Agentforce.
All posts.
CLI vs MCP vs Purpose-Built Tools, and Skills vs Agents: Claude Code, Copilot and Agentforce Vibes Compared
How CLI, MCP and purpose-built tools compare on token cost, what skills and agents are, whether agents can use skills, and how Claude Code and Copilot differ.
SalesBleed: How a Web-to-Lead Form Got Agentforce to Leak CRM Data, and What to Change in Your Org
SalesBleed slipped past the Trusted URL fix from ForcedLeak and used Slack link previews to leak CRM data. How it worked and what Agentforce settings to change.
Governing Third-Party MCP Servers in Agentforce: The Controls You Have Today
Winter '27 promises MCP risk scoring. Here are the controls that ship today: Agentforce Registry, tool allowlisting, Gateway policies, and their limits.
Agentforce Agent User Least Privilege: What the Wizard Grants, What Your Agent Actually Needs, and How to Audit the Gap
What the Agentforce setup wizard grants your service agent user, what it actually needs, and how to audit both before an attacker maps the gap for you.
Audit Your Agentforce Footprint: Every Agent, Agent User, and Permission in One Pass
Inventory every Agentforce agent, agent user, and permission with sf CLI and SOQL: the exact queries to see what your agents can touch, and from where.
Post-ForcedLeak: Hardening Agentforce Against Prompt Injection (The Setup Steps Nobody Published)
ForcedLeak turned a $5 domain into an Agentforce data-exfiltration channel. The concrete Setup hardening steps to shrink your prompt-injection blast radius.