Access & exposure review
Trace permissions and integration identities back to the work people need to do. Resolve access problems and prioritise unnecessary exposure.
Discuss this engagementDefine the work.
One org, selected business personas and agreed integrations or sites. Effective access is tested in representative scenarios.
What I investigate
- Profiles, permission sets, groups and record access
- External-user and site exposure
- Integration identities, connected apps and ownership
- Bypasses, risky grants and credential-related findings
What you take away
- Persona-to-access matrix
- Evidence-backed exposure findings
- Integration identity register
- Remediation and retest plan
Selected permitted and prohibited actions are tested, and residual access risks or unread areas are documented.
Scope notes
A configuration and access review is not a penetration test or compliance certification. Production changes follow your approved process.
The proposal confirms access, deliverables, fees, timing and change-control arrangements before work begins.
Where this can lead.
Platform-change readiness
What will this Salesforce change affect?
Explore the engagement Protect & prepareSandbox & UAT readiness
Is this environment ready for meaningful testing?
Explore the engagement Protect & prepareAgent configuration readiness
Is this agent configured to act within the right boundaries?
Explore the engagementBring the problem.
We’ll define the next step.
A release that feels uncertain. A journey that keeps breaking. An org nobody fully understands.