Category
Tools and utilities for Salesforce admins and developers.
salesforce · security · tools · compliance
Summer '26 moves Salesforce Data Mask & Seed on-core with automated PII detection. Here's why unmasked sandbox data is a real compliance risk — and how to fix it.
Scott Covert ·
salesforce · security · compliance · tools
Salesforce's phishing-resistant MFA hits July 1, but you don't need a YubiKey. A FIDO2 passkey in 1Password qualifies—a stored TOTP code doesn't. Here's the right setup.
Scott Covert ·
salesforce · conference · appexchange · security · permissions · tools
Tython's Permissions Assistant won the Raleigh Salesforce User Group DemoJam! See how we answer 'who can see what, and why?' using our fully native and Salesforce Security Reviewed application.
Scott Covert ·
compliance · security · tools
Native Salesforce auditing tools often fall short of the rigorous demands imposed by SOX, HIPAA, and SOC 2. While configuration changes and logins are tracked by default, critical blind spots remain; specifically regarding record-level read access, restricted field history caps, and brief data retention windows that fail to meet multi-year regulatory requirements.
Scott Covert ·
security · salesforce · permissions · tools
Get a free tool to audit your Salesforce Connected Apps. This video demos how to instantly find risky authorizations, device flow apps, and old connections.
Andrew Chen ·
