Security Center Adds Agentforce: Automated Risk Detection & Conversational Investigations

Security Center now integrates Agentforce to detect anomalies, triage incidents, and provide conversational investigation workflows—reducing investigation time and helping admins stay proactive about org security.

Agentforce meets Security Center

Salesforce’s Security Center has been upgraded to include Agentforce-powered automation and a conversational sidebar, allowing admins and security teams to move from manual triage to faster, guided investigations. This integration automatically assesses risk, surfaces anomalies, and presents a Timeline of Events and suggested mitigation plans.

What’s new

  • Automated anomaly detection and risk assessment across users and org activity.
  • Triaged incidents converted into actionable investigations with a Timeline of Events.
  • Conversational sidebar that lets admins query user behavior and exports using natural language.
  • Predrafted mitigation plans that admins can review, edit, and approve to close incidents.

Benefits for admins and security teams

  • Faster investigations: Agentforce does the initial cross-referencing (logins, exports, audit trails) so admins start with context, not a blank slate.
  • Lower cognitive load: Natural language queries reduce the need for complex queries or deep security expertise.
  • Scalability: Particularly useful for regulated industries and high-growth orgs that need to scale security operations without proportionally expanding headcount.
  • Actionable guidance: Suggested mitigation plans accelerate response and help enforce consistent remediation steps.

Where and when

The conversational interface for Security Center is available now to shorten investigation times and present clear next steps. In Spring ’26, Agentforce will automatically detect and surface anomalies and triage them into investigations with timelines and full mitigation suggestions.

Resources

Why this matters

For Salesforce admins, developers, and business users, the Agentforce integration in Security Center represents a step change in operational security. It reduces time-to-detection and time-to-remediation, lowers the barrier to executing security investigations, and helps maintain a robust security posture as organizations scale.