Security Center open on a desktop showing user metrics. Agent Astro standing at the top wearing sunglasses and waving his hand.

Data Loss Prevention

Protect your Salesforce data from increasingly sophisticated external and insider threats. Identify, monitor, and secure sensitive data without slowing down innovation.

Strengthen Security Posture

Obfuscate data in Sandboxes using Data Mask and Seed to reduce the exposure of sensitive information during the development process. Tailor your masking policies to suit the sensitivity of your data using options like anonymization, pseudonymization, pattern-matching, or deletion.

Object Applicants

View all of your security permissions and controls in one place with Security Center. Centrally view, monitor, and manage your security posture across Salesforce to quickly identify any misconfigurations or improper access.

Permissions and Configuration Metrics

Identify sensitive data to reduce your risk profile. Quickly search and filter your data with pre-built classification templates that identify common field types (public fields, system fields, high-risk fields, etc). Advanced filtering functionality allows you to zero-in on unclassified fields and bulk classify your data with one click.

Data classification
Object Applicants
Permissions and Configuration Metrics
Data classification

Flag New Risks

Quickly identify critical changes to permissions and metrics to stay ahead of potential issues. Get proactively notified on any of our 80+ metrics in Security Center so you have an always-on pulse if your security posture changes.

Alert settings

Monitor security signals and identify anomalies with AI-driven detection. Agentforce flags suspicious activity like sudden permission changes, large data exports, and unusual login patterns across your Salesforce orgs, so you can respond before an incident occurs.

Detect Anomalies

Protect sensitive data from both internal and external threats with custom security policies created in Shield: Event Monitoring. Automatically block risky user actions and prevent data loss before it occurs with use case-specific policies. Receive real-time notifications to any potential threats to respond with speed.

Transaction Security Policies
Alert settings
Detect Anomalies
Transaction Security Policies

Investigate Exposures

Investigate user behavior with granularity, using logs that track 50+ events in Shield: Event Monitoring. Gain broader insights into events including logins/logouts, API calls, report exports, record access, and more. Extend visibility into user activities from the past with increased log retention of 30 days or more.

Event Monitoring Settings

Investigate security incidents using natural language queries in Security Center. Agentforce automatically gathers and summarizes key information, from login activity to records accessed. Get a complete picture of a threat in seconds, allowing you to understand the full context without manual effort.

Conversational Investigation

Get clear next steps to address risk and improve your security posture. Take critical actions based on Agentforce recommendations, like freezing user accounts, resetting passwords, and more to neutralize threats and prevent future incidents.

Remediation Plan
Event Monitoring Settings
Conversational Investigation
Remediation Plan
DLP Webinar

How strong is your data loss prevention strategy?

Learn best practices and actionable steps to improve visibility and detect risk.

Learn new skills with free, guided learning on Trailhead.

Data Loss Prevention FAQ

Data loss prevention (DLP) is an established IT security practice. It consists of tools and processes that help prevent the loss, misuse, or unauthorized access of sensitive data.

Data loss prevention solutions are tools that help administrators and security teams manage access to both systems and the sensitive data within them. Salesforce products that help with data loss prevention include Data Mask & Seed, Security Center, and Event Monitoring.

DLP works by first helping you understand your data landscape by identifying and classifying what's sensitive and where it resides. It then allows you to actively monitor user behavior and data movement to detect threats in real time and provide the tools to investigate and respond before a minor issue becomes a costly breach.

DLP protects against intentional misuse or theft of data. It prevents data exfiltration by cybercriminals, accidental sharing by employees, and insider threats where authorized users misuse their data access privileges. To protect from accidental data loss or corruption, extend your data protection strategy with backup and recovery tools.

Pricing varies based on each customer's individual data loss prevention needs. Our sales team will work with you to tailor a package that meets your requirements and price considerations, incorporating your company's specific size and industry.