If one theme defined Dreamforce this year, it was security — not as a side topic, but as a shared priority across the entire Salesforce ecosystem. From keynotes to breakout sessions, everyone was talking about how to protect data, identities, and trust as part of everyday innovation on the platform.
Identity takes center stage
One of the standout announcements came during a session featuring Okta’s CEO Todd McKinnon and Brad Arkin, Salesforce’s Chief Trust Officer. Together, they introduced Salesforce Security Mesh, a new framework that gives customers greater visibility into their entire security landscape — almost like a built-in SOC or SIEM for Salesforce.
Identity dominated the discussion. As Arkin pointed out, attackers are increasingly targeting user identities because they offer the easiest path to move within an organization’s environment. That trend matches what we’re seeing across the industry, where compromised credentials often serve as the first step in a breach.
View the full keynote below (credit: Salesforce)
This growing focus on identity security aligns perfectly with our latest launch at WithSecure. We’ve just introduced Identity Protection within Cloud Protection for Salesforce — a new capability that detects compromised partner, supplier, and customer accounts before attackers can exploit them. It gives organizations the same level of confidence in external identities that they already apply to their internal users.
Security is a team effort
Another strong theme emerged from WithSecure head of threat intelligence Karmina Aquino’s presentation to an audience of our customers, prospects and partners during Dreamforce. Her message was simple and clear: security in the Salesforce ecosystem requires teamwork.
Protecting the platform depends on collaboration between Salesforce, partners, and customers. It takes the right mix of people, process, and technology to mitigate risk effectively. The shared responsibility model is evolving from a framework into a mindset that every organization needs as cloud environments become more interconnected.
Adapting at the speed of attackers
Karmina also drew an insightful comparison between Salesforce today and the evolution of other major cloud platforms. Attackers have had years to refine their tactics against environments like Microsoft 365 — but they’re now applying the same advanced methods to Salesforce almost overnight.
The takeaway for customers is clear: attackers are moving fast, and defenders need to move faster.
Preparing for what’s next
Conversations at Dreamforce also turned toward the future. Data Cloud and Agentforce are transforming how organizations use Salesforce — and expanding the surface that needs protection.
Most incidents so far have affected traditional clouds like Sales Cloud, Service Cloud, or Experience Cloud. But as companies deploy AI agents that can act on data and automate workflows, the need for trust, governance, and proactive defense is rising fast.
That’s why our message to customers is simple:
Protect your current environments today — and get ready for the next wave of innovation tomorrow.
Progress through collaboration
Dreamforce ’25 made one thing crystal clear: no one is standing still. Salesforce continues to strengthen its platform with initiatives like Security Mesh and improved visibility tools. WithSecure Cloud Protection is advancing in-platform innovation with new capabilities such as Identity Protection and enhanced Agentforce protection. Customers, too, are becoming more proactive about governance, compliance, and risk management.
Security has become part of the conversation at every level — exactly where it belongs.
Dreamforce ’25 showed how far the Salesforce ecosystem has come — and how much opportunity remains to build trust through stronger, smarter security. Identity, collaboration, and speed will shape the next phase of cloud security. Together, we’re already moving in that direction.