Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Securing Sensitive Data in Salesforce with Varonis

Varonis
06/12/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


However, that data is a prime target for threat actors, and it's your responsibility to keep it secure. Varonis for Salesforce provides you visibility into all the sensitive data in your Salesforce instance, ensures that your users only have access to the data they need, continuously monitors and prevents suspicious activities, and gives you confidence to safely enable agent force in your environment. Let's take a look at the capabilities. Varonis automatically discovers and classifies sensitive data across your Salesforce fields, records, and content documents by combining AI and rule-based classification for fast, accurate, and contextual results. You can see the exact types of sensitive data within each record and file and highlight exactly who can access it. This is important for organizations looking to enable agent force, as the Gen AI tool relies on user permissions to fetch data. If a user is over-permissioned, it could lead to data exposure. Under the Access tab, you can see who has access to sensitive data, and automatically translate system permissions into a simplified CRUDS model, which stands for Create, Read, Update, Delete, and Share. Expanding on a user provides a bi-directional view of access to all your different data across Salesforce. This makes it easy to view a specific user's effective permissions across their profile and permission sets, clearly showing their access level and how it was granted. Varonis also highlights risky permissions configurations, including excessive access at the record and field level that unnecessarily increase your attack surface. By reviewing permissions across Apex code, field access, and record access, you can understand each user's exact blast radius. You can also revoke risky permissions directly from Varonis. For example, here we see permissions to export reports and create public links that could expose your sensitive data. You can revoke these permissions individually from each profile and permission set, or in bulk. Varonis can also identify misconfigured Salesforce sites that are exposing sensitive records and files to guest users, and automatically remediate those as well. You can also identify where your sensitive data is at risk through misconfigurations and other security risks. Varonis automatically ensures that your configurations comply with regulations such as GDPR, California SB 1386, ISO, NIST, and other best practices. This makes it easy for you to fix compliance violations or respond to audit requests. Because Varonis continuously monitors your Salesforce environment, you can automatically see suspicious activity under the Alerts tab. Varonis maximizes the value of your Salesforce shield logs with hundreds of out-of-the-box policies that instantly translate raw event data into actionable security alerts. No coding or complex configuration is required. For example, abnormal record access, suspicious login patterns, privilege escalations, or sharing sensitive data with a public link would be flagged or automatically prevented. Review a readable audit trail so you can investigate activity and understand what's happening with your data, without having to be an expert in Salesforce's logs. Varonis is committed to helping organizations confidently use Salesforce and enable AgentForce while ensuring their sensitive data remains secure. Schedule a demo today to discover more and see how Varonis can help your organization secure your Salesforce instance today.

TL;DR

  • Varonis automatically discovers and classifies sensitive data across Salesforce fields, records, and content documents using AI and rule-based classification for contextual results.
  • The platform provides bi-directional visibility into user permissions, translating complex Salesforce access configurations into a simplified CRUDS model to identify over-permissioned users.
  • Organizations can safely enable AgentForce by ensuring users only have access to data they need, preventing AI-driven data exposure from excessive permissions.

Summary

This product demonstration showcases Varonis for Salesforce, a data security solution designed to protect sensitive information within Salesforce environments. The video walks through four core capabilities: automated data discovery and classification using AI and rule-based approaches, granular permissions visibility with a simplified CRUDS model (Create, Read, Update, Delete, Share), continuous monitoring with out-of-the-box security policies, and compliance automation for regulations including GDPR, ISO, and NIST. A significant focus is placed on AgentForce readiness, positioning Varonis as essential for organizations looking to safely enable Salesforce's generative AI capabilities. The demonstration highlights how over-permissioned users could lead to data exposure when AI tools fetch data based on user permissions, and shows how Varonis can identify and remediate risky configurations including misconfigured Salesforce sites exposing data to guest users. The platform translates Salesforce Shield logs into actionable alerts without requiring coding or complex configuration, enabling security teams to investigate suspicious activity through a readable audit trail.

Chapters

0:00 - Introduction and Value Proposition
0:39 - Data Discovery and Classification
1:22 - Permissions Visibility and CRUDS Model
2:18 - Remediation and Risk Mitigation
3:02 - Compliance and Configuration Management
3:31 - Continuous Monitoring and Alerts

Key Quotes

1:05 "This is important for organizations looking to enable agent force, as the Gen AI tool relies on user permissions to fetch data. If a user is over-permissioned, it could lead to data exposure."
2:03 "By reviewing permissions across Apex code, field access, and record access, you can understand each user's exact blast radius."
3:45 "Varonis maximizes the value of your Salesforce shield logs with hundreds of out-of-the-box policies that instantly translate raw event data into actionable security alerts."

FAQ

How does Varonis help organizations prepare for Salesforce AgentForce?

Varonis ensures users only have access to data they need before enabling AgentForce. Since the generative AI tool relies on user permissions to fetch data, over-permissioned users could lead to data exposure. Varonis identifies excessive access at the record and field level and allows you to revoke risky permissions directly from the platform.

What compliance frameworks does Varonis for Salesforce support?

Varonis automatically ensures Salesforce configurations comply with regulations including GDPR, California SB 1386, ISO, NIST, and other security best practices. This helps organizations fix compliance violations and respond to audit requests efficiently.


Categories:
  • » Webinar Library » Varonis
  • » Data Protection » Backup & Recovery
  • » Cybersecurity » Data Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Data Protection
  • Compliance & Governance
  • AI & Machine Learning
  • Demo
  • Technical Deep Dive
  • Salesforce security
  • Data classification
  • Permissions management
  • AgentForce enablement
  • Compliance automation
  • Data access governance
  • Security monitoring
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Securing Sensitive Data in Salesforce with Varonis

              XStreaminars (watch here)

              • Jul
                28

                Illumio + Netskope: Zero Trust in the Age of AI Autonomy

                07/28/202601:00 PM ET
                • Jul
                  29

                  Ask Your Cloud Anything: Unlocking Governance Silos in your Environments

                  07/29/202601:00 PM ET
                  More events

                  Industry Events (watch there)

                  • Aug
                    03

                    Discover DLP Memories: The ever-evolving triage agent enhancing efficiency each shift.

                    08/03/202611:00 AM ET
                    • Aug
                      06

                      Safeguarding Sensitive Data in the Era of AI Adoption

                      08/06/202604:00 AM ET
                      • Aug
                        06

                        Same Tactics, Enhanced Speed: AI Agents’ Impact on Identity Attacks

                        08/06/202602:00 PM ET
                        More events

                        Upcoming Webinar Calendar

                        • 07/28/2026
                          01:00 PM
                          07/28/2026
                          Illumio + Netskope: Zero Trust in the Age of AI Autonomy
                          https://www.truthinit.com/index.php/channel/2031/illumio-netskope-zero-trust-in-the-age-of-ai-autonomy/
                        • 07/29/2026
                          04:00 AM
                          07/29/2026
                          Real-Time Strategies for Safeguarding Against Prompt Injections
                          https://www.truthinit.com/index.php/channel/1968/real-time-strategies-for-safeguarding-against-prompt-injections/
                        • 07/29/2026
                          01:00 PM
                          07/29/2026
                          Ask Your Cloud Anything: Unlocking Governance Silos in your Environments
                          https://www.truthinit.com/index.php/channel/2048/ask-your-cloud-anything-unlocking-governance-silos-in-your-environments/
                        • 08/03/2026
                          11:00 AM
                          08/03/2026
                          Discover DLP Memories: The ever-evolving triage agent enhancing efficiency each shift.
                          https://www.truthinit.com/index.php/channel/2062/discover-dlp-memories-the-ever-evolving-triage-agent-enhancing-efficiency-each-shift/
                        • 08/06/2026
                          04:00 AM
                          08/06/2026
                          Safeguarding Sensitive Data in the Era of AI Adoption
                          https://www.truthinit.com/index.php/channel/2058/safeguarding-sensitive-data-in-the-era-of-ai-adoption/
                        • 08/06/2026
                          02:00 PM
                          08/06/2026
                          Same Tactics, Enhanced Speed: AI Agents’ Impact on Identity Attacks
                          https://www.truthinit.com/index.php/channel/2064/same-tactics-enhanced-speed-ai-agents-impact-on-identity-attacks/
                        • 08/07/2026
                          11:30 AM
                          08/07/2026
                          Refreshing Drinks and Essential Cybersecurity Strategies for the Season
                          https://www.truthinit.com/index.php/channel/2063/refreshing-drinks-and-essential-cybersecurity-strategies-for-the-season/
                        • 08/13/2026
                          12:00 PM
                          08/13/2026
                          Harnessing AI for Secure Innovation in the Enterprise with Netskope & Omada
                          https://www.truthinit.com/index.php/channel/2065/harnessing-ai-for-secure-innovation-in-the-enterprise-with-netskope-omada/
                        • 08/19/2026
                          12:00 PM
                          08/19/2026
                          Becoming Agent Ready: Insights and Strategies with Cyera
                          https://www.truthinit.com/index.php/channel/2036/becoming-agent-ready-insights-and-strategies-with-cyera/
                        • 09/02/2026
                          12:00 PM
                          09/02/2026
                          Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                          https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                        • 09/30/2026
                          04:00 AM
                          09/30/2026
                          AI Command Center: Optimizing Visibility and Control in Your Operations
                          https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                        Truth in IT
                        • Sponsor
                        • About Us
                        • Terms of Service
                        • Privacy Policy
                        • Contact Us
                        • Preference Management
                        Desktop version
                        Standard version