How to Secure Salesforce: Essential Best Practices to Protect SaaS Data
Learn how to secure Salesforce with best practices for identity management, OAuth governance, and continuous monitoring to prevent data breaches.
Resource Hub
A collection of content to level up your SaaS and AI security program.
-
Beyond the hype: The critical role of security in responsible AI development
Melissa Ruzzi shares why AI pipelines need zero trust principles and continuous human oversight.
-
When AI Agents Serve Shared Workspaces, Authorization Must Follow the Audience
Aaron Costello at AppOmni found that Virtual Agent and Now Assist trusted a hardcoded secret plus email address for account linking.
-
Supply-chain attack against open source projects could have big impact
Cory Michal, VP of Security and IT at AppOmni, weighs in on the large-scale impact of the Trivy compromise.
-
Can Anthropic Keep Its Exploit-Writing AI Out of the Wrong Hands?
“No one can ever keep anything 100% out of attackers’ hands.” — Melissa Ruzzi, Director of AI at AppOmni.
-
EvilToken and Microsoft 365: A Familiar Attack Playbook, Scaled with AI
High-value M365 user orgs targeted by an AI-powered device code phishing campaign. Here’s how the EvilToken attack happened, and what prevention controls to take.
-
Building Trust Into Automated Cybersecurity Decisions
Melissa Ruzzi shares in Cyber Security Tribe how organizations build trust in agentic AI cybersecurity decisions with governance, explainability, and accountability.
-
Top 10 Best SaaS Security Posture Management (SSPM) Tools 2026
AppOmni is selected for its enterprise-grade capabilities, focusing on deep configuration management & policy enforcement across critical SaaS apps.
-
GenAI Alone Isn’t Enough: Rethinking AI in Cybersecurity
Melissa Ruzzi, Director of AI at AppOmni says GenAI alone isn’t enough for security.
-
Why Your SaaS Platform Is an Open Door for Hackers—And How to Stop It With Aaron Costello
Aaron Costello with AppOmni exposes how modern SaaS platforms, like ServiceNow, are vulnerable to zero-day exploits that can turn your trusted systems into weapons.
-
The Right Role for Agentic AI in Security Operations (SOC)
Not all autonomous AI decisions carry the same risk. Melissa Ruzzi shares in Cyber Security Tribe how to implement agentic AI in security operations safely from low-risk assessments to high-stakes remediation actions.
-
How to build an enterprise-grade MCP registry
“A public MCP registry has to be very well evaluated for possible security risks before use,” says AppOmni’s Ruzzi.
-
RSAC 2026 Recap: From AI Hype to Real SaaS Security Outcomes
RSAC reinforced that AI is everywhere, but real value comes from applying it thoughtfully. Strong data, governed identities, and continuous SaaS monitoring matter more than speed or features.
Critical applications secured
Protect data essential to your business
Microsoft 365
Salesforce
ServiceNow
Workday
Google Workspace