Anthropic Mythos and Salesforce Security: A Guide to the Attack Surfaces You Have Not Audited Yet
Beech Horn and Matt Meyers translate the Anthropic Mythos security framework into priority actions for Salesforce admins, developers, and architects.
How to Secure Salesforce Lightning Web Components: A Developer Playbook for LWC Security
Evelyn McMichael-Maguire reveals where LWC code creates Salesforce security risk and the testing habits to deploy more secure code.
Secure Agentforce: 5 Tips Salesforce Architects Need Before Enterprise Go-Live
Matt Meyers and Janeen Marquardt share 5 security tips to protect identity, data access, and observability in enterprise Agentforce deployments.
How Salesforce Admins Should Audit Connected Apps Before Migrating to External Client Apps
Marija Petronijevic and Matt Meyers,CTA walk Salesforce admins through auditing and migrating Connected Apps to External Client Apps using the TIME framework.
Secure Custom Portal Architecture for Architects: Building on Salesforce as Your Data Source
Jessie Grenfell breaks down secure Salesforce portal architecture: JWT auth, row-level security in Apex, record ID obfuscation, and MuleSoft vs. AWS.
Salesforce Configuration Drift: A DevSecOps Security Guide
Richard Clark and Matt Meyers break down Salesforce configuration drift, DevSecOps, and change tracking to stop breaches before they start.
What Every Salesforce Team Needs to Know About Security and Agentforce Vibes
Learn how to vibe code securely in Salesforce. Beech Horn covers MCP risks, supply chain attacks, and safe Agentforce Vibes development.
What to Do in the First 24 Hours After a Salesforce Data Breach
Learn the critical steps to take in the first 24 hours after a Salesforce data breach using the NIST Threat Response Lifecycle.
Salesforce Spring ’26 Virus Scanner: Does It Actually Work?
Salesforce Spring '26 added built-in virus scanning. We uploaded a real virus to test it. See what got through and what didn't in this side-by-side comparison.