
AgentExchange Private Listings Now Require Security Review
As of August 12, 2026, customers cannot install or demo an app from a private or unpublished AgentExchange listing until it has passed Salesforce Security Review.

As of August 12, 2026, customers cannot install or demo an app from a private or unpublished AgentExchange listing until it has passed Salesforce Security Review.

Salesforce is enforcing phishing-resistant MFA for privileged users and admins, amongst other requirements.

Salesforce is enforcing phishing-resistant MFA for privileged users and admins. This guide covers implementation steps and additional considerations.

With hackers exploiting vulnerable security flaws, Salesforce is enforcing stronger MFA and related security controls in 2026.

Salesforce is enforcing or moving toward enforcement of email verification, MFA, phishing-resistant admin auth, IP controls, and export policies by June 2026.

Salesforce's official security announcement for 2026, including required controls and enforcement timelines.