Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Securing Sensitive Data in Salesforce with Varonis

Varonis
06/12/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


However, that data is a prime target for threat actors, and it's your responsibility to keep it secure. Varonis for Salesforce provides you visibility into all the sensitive data in your Salesforce instance, ensures that your users only have access to the data they need, continuously monitors and prevents suspicious activities, and gives you confidence to safely enable agent force in your environment. Let's take a look at the capabilities. Varonis automatically discovers and classifies sensitive data across your Salesforce fields, records, and content documents by combining AI and rule-based classification for fast, accurate, and contextual results. You can see the exact types of sensitive data within each record and file and highlight exactly who can access it. This is important for organizations looking to enable agent force, as the Gen AI tool relies on user permissions to fetch data. If a user is over-permissioned, it could lead to data exposure. Under the Access tab, you can see who has access to sensitive data, and automatically translate system permissions into a simplified CRUDS model, which stands for Create, Read, Update, Delete, and Share. Expanding on a user provides a bi-directional view of access to all your different data across Salesforce. This makes it easy to view a specific user's effective permissions across their profile and permission sets, clearly showing their access level and how it was granted. Varonis also highlights risky permissions configurations, including excessive access at the record and field level that unnecessarily increase your attack surface. By reviewing permissions across Apex code, field access, and record access, you can understand each user's exact blast radius. You can also revoke risky permissions directly from Varonis. For example, here we see permissions to export reports and create public links that could expose your sensitive data. You can revoke these permissions individually from each profile and permission set, or in bulk. Varonis can also identify misconfigured Salesforce sites that are exposing sensitive records and files to guest users, and automatically remediate those as well. You can also identify where your sensitive data is at risk through misconfigurations and other security risks. Varonis automatically ensures that your configurations comply with regulations such as GDPR, California SB 1386, ISO, NIST, and other best practices. This makes it easy for you to fix compliance violations or respond to audit requests. Because Varonis continuously monitors your Salesforce environment, you can automatically see suspicious activity under the Alerts tab. Varonis maximizes the value of your Salesforce shield logs with hundreds of out-of-the-box policies that instantly translate raw event data into actionable security alerts. No coding or complex configuration is required. For example, abnormal record access, suspicious login patterns, privilege escalations, or sharing sensitive data with a public link would be flagged or automatically prevented. Review a readable audit trail so you can investigate activity and understand what's happening with your data, without having to be an expert in Salesforce's logs. Varonis is committed to helping organizations confidently use Salesforce and enable AgentForce while ensuring their sensitive data remains secure. Schedule a demo today to discover more and see how Varonis can help your organization secure your Salesforce instance today.

TL;DR

  • Varonis automatically discovers and classifies sensitive data across Salesforce fields, records, and content documents using AI and rule-based classification for contextual results.
  • The platform provides bi-directional visibility into user permissions, translating complex Salesforce access configurations into a simplified CRUDS model to identify over-permissioned users.
  • Organizations can safely enable AgentForce by ensuring users only have access to data they need, preventing AI-driven data exposure from excessive permissions.

Summary

This product demonstration showcases Varonis for Salesforce, a data security solution designed to protect sensitive information within Salesforce environments. The video walks through four core capabilities: automated data discovery and classification using AI and rule-based approaches, granular permissions visibility with a simplified CRUDS model (Create, Read, Update, Delete, Share), continuous monitoring with out-of-the-box security policies, and compliance automation for regulations including GDPR, ISO, and NIST. A significant focus is placed on AgentForce readiness, positioning Varonis as essential for organizations looking to safely enable Salesforce's generative AI capabilities. The demonstration highlights how over-permissioned users could lead to data exposure when AI tools fetch data based on user permissions, and shows how Varonis can identify and remediate risky configurations including misconfigured Salesforce sites exposing data to guest users. The platform translates Salesforce Shield logs into actionable alerts without requiring coding or complex configuration, enabling security teams to investigate suspicious activity through a readable audit trail.

Chapters

0:00 - Introduction and Value Proposition
0:39 - Data Discovery and Classification
1:22 - Permissions Visibility and CRUDS Model
2:18 - Remediation and Risk Mitigation
3:02 - Compliance and Configuration Management
3:31 - Continuous Monitoring and Alerts

Key Quotes

1:05 "This is important for organizations looking to enable agent force, as the Gen AI tool relies on user permissions to fetch data. If a user is over-permissioned, it could lead to data exposure."
2:03 "By reviewing permissions across Apex code, field access, and record access, you can understand each user's exact blast radius."
3:45 "Varonis maximizes the value of your Salesforce shield logs with hundreds of out-of-the-box policies that instantly translate raw event data into actionable security alerts."

FAQ

How does Varonis help organizations prepare for Salesforce AgentForce?

Varonis ensures users only have access to data they need before enabling AgentForce. Since the generative AI tool relies on user permissions to fetch data, over-permissioned users could lead to data exposure. Varonis identifies excessive access at the record and field level and allows you to revoke risky permissions directly from the platform.

What compliance frameworks does Varonis for Salesforce support?

Varonis automatically ensures Salesforce configurations comply with regulations including GDPR, California SB 1386, ISO, NIST, and other security best practices. This helps organizations fix compliance violations and respond to audit requests efficiently.


Categories:
  • » Webinar Library » Varonis
  • » Data Protection » Backup & Recovery
  • » Cybersecurity » Data Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Data Protection
  • Compliance & Governance
  • AI & Machine Learning
  • Demo
  • Technical Deep Dive
  • Salesforce security
  • Data classification
  • Permissions management
  • AgentForce enablement
  • Compliance automation
  • Data access governance
  • Security monitoring
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Securing Sensitive Data in Salesforce with Varonis

              XStreaminars (watch here)

              • Jul
                28

                Illumio + Netskope: Zero Trust in the Age of AI Autonomy

                07/28/202601:00 PM ET
                • Jul
                  29

                  Ask Your Cloud Anything: Unlocking Governance Silos in your Environments

                  07/29/202601:00 PM ET
                  More events

                  Industry Events (watch there)

                  • Jul
                    22

                    Insights from Attackers During the FIFA World Cup: A HUMAN Dialogue

                    07/22/202601:00 PM ET
                    • Aug
                      19

                      Becoming Agent Ready: Insights from Cyera's Expertise

                      08/19/202612:00 PM ET
                      More events

                      Upcoming Webinar Calendar

                      • 07/21/2026
                        04:00 AM
                        07/21/2026
                        Strategies for Managing AI Governance and Securing App-to-LLM API Traffic
                        https://www.truthinit.com/index.php/channel/1967/strategies-for-managing-ai-governance-and-securing-app-to-llm-api-traffic/
                      • 07/22/2026
                        06:30 AM
                        07/22/2026
                        Insights and Strategies for Effective Data Privacy and Protection
                        https://www.truthinit.com/index.php/channel/2000/insights-and-strategies-for-effective-data-privacy-and-protection/
                      • 07/22/2026
                        01:00 PM
                        07/22/2026
                        Insights from Attackers During the FIFA World Cup: A HUMAN Dialogue
                        https://www.truthinit.com/index.php/channel/2029/insights-from-attackers-during-the-fifa-world-cup-a-human-dialogue/
                      • 07/28/2026
                        01:00 PM
                        07/28/2026
                        Illumio + Netskope: Zero Trust in the Age of AI Autonomy
                        https://www.truthinit.com/index.php/channel/2031/illumio-netskope-zero-trust-in-the-age-of-ai-autonomy/
                      • 07/29/2026
                        04:00 AM
                        07/29/2026
                        Real-Time Strategies for Safeguarding Against Prompt Injections
                        https://www.truthinit.com/index.php/channel/1968/real-time-strategies-for-safeguarding-against-prompt-injections/
                      • 07/29/2026
                        01:00 PM
                        07/29/2026
                        Ask Your Cloud Anything: Unlocking Governance Silos in your Environments
                        https://www.truthinit.com/index.php/channel/2048/ask-your-cloud-anything-unlocking-governance-silos-in-your-environments/
                      • 08/19/2026
                        12:00 PM
                        08/19/2026
                        Becoming Agent Ready: Insights from Cyera's Expertise
                        https://www.truthinit.com/index.php/channel/2036/becoming-agent-ready-insights-from-cyeras-expertise/
                      • 09/02/2026
                        12:00 PM
                        09/02/2026
                        Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                        https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                      • 09/30/2026
                        04:00 AM
                        09/30/2026
                        AI Command Center: Optimizing Visibility and Control in Your Operations
                        https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                      Truth in IT
                      • Sponsor
                      • About Us
                      • Terms of Service
                      • Privacy Policy
                      • Contact Us
                      • Preference Management
                      Desktop version
                      Standard version