Grow
Together
Nobody secures a Salesforce org alone. Security Dreamin' makes security education accessible, practical, and genuinely fun, balancing technical depth with the leadership skills that get change approved.
As requested by our Salesforce community, we are excited to invite you to the inaugural Security Dreamin'. Rising data breaches and AI-powered attacks against Salesforce customers mean we need to rethink and strengthen our security skills, and make real change happen in our community. Let's grow together.
As requested by our Salesforce community, we are excited to invite you to the inaugural Security Dreamin'. Rising data breaches and AI-powered attacks against Salesforce customers mean we need to rethink and strengthen our security skills, and make real change happen in our community. Let's grow together.
Date
Friday, October 23, 2026
Starts
7:00 AM PT / 4:00 PM CEST
Where
Online, open to everyone
Free to attend, fully virtual, and open to everyone.
Learn the latest in security architecture, and how to build a culture of security in your org
Senior Director, Admin & Architect Evangelism at Salesforce
Architecting and Salesforce Security Best Practices
Security decisions get made during architecture, long before anyone runs a scan. This session walks through the choices that matter most and how to weigh them under real delivery pressure.
Keynote
Senior Director of Product Management at Salesforce
The Future of User Access
Discover the high-level roadmap for User Access as we unpack important updates from Dreamforce and share an exclusive look at what our team is building next. Because your feedback is a gift, we are leaving plenty of time for an open Q&A so you can share your thoughts and directly influence our upcoming features.
20 minutes
Founder and CEO at EzProtect
Welcome and Closing
Setting the frame for the day, starting with why security ownership sits with the teams running the org.
Opens 8:00 AM PT
Lead Admin Evangelist at Salesforce
Admin Security Essentials: 3 Habits That Protect Your Org
Security isn't one big project. It's a core admin responsibility. In this fast-paced session, learn three habits every admin needs: enforce least privilege, run regular Security Health Checks, and configure agents to verify customer identity before acting on their behalf.
20 minutes
Industry Analyst at KeenanVision
AI Agents Are Like an Employee With No Ethics, Guilt or Empathy.
Is your security architecture ready for the most demanding employees - AI agents? This session gives a view of the future (coming very soon) where agents manage agents. And it looks at the implications.
20 minutes
Developer Relations Advisor at Westview1
Panel: The State of Salesforce Security
Is Salesforce security keeping pace with the attacks hitting its customers? This panel argues both sides, weighing the products available today, the roadmap ahead, and what has actually worked in real orgs. Attendees will leave with a balanced view of the current state of Salesforce security.
20 minutes
CEO at Supermums
Plug the Biggest Risk - Get people onboard with Security
The biggest risk to security is your users. Join this session to learn more about change management strategies and how to get your Exec Sponsorship Team to your End Users onboard with security interventions and measures.
20 minutes
Salesforce Solutions Architect
Trust Without the Screen: A Security Reference Architecture for Headless Salesforce
This session gives architects a practical security reference architecture for headless and agentic Salesforce. We will work through Agentforce and Data Cloud, where the "user" may be an agent, covering grounding permissions, action scoping, and the audit trail you need when a non-human identity acts on regulated data.
20 minutes
Salesforce Certified Technical Architect
Enforce Salesforce Zero Trust with Declarative Tools
Your org stopped asking questions the moment your user logged in. Every request after that inherits one decision, at whatever volume the person asks for. This session translates Zero Trust from an architecture diagram into Setup clicks. You will leave with five things to do, in order, and where in Setup to do each one.
20 minutes
CEO at dx0
Panel: Do Salesforce Customers Actually Care About Security?
Breaches keep making headlines, budgets stay tight, and security often becomes a priority only after an incident. This panel debates whether Salesforce customers care enough, with leaders from across the ecosystem arguing every side. Attendees will leave with actionable tips to bring back to their teams.
20 minutes
Chief Architect, Salesforce Ecosystem & AgentOps at Copado
AI Builds Fast. Adversarial AI Finds Faster
AI is transforming how quickly Salesforce solutions can be built—but it is also transforming how quickly vulnerabilities can be discovered and exploited. As agentic development puts powerful capabilities into the hands of more builders, architects and developers must rethink how security is designed, tested, and automated. This session explores practical approaches for building at AI speed while preparing for a world where adversarial AI is constantly looking for the gaps.
20 minutes
Technology Engagement Manager and Architect at Banham Patent Locks Ltd
AI Powered Attacks: Canaries That Shrink the Blast Radius
The ecosystem assumed attackers move at human speed. They don't. AI now collapses vulnerability discovery to weaponization into under 24 hours and executes breaches in minutes, yet detection still takes 241 days. Canaries close this gap.
A canary is a fake record or credential that acts as a passive tripwire. The moment it's touched, it triggers an instant, high-fidelity alert with near-zero false positives.
In 15 minutes, you'll learn to place, bait, and monitor canary records in Salesforce to detect compromised accounts, insider threats, and rogue AI integrations. You can implement this pattern this week.
20 minutes
Founder & CAIO at LeonAI Labs
Beyond Trailhead: 3 Security Certs That Matter
Security has become a critical focus in my work as a Salesforce and AI architect. In this session, I'll share my experience earning three non-Salesforce security certifications and how they reshaped my approach to architecture, risk, governance, and responsible AI.
Rather than chasing badges, we'll explore why I chose these paths, what I actually learned, and how to apply these concepts in real-world scenarios. You'll leave with practical guidance on selecting security learning paths beyond Trailhead to strengthen your career, whether you're an admin, developer, consultant, or architect.
20 minutes
Founder / CEO at Curious Duck Digital Laboratory, LLC
Fixing the Security Culture Gap (with Joel Tosi)
The hardest security challenges aren’t technical. They’re organizational, contextual, and ultimately very human. How do you battle the inertia that treats security as a distraction? Or work with executives who say they care about security but balk at the investments required? Given the rise in Salesforce-related breaches, you’d think that everyone would want to take proactive measures, yet too often security initiatives turn into security theater. In this talk Joel Tosi and Elisabeth Hendrickson show you how to use systems thinking tools to see the subtle and not-so-subtle organizational influences affecting security initiatives, and how to find the levers to shift the system, whatever your role.
20 minutes
Co-Founder at Dojo & Co
Fixing the Security Culture Gap (with Elisabeth Hendrickson)
The hardest security challenges aren’t technical. They’re organizational, contextual, and ultimately very human. How do you battle the inertia that treats security as a distraction? Or work with executives who say they care about security but balk at the investments required? Given the rise in Salesforce-related breaches, you’d think that everyone would want to take proactive measures, yet too often security initiatives turn into security theater. In this talk Joel Tosi and Elisabeth Hendrickson show you how to use systems thinking tools to see the subtle and not-so-subtle organizational influences affecting security initiatives, and how to find the levers to shift the system, whatever your role.
20 minutes
Founder & Pixel Pusher at Shirtforce
Shirtforce Community Giveaways
Our community partners at Shirtforce will be giving away prizes to attendees, as well as sharing an important message for the Trailblazer Community.
20 minutes
Technical Architect at NetStronghold
Panel: Do Salesforce Customers Actually Care About Security?
Breaches keep making headlines, budgets stay tight, and security often becomes a priority only after an incident. This panel debates whether Salesforce customers care enough, with leaders from across the ecosystem arguing every side. Attendees will leave with actionable tips to bring back to their teams.
20 minutes
Founder & Chief Mentor at CRM CoE Alliance
Panel: Do Salesforce Customers Actually Care About Security?
Breaches keep making headlines, budgets stay tight, and security often becomes a priority only after an incident. This panel debates whether Salesforce customers care enough, with leaders from across the ecosystem arguing every side. Attendees will leave with actionable tips to bring back to their teams.
20 minutes
Co-Founder and CTA at Cloudearly
Panel: The State of Salesforce Security
Is Salesforce security keeping pace with the attacks hitting its customers? This panel argues both sides, weighing the products available today, the roadmap ahead, and what has actually worked in real orgs. Attendees will leave with a balanced view of the current state of Salesforce security.
20 minutes
Panel
Do Salesforce Customers Actually Care About Security?
Breaches keep making headlines, budgets stay tight, and security often becomes a priority only after an incident. This panel debates whether Salesforce customers care enough, with leaders from across the ecosystem arguing every side. Attendees will leave with actionable tips to bring back to their teams.
CEO at dx0
Technical Architect at NetStronghold
Founder & Chief Mentor at CRM CoE Alliance
Founder and CEO at EzProtect
Panel
The State of Salesforce Security
Is Salesforce security keeping pace with the attacks hitting its customers? This panel argues both sides, weighing the products available today, the roadmap ahead, and what has actually worked in real orgs. Attendees will leave with a balanced view of the current state of Salesforce security.
Developer Relations Advisor at Westview1
Co-Founder and CTA at Cloudearly
External/Independent Senior Advisor for Technology at PwC
Founder and CEO at EzProtect
Agenda
7:00–7:10 AM PT /
4:00–4:10 PM CEST
4:00–4:10 PM CEST
Welcome, raffle rules, and Haunted Org Community Challenge kickoff
Matt Meyers, CTA, Founder and CEO, EzProtect
Tristan Lombard, Security Dreamin' Organizer & Stage Mom
7:10–7:40 AM PT /
4:10–4:40 PM CEST
4:10–4:40 PM CEST
Keynote
Miriam McCabe, Senior Director, Admin & Architect Evangelism, Salesforce
7:40–8:00 AM PT /
4:40–5:00 PM CEST
4:40–5:00 PM CEST
The Future of User Access
Cheryl Feldman, Senior Director of Product Management, Salesforce
8:00–8:20 AM PT /
5:00–5:20 PM CEST
5:00–5:20 PM CEST
Trust Without the Screen
Maham Hassan, Salesforce Solutions Architect
8:20–9:05 AM PT /
5:20–6:05 PM CEST
5:20–6:05 PM CEST
Panel: Do Salesforce Customers Actually Care About Security?
Matt Meyers, CTA, Founder and CEO, EzProtect (facilitator)
Pablo Gonzalez, CEO, dx0
Francis Pindar, Technical Architect, NetStronghold
Velu Palani, Founder & Chief Mentor, CRM CoE Alliance
9:05–9:25 AM PT /
6:05–6:25 PM CEST
6:05–6:25 PM CEST
Fixing the Security Culture Gap
Elisabeth Hendrickson, Founder and CEO, Curious Duck Digital Laboratory, LLC
Joel Tosi, Co-Founder, Dojo & Co
9:25–9:45 AM PT /
6:25–6:45 PM CEST
6:25–6:45 PM CEST
AI Builds Fast, Adversarial AI Finds Faster
Steve Simpson, Chief Architect, Salesforce Ecosystem & AgentOps, Copado
9:45–10:05 AM PT /
6:45–7:05 PM CEST
6:45–7:05 PM CEST
AI Powered Attacks: Canaries That Shrink the Blast Radius
Beech Horn, Technology Engagement Manager and Architect, Banham Patent Locks Ltd
10:05–10:50 AM PT /
7:05–7:50 PM CEST
7:05–7:50 PM CEST
Panel: The State of Salesforce Security
Matt Meyers, CTA, Founder and CEO, EzProtect (facilitator)
Peter Chittum, Developer Relations Advisor, Westview1
Neha Nagori, Co-Founder and CTA, Cloudearly
Kevin Jackson, Senior Advisor for Technology, PwC
10:50–11:20 AM PT /
7:50–8:20 PM CEST
7:50–8:20 PM CEST
Haunted Org Community Challenge & Break
11:20–11:40 AM PT /
8:20–8:40 PM CEST
8:20–8:40 PM CEST
AI Agents Are Like an Employee with No Ethics, Guilt or Empathy
Ian Gotts, Industry Analyst, KeenanVision
11:40 AM–12:00 PM PT /
8:40–9:00 PM CEST
8:40–9:00 PM CEST
How to Lead Security Change and Adoption
Heather Black, CEO, Supermums
12:00–12:20 PM PT /
9:00–9:20 PM CEST
9:00–9:20 PM CEST
Enforce Salesforce Zero Trust with Declarative Tools
Nadina Lisbon, Salesforce Certified Technical Architect
12:20–12:40 PM PT /
9:20–9:40 PM CEST
9:20–9:40 PM CEST
Admin Security Essentials: 3 Habits That Protect Your Org
Jennifer W. Lee, Lead Admin Evangelist, Salesforce
12:40–12:50 PM PT /
9:40–9:50 PM CEST
9:40–9:50 PM CEST
Shirtforce Mission and Raffle Winners
Todd Halfpenny, Founder & Pixel Pusher, Shirtforce
12:50–1:00 PM PT /
9:50–10:00 PM CEST
9:50–10:00 PM CEST
Haunted Org Community Challenge Winners
Matt Meyers, CTA, Founder and CEO, EzProtect
1:00–1:20 PM PT /
10:00–10:20 PM CEST
10:00–10:20 PM CEST
Beyond Trailhead: 3 Security Certs That Matter
Blanca Leon-Carter, Founder & CAIO, LeonAI Labs
1:20–1:30 PM PT /
10:20–10:30 PM CEST
10:20–10:30 PM CEST
Closing Remarks
Matt Meyers, CTA, Founder and CEO, EzProtect
Win Shirtforce Swag, Support a Community Mission
Shirtforce turns t-shirts into conference tickets and travel grants for Trailblazers who have never had the chance to be in the room. We are raffling off Shirtforce t-shirt credits at Security Dreamin' to celebrate that work and help more of the community discover it.
Enter the Haunted Org Community Challenge
The Haunted Org Community Challenge starts with our spooky Salesforce security quiz. In a few minutes, it shows which villain is most likely haunting your Salesforce org, along with the steps to banish it. Full challenge instructions will be announced live at Security Dreamin', and the challenge is open only to registrants. Sign up now for your chance to win one of two $250 Amazon gift cards.
Save your seat.
Registration is free and takes about twenty seconds. You will get the calendar hold right away.
Supported by EzProtect
Making Salesforce the safest place for enterprise data.
EzProtect scans every file and URL entering a Salesforce org with multi-layer detection powered by Sophos and Bitdefender, so threats stop before they reach users.
