Grow Together
Salesforce security starts with community.
Nobody secures a Salesforce org alone. On October 23, 2026, our community came together for the first ever Security Dreamin', a free virtual conference that made Salesforce security education accessible, practical, and genuinely fun for architects, admins, and security leaders.
Certified Technical Architects, Salesforce MVPs, and leaders from Salesforce itself shared the technical depth and the leadership skills that get change approved. Every session is here for you to watch and share.
Watch these sessions and share them with your team.
Learn from the leaders who took the Security Dreamin' stage, then pass the sessions along to your Salesforce team and the wider community.
Welcome Remarks
- Matt Meyers, CTAFounder and CEO, EzProtect
The first ever Security Dreamin' starts here. Matt Meyers, CTA shares how a small Salesforce Security Office Hours conversation in July 2025 grew into a global community event. The message for architects, admins, and security leaders is simple: nobody secures a Salesforce org alone.
Watch the session →
You Don't Have to Choose Between Innovation and Security
- Miriam McCabeSenior Director, Admin & Architect Evangelism, Salesforce
Innovation and security do not have to compete. Miriam McCabe opens the first ever Security Dreamin' with a keynote on building boldly with AI while protecting what matters most. Security is a team sport, and the best architectural decisions safeguard tomorrow.
Watch the session →
The Future of User Access
- Cheryl FeldmanSenior Director of Product Management, Salesforce
What should an AI agent be allowed to do in a Salesforce org? Cheryl Feldman shares the Salesforce roadmap for agentic identity and scoped access, which cap an agent's access below the permissions of the user behind it. Previews include restriction rules for more objects, criteria-based field-level security, and finer control over metadata access. Roadmap items are forward-looking, so base purchasing decisions on generally available features.
Watch the session →A Governance Playbook for Agentforce & MCP
- Matt Meyers, CTAFounder and CEO, EzProtect
An Agentforce agent that calls a third-party MCP server leaves Salesforce sharing rules behind. Matt Meyers, CTA breaks down inbound and outbound MCP, why a named identity beats a shared token, and how tightly scoped MCP servers and tools shrink what an agent can reach. Uptime is not observability, and this session shows the difference.
Watch the session →
Do Salesforce Customers Actually Care About Security?
- Pablo GonzalezCEO, dx0
- Francis PindarTechnical Architect, NetStronghold
- Velu PalaniFounder & Chief Mentor, CRM CoE Alliance
- Matt Meyers, CTA (facilitator)Founder and CEO, EzProtect
Every Salesforce customer says security matters, yet the same gaps keep showing up in real orgs. Pablo Gonzalez, Francis Pindar, and Velu Palani take on ownership, stalled backlogs, and security theater in a frank conversation facilitated by Matt Meyers, CTA. The panel closes with practical moves, from regular connected app reviews to security funding built into every Salesforce project.
Watch the session →
Fixing the Security Culture Gap
- Elisabeth HendricksonFounder and CEO, Curious Duck Digital Laboratory, LLC
- Joel TosiCo-Founder, Dojo & Co
Security is very important, right up until a deadline hits. Elisabeth Hendrickson and Joel Tosi, authors of Signals and Levers, show how to read the signals behind security shortcuts and pull the levers that actually change behavior. Culture levers are open to everyone, at every level.
Watch the session →
AI builds fast. Adversarial AI finds faster!
- Steve SimpsonChief Architect, Salesforce Ecosystem & AgentOps, Copado
AI is now finding flaws that sat unnoticed in widely used code for years, and attackers have the same tools. Steve Simpson shows where Salesforce orgs are exposed, from forgotten OAuth tokens to Apex code that still runs in system mode. The defense moves at AI speed too, with code scanning in every pipeline, least-privilege access, token rotation drills, and red-team testing in a sandbox.
Watch the session →
AI Powered Attacks: Canaries That Shrink the Blast Radius
- Beech HornTechnology Engagement Manager and Architect, Banham Patent Locks Ltd
Prevention matters, but what happens once an attacker is already inside the org? Beech Horn explains canaries, which are small tripwires hidden at the object, field, record, and agent skill level that legitimate users never touch. One touch can trigger Transaction Security in Event Monitoring to lock the user down before data leaves the org.
Watch the session →
The State of Salesforce Security
- Neha NagoriCo-Founder and CTA, Cloudearly
- Peter ChittumDeveloper Relations Advisor, Westview1
- Kevin JacksonExternal/Independent Senior Advisor for Technology, PwC
- Matt Meyers, CTA (facilitator)Founder and CEO, EzProtect
Is Salesforce security keeping pace with the attacks hitting Salesforce customers? Neha Nagori, Peter Chittum, and Kevin Jackson debate which native tools belong on from day one, why good features stay switched off, and how to design access for AI agents, with Matt Meyers, CTA facilitating. Every panelist closes by giving Salesforce security a grade.
Watch the session →
A Clear Path to Adoption
- Heather BlackCEO and Founder, Supermums
The best security controls fail when people do not adopt them. Heather Black shares the Clearpath approach to change management, from checking readiness to building the right internal team, executive sponsorship, and training for every learning style. Ongoing monitoring turns that training into habits that lower security risk.
Watch the session →
Enforce Zero Trust in Salesforce Setup
- Nadina Dorene LisbonSalesforce Certified Technical Architect
A user logs in and passes MFA. Thirty-seven minutes later, the same session exports 42,000 records. Nadina Dorene Lisbon replays this fictional scenario to show how zero trust works with tools already in Salesforce Setup, including permission set groups, muting permission sets, user access policies, and High Assurance session security for reports and dashboards.
Watch the session →
Admin Security Essentials: 3 Habits That Protect Your Org
- Jennifer LeeLead Admin Evangelist, Salesforce
Most breaches don't start with a hacker. They start with a checkbox. Jennifer Lee shares three habits that protect every Salesforce org: limit access with least privilege, check the org with Security Health Check, and verify identity before AI agents touch customer data. A short checklist gives admins three steps to take right away.
Watch the session →
Shirtforce: Look good. Do good.
- Todd HalfpennyFounder & Pixel Pusher, Shirtforce
Shirtforce turns funny, geeky Salesforce merch into real opportunities for the community. Todd Halfpenny shares how every tee, hoodie, and mug helps fund charity and the Shirtforce Sponsorship Programme, which covers conference tickets and travel grants for Trailblazers. The segment also reveals the five Security Dreamin' Shirtforce raffle winners.
Watch the session →
Beyond Trailhead: 3 Security Certs That Matter
- Blanca Leon-CarterFounder & CAIO, LeonAI Labs
Trailhead builds strong Salesforce skills, and enterprise security, AI risk, and governance reach even further. Blanca Leon-Carter shares lessons from studying CISSP, the NIST AI Risk Management Framework, and ISO/IEC 42001. All three come together on one Salesforce AI agent to show how each certification sharpens the questions architects ask.
Watch the session →Closing Remarks
- Matt Meyers, CTAFounder and CEO, EzProtect
The first ever Security Dreamin' wraps with closing remarks from Matt Meyers, CTA. Thank you to every speaker, attendee, and partner who made the day possible. Salesforce Security Office Hours continues, and this will not be the last Security Dreamin'.
Watch the session →Want more Salesforce security resources?
Explore blogs, videos, and tools from EzProtect that help Salesforce teams keep their orgs secure.
Explore resourcesInterested in attending future live events?
Salesforce Security Office Hours is a free, open conversation where Salesforce teams ask their toughest security questions out loud and learn from each other.
See upcoming events
Thank you to our community partner
Shirtforce helped more of the community show up.
Shirtforce turns t-shirts into conference tickets and travel grants for Trailblazers who have never had the chance to be in the room. Thank you to Shirtforce for raffling credits at Security Dreamin' and helping more of the community discover that mission.
Learn how to get involved
This event was supported by EzProtect
Making Salesforce the safest place for enterprise data.
EzProtect scans every file and URL entering a Salesforce org with multi-layer detection so threats stop before they reach users.
See it in actionInterested in Security Dreamin' 2027?
The first Security Dreamin' will not be the last. Share your name and email to hear first when the next Security Dreamin' is announced.
