Stopping a trojan horse in its tracks

WithSecure™’s CISO had to deal with the same question in 2017 when we switched from an alternate CRM application to Salesforce. Our security audit team noticed that the content going in and out of Salesforce was not being scanned in any way. Identifying this placed the system at risk of cyber threats such as malware, the team spent some time looking for a solution to mitigate the problem. There wasn’t a suitable one available to buy.

So we built our own!

WithSecure™ is a cybersecurity company and the market leader in Europe and have been in the IT security market for 35 years. We have a large portfolio of security products including an end-to-end cyber security product suite and dedicated threat hunting and consulting divisions. We are ISO 2701 and ISAE 3000 (SOC 2 Type 2) certified, and our technology, cyber security laboratories, and scanning engines are world-class.

We sent our experts to San Francisco and partnered with Salesforce so we could develop a security solution to fill the gap we had found. We used it internally for a few years and then, in 2020, released WithSecure™ Cloud Protection for Salesforce to the global markets.

WithSecure™ Cloud Protection for Salesforce is a Salesforce-native security tool. It runs on the Salesforce platform and doesn’t require any special customizations, complex integrations, or external portals. It’s a simple plug-in solution that can be downloaded from the Salesforce AppExchange and be up and running in less than 20 minutes.

WithSecure™ is an ISV partner for Salesforce, and our tool is fully compatible and monitored by Salesforce. They review our code to ensure the product is safe to use by all its customers.

WithSecure™ Cloud Protection for Salesforce comes without performance overheads, it runs in the cloud and simply scans files and URLs uploaded to your company’s Salesforce cloud storage areas. As it’s a Salesforce-native, tailor-made application, the reliability of protection provided by our bespoke solution can’t be matched.

When it finds something suspicious, that file or link is quarantined while the admins are notified. If the Salesforce project is scaled up and extended, the tool also scales and continues to protect, providing complete real-time visibility into the movement and status of all uploaded files and URLs in the evolving and expanding Salesforce ecosystem.

 WithSecure™ Cloud Protection checks the validity of links in real-time every time they are used, meaning even malicious URLs that morph to get around filters are stopped in their tracks. We’ve also included advanced security analytics with full audit trails. Your security team can see what has happened when it happened and investigate efficiently. It’s also easy to integrate metadata, alerts, and workflows to your SIEM or other third-party security systems.

Find out how some large organizations use WithSecure™ Cloud Protection for Salesforce.

If you’d like to learn more, download our latest ebook