Skip to content

Project

Salesforce Agentforce

Salesforce's AI agent platform letting businesses build autonomous agents that act on CRM data and workflows.

Current stories

productOne report1 publisher

Ascerta raises $18M to show enterprises which AI projects make money

Ascerta raised an $18 million Series A led by Dell Technologies Capital for software that ties enterprise AI spending to revenue and savings. So far, the evidence that buyers want it is two named customers and performance figures Ascerta reports about itself.

Publishers:siliconangle.com

Reality

Evidence30
Adoption20
Hype gap+40
Incentives70
Confidence40
buildOne report1 publisher

SalesBleed made Agentforce leak CRM Account data over DNS from a public lead form

Zenity Labs demonstrated SalesBleed, a proof-of-concept that used a public Salesforce lead form to make Agentforce read Account records and leak them over DNS. Salesforce has already patched it.

Publishers:dev.to

Reality

Evidence50
Adoption
Not scored
Hype gap+20
Incentives
Not scored
Confidence55
securityOne report1 publisher

Planted web-form lead steered Salesforce Agentforce into leaking CRM records to an outside server

Noma Labs disclosed ForcedLeak, a CVSS 9.4 chain that let a planted Salesforce web-form lead steer Agentforce into leaking CRM data. Salesforce blocked the exit on September 8, leaving audits of recent leads and agent activity as the open task.

Publishers:noma.security

Reality

Evidence45
Adoption
Not scored
Hype gap+35
Incentives75
Confidence50
securityConfirmed2 publishers

Poisoned Web-to-Lead submissions made Salesforce Agentforce leak CRM data past Trusted URLs

Zenity Labs found three Salesforce Agentforce bugs that let a planted sales lead drive zero-click CRM data theft and Slack phishing. Each attack began with one poisoned lead-form submission, and Salesforce fixed all three within 79 days of Zenity's report.

Reality

Evidence58
Adoption
Not scored
Hype gap+15
Incentives40
Confidence62
productOne report1 publisher

Dataiku sells an agent inventory to the nine in 10 CIOs who say they already have one

Dataiku ships Agent Management in October with connectors into Salesforce, AWS, Microsoft and Google agent runtimes, metered per agent monitored. The bill grows with every agent the inventory turns up.

Publishers:siliconangle.com

Reality

Evidence44
Adoption10
Hype gap+34
Incentives84
Confidence54
productOne report1 publisher

Okta puts an enforcement point between AI agents and the tools they call

Agent Gateway enforces policy on each tool call and logs it as it happens, while deactivating an agent in the console today only blocks new sessions. Okta says revoking live tokens and cutting sessions in flight is planned.

Publishers:siliconangle.com

Reality

Evidence42
Adoption27
Hype gap+30
Incentives80
Confidence55
leadershipOne report1 publisher

Copilot Chat read confidential mail for weeks past the DLP policy set to stop it

A February 2026 Microsoft admin advisory and the EchoLeak flaw before it both began in AI features vendors switched on inside already-approved apps, putting the missing review squarely on the operator's side of the line.

Publishers:forbes.com

Reality

Evidence45
Adoption
Not scored
Hype gap+35
Incentives82
Confidence55
productOne report1 publisher

Capsule puts a 71-millisecond judgment between an agent and the action it intends

The startup fine-tuned two Nvidia Nemotron models to allow, flag or block each action an agent intends, and reports 98% accuracy on a 9,429-trajectory benchmark whose own authors say accuracy is the wrong test.

Publishers:siliconangle.com

Reality

Evidence32
Adoption27
Hype gap+36
Incentives80
Confidence43