggers\, and test classes from plain-language instructions\, and Salesforce Hosted MCP Servers let external AI tools such as Claude connect to Salesforce data. The code arrives faster than ever\, but your org still needs it to respect sharing rules\, object permissions\, and field-level security. \nThis session follows one scenario. An admin asks an AI assistant for an Apex controller behind a customer-facing page\, and the first version fails with a permissions error. The next suggestion switches the query to system mode\, the error vanishes\, the tests pass\, and the change heads toward production while the code quietly ignores what the user is allowed to see. Waqas Nazir\, CEO and Founder of DigitSec\, has worked on many Salesforce security reviews and shows why that error was the platform doing its job. \nAttendees will leave with a review checklist for AI-generated Apex\, a way to flag code that bypasses user permissions before deployment\, and a clear rule for where human review belongs. \nJoin Waqas Nazir and Matt Meyers\, CTA\, Founder and CEO of EzProtect. Bring your hardest questions about AI-written Salesforce code\, and get them answered live. \nRegister for this event and we will see you online.  \n \n \n \n \n \n \n Register URL:https://ezprotect.io/event/ai-written-salesforce-code-apex-security/ CATEGORIES:Virtual ATTACH;FMTTYPE=image/jpeg:https://ezprotect.io/wp-content/uploads/2026/10/Salesforce-Security-Office-Hours_Web-17-scaled.jpg END:VEVENT END:VCALENDAR