salesforce-security

Read-only Salesforce security audit plugin for the sf CLI: 109 checks, A-F grade with its reason, attack-chain correlation, SARIF output, accepted-risk waivers, compliance mapping, free EventLogFile capture, and Guest User Anomaly investigation.

Privacy-first, offline Salesforce security auditing and compliance reporting workspace built on Chrome Manifest V3.

AI-operated Salesforce org assessment CLI: read-only exports of metadata, records, event logs, technical objects, security health check, and code analysis with PII anonymised before AI/tools see it.

Standalone forensic triage for downloaded Salesforce EventLogFile CSVs — per-IP BENIGN_SCANNER/SUSPICIOUS/LIKELY_ABUSE verdicts. Zero network egress. Companion to sf-audit-plugin.

Salesforce solution for masking PI using RSA-2048 + AES-256

Does your Agentforce agent's Apex run in user mode? 28 Apex cases on Salesforce execution semantics - apiVersion 67 user-mode default, sharing, FLS - 21 adjudicated by a real org, not by an opinion. Summer '26.

Chrome Extension that converts Salesforce Profiles into minimal Permission Set metadata and optionally deploys them via Metadata API.

A Salesforce utility providing AES-256 symmetric encryption for sensitive data within Flows.

Smart Property & Service Management Platform (SPSMP) is a Salesforce project focused on customer service operations. It demonstrates Business Analysis, Salesforce Administration, data modeling, security, validation, and reporting. Salesforce Flow automates processes, while Case Management, Service Requests, SLA monitoring, Web-to-Case, Reports etc.

Fork of the Salesforce Dreamhouse sample application to demo the features of the Audicity data history and transaction tracing tool.

Chrome extension to compare two Salesforce profiles side by side and highlight permission differences.

GitHub Action: read-only Salesforce org security audit with sf-audit. 109 checks, A-F grade, attack chains, CI gate on findings.