Provides automated scanning and analysis of custom source code in Salesforce Orgs, including Apex, VisualForce, Lightning Web Components, and related JavaScript, to identify security vulnerabilities. Can be initiated from IDEs (e.g. VS Code, IntelliJ), targeting remote code repositories via GIT (e.g. GitHub, GitLab, Bitbucket), or directed to Salesforce sandbox or production environments.
02
Interactive Application Security Testing (IAST)
Generates a custom runtime testing engine specific to the Salesforce Org that identifies injection flaws during interactive testing. All runtime vulnerabilities contain proof-of-concept exploits, reducing false positives by reporting only those vulnerabilities that can be executed and verified.
03
Software Composition Analysis (SCA)
Reports any Common Vulnerabilities and Exposures (CVE) found in a Salesforce org, scanning third-party software libraries integral to Salesforce apps.
04
Configuration Analysis
Reviews Salesforce org configuration settings against a list of Salesforce misconfigurations (e.g. content security policy, password settings, access controls, clickjacking) to support security compliance in frameworks including GDPR, ISO27001, PCI-DSS, GLBA, APPI, and HIPAA.
05
Comprehensive Vulnerability Coverage
Detects various Salesforce security issues including CRUD/FLS Flaws (Authorization Bypass), Reflected Cross-site Scripting (XSS), Stored Cross-site Scripting (XSS), DOM Based Cross-site Scripting (XSS), Lightning Components (DOM & CRUD), Lightning Components (CSP & XSS), SOQL & SOSL Injection, Cross-site Request Forgery (CSRF), Common Vulnerabilities & Exposures (CVE), Weak Session Management, Weak Integration Endpoints, Weak Password Controls, Clickjacking Attacks, and Access Control (Excessive Permissions).
Your plan caps how many capabilities are shown — upgrade to see the full list
