Resources
It is our goal to keep you informed about everything you need to know about Salesforce security to keep your Salesforce data and company safe and secure by providing you with the highest quality of original content.
They say copying is the best form of flattery. That is why we are very flattered that our content is so good, that our competitors consistently copy our content.
Click here so that you can get all your Salesforce security intel direct from the source.
If you are looking to learn about a security topic we have yet to write about, please submit a content request here.
Cleared for Takeoff? How Threats Can Slip Into Your Salesforce Orgs Through Files, Links, and AI Agents
Salesforce threat scanning explained: how files and links enter through Experience Cloud, Email-to-Case, and APIs.
Connect Claude to Salesforce Without Exposing Your Orgs
Connect Claude to Salesforce without exposing your org. Learn the risks to fix first, from read-only servers to External Client App controls.
How to Vet Open Source Tools for Salesforce Security Before They Reach Production
Vet open source tools for Salesforce security before they reach production. Nicolas Vuillamy shares the checks that keep your org safe.
Salesforce Profile Filtering: 5 Winter 27 Security Fixes
Salesforce Profile Filtering can silently break automation in Winter 27. Learn 5 technical fixes for Apex, validation rules, and SOAP login.
Salesforce MCP Security: How to Control What Claude Can Access
Salesforce MCP security with Mike Rogan on what Claude can access, why read-only servers come first, and how to audit agent activity.
A Governance Playbook for Agentforce and MCP: Now Streaming on Salesforce+
Watch the Dreamforce 2026 session on Agentforce MCP governance, covering trust boundaries, observability, and secure agent orchestration.
How to Prepare Salesforce Apex for Winter ’27 Profile Filtering: A Security Playbook for Salesforce Admins
Salesforce Winter 27 Profile Filtering explained. Saman Attar shows how to find and fix Apex and validation rule references. Demo included.
What Salesforce Admins Need to Know About Summer ’26 Malware Scanning
Salesforce malware scanning is on by default, but files over 100 MB, legacy attachments, and older uploads still reach your org unscanned.
How Salesforce Admins Should Test AI Agents for Security Gaps
Geraint Waters on how AI agents expose Salesforce data, what native testing misses, and how to build an OWASP-based test plan before go-live.