Summer ‘26 Release: Top Development & Security Features

Key Takeaways

• Agentforce Vibes 2.0: A major leap in AI-assisted coding with model flexibility and React support.
• Developer Productivity: Streamlined workflows with enhancements to Data Mask & Seed and the new Multi-framework capability.
• Security & Compliance: Proactive risk scoring with the new Security Mesh, and expanded residency options with Archive on Hyperforce.

The Summer ‘26 release is here, bringing a wave of innovation to the Salesforce Platform. From agent-powered assistance to next-generation data security and developer productivity tools, this release is designed to help you build, secure, and scale your org faster than ever. 

We’ve rounded up the most impactful dev and security features for the Summer ‘26 release so you can start exploring them today.

Agentforce & AI App Development 

Agentforce Vibes Innovations

Agentforce Vibes, Salesforce’s enterprise vibe coding solution, now includes an Abilities & Skills framework that dynamically activates domain-relevant context (e.g. MCP tools) and reusable, task-level playbooks based on user intent. Developers can also choose from additional frontier LLMs like Claude Sonnet, Claude Opus, and GPT-5. Plus, Vibes now supports generating React apps for pixel-perfect UIs and offers flexible pricing with Flex Credits or flat fee user subscriptions.

Availability: GA 

Headless Experience Layer

The Headless Experience Layer (HXL) is Salesforce’s UI-agnostic orchestration engine — the evolution of Lightning Types — that decouples business logic from the interface so developers can define an experience once and deploy it anywhere. With the Summer ’26 release (Release 262.9), Vibe Coding for Custom Lightning Types and its LWC is now generally available, giving developers a powerful new way to vibe rich, interactive UI components directly within the Salesforce Platform.

This milestone marks a key step in the HXL journey: Lightning Types have long powered surfaces like Employee and Service Agents on Desktop, Mobile and Enhanced Chat V2, and now with CLT Skill GA, developers can build and iterate on custom Agent Responses faster and more intuitively than ever before — all within the trusted, governed foundation of the Salesforce Platform.

Availability: Vibes Skill is GA with additional functionality launching later this year

Salesforce Multi-framework

Salesforce Multi-Framework is the runtime capability that supports Industry UI frameworks, starting with React. It turns centralized business rules into fully governed, production-ready code for any surface. Developers no longer have to waste time porting or rebuilding the same tool for different platforms; you can turn centralized business rules into production-ready, framework-native code – no porting required.

Availability: GA

Data Mask & Seed Enhancements

Slow manual data setup, empty sandboxes, or Sandboxes with PII delay critical app development and testing cycles, while also putting data at risk. To help customers address these challenges, Data Mask & Seed is now a core app with a simpler UI, speeding up app development. The new on-core version includes proactive PII detection to save you time and automates mock data injection, on top of all existing features.

Availability: GA 

Setup with Agentforce

Setup with Agentforce brings AI-powered assistance directly into Salesforce Setup, helping admins configure, troubleshoot, and manage their organization using natural language prompts. To access Setup with Agentforce, enable Agentforce and Data 360 in your org, both of which are included in Salesforce Foundations.

Availability: GA

Data Security & Privacy 

Security Mesh

The proliferation of disconnected security tools has resulted in ‘vendor sprawl,’ making it impossible to maintain a centralized view of your organization’s risk. Security Mesh, part of Security Center, unifies disparate data sources across Salesforce and other critical security partners like Okta and CrowdStrike into a cohesive data fabric, transforming disconnected alerts into intelligent risk scores to catch anomalies faster and surface security threats that may otherwise go undetected.

Availability: Event Monitoring Data and Okta User Data are GA later this month. CrowdStrike Endpoint Security and integration with Agentforce in Security Center are expected in future releases.

Security Center Essentials

Security Center Essentials gives every Salesforce customer a centralized hub to monitor and manage their security posture. Admins can now monitor key security metrics from a single dashboard without the need for complex configuration. It’s the perfect starting point for organizations looking to establish a security baseline and proactively manage risks.

Availability: GA expected July ‘26

Archive on Hyperforce

Regulated industries and global enterprises often face data residency roadblocks. Even if they want to archive data, they are legally or contractually barred from doing so if the archive resides in a different geographic region or doesn’t meet specific high-security standards like FedRAMP High. With Hyperforce-backed archiving, you can now eliminate these residency roadblocks. This solution is now available globally and automates data retention within the Salesforce Trust Layer, providing secure, localized sovereignty.

Availability: GA

Backup & Recover Next

In addition to facing strict data residency requirements, organizations must protect critical Salesforce data from corruption or accidental deletion. Backup & Recover Next is the first and only Salesforce-native backup solution to offer FedRAMP High compliance, able to meet these strict requirements. This product now includes on-demand backups, new compare views, and file and data hierarchy restore tools for native, compliant business continuity.

Availability: Currently available in select regions with expanded availability in upcoming releases

Learn more:

• Discover what else is new on the release page
• Take the Summer ’26 Release module on Trailhead
• Read the Summer ’26 Release Notes