ModifyAllData + API enabled, MFA missing. Toxic combination.
Salesforce monitoring · security · limits · compliance
Your Salesforce org
isn’t telling you everything.
OrgGuardian scans your org continuously and surfaces what nobody is watching: toxic permissions, missing MFA, expiring certificates, limits hitting their ceiling. Every finding is explained in plain English, quantified in euros, and delivered with its remediation.
Salesforce managed package · 10-minute install · 30-day trial on request
Three real findings, produced by OrgGuardian on its demonstration org
Work queue
prioritised by severity, then by euros
4 users hold both ViewAllData and ModifyAllData without enforced MFA.
11 of 12 callouts failing (HTTP 500), 2.3 s average over 24 h. No quantifiable loss: an integration outage, not an exposure.
92 open findings, 7 of them critical
€2,209,040 estimated annual exposure
47 gaps across 8 frameworks
72/100 health
Findings and amounts genuinely produced by OrgGuardian on its demonstration org, whose data is seeded. On an org that has never been audited, there are always some.
- 100%
- of the computation inside your org, under your access rules — no egress by default
- 0
- OAuth tokens to issue in order to install and scan, no service account to create, no secret to rotate
- 8
- frameworks mapped article by article, including DORA, NIS2, ISO 27001 and SOC 2
- 10 min
- to install — Salesforce managed package, nothing to host
The problem
Salesforce guarantees the platform.
Nobody guarantees your configuration.
The permissions, integrations, certificates and limits of your org are your responsibility. That is exactly where the risks live, and nothing native watches them.
For the CISO
An invisible attack surface
An integration user that combines “Modify All Data” with API access and no MFA. A certificate expiring in 12 days. Three forgotten connected apps. These weaknesses trigger no native alert: you discover them at audit time, or at incident time.
For the CIO / admin
An org drifting in silence
API limits at 90% on the evening of the month-end close, asynchronous jobs piling up, an integration endpoint down with nothing reported, configuration drifting from the standard. Everything is fine, until the day it is not.
For the executive team
A risk never quantified
“Are we exposed?” is an executive question, not a technical one. Without a figure in euros or a consolidated view, Salesforce risk stays a blurred line between IT and the exec committee. And DORA/NIS2 arrive with obligations to provide evidence.
The console
A console installed inside your org.
Three readings: executive, CISO, admin.
A 100% native managed package: nothing to host, nothing to connect. Each screen answers one precise question, in the language of whoever reads it.
Continuous scan
40+ detectors
Every hour, once the console has been opened
Security, limits, integrations, code, configuration: the org is combed through continuously, within the scope of your plan. The scan schedules itself the first time you open the console, and the first findings arrive within the hour.
In plain English
0 jargon
Actionable findings, not alerts
Every finding says what is wrong, where, why it matters, and how to remediate — with a step-by-step playbook for the most frequent families of findings. No flood of false positives.
In euros
€2.2M on our demo org
Risk becomes a defensible figure
Every open finding is valued by a weight in euros — its severity crossed with its category, uplifted by its occurrences — and the total stands up in front of a committee. The weights are inspectable and adjustable by you: if a figure looks wrong to you, you change the line that produced it.
Alerts
Where you already work
Email and in-org notifications, then Slack, Teams, PagerDuty and webhook depending on the plan. Routing by severity, deduplication, escalation. One alert = one action.
Correlation
One incident, not five alerts
Endpoint down + jobs piling up + a burst of errors = a single correlated incident, with its blast radius.
Multi-org
Consolidated view
Groups and service providers: a read-only web viewer, hosted in the European Union, that brings the posture of all your orgs together on a single page.
Compliance
DORA and NIS2, translated into measured gaps.
The regulations require you to prove that you control your technology stack. OrgGuardian maps its detectors onto the articles, measures the gap article by article, and generates the evidence exports for the auditor.
// mapping
Every article tied to its detectors
Access management, MFA, logging, incidents, continuity: each requirement is linked to the detectors that cover it, those that contribute to it, and what remains outside the technical scope. See the article-by-article detail.
// measurement
Gaps measured, not declared
“MFA enabled for privileged accounts” is not a tick-box: it is a fact measured in your org, timestamped, replayable. 47 gaps on our demo org, across all frameworks, each with its remediation.
// evidence
Exports ready for the auditor
Timestamped CSV/JSON, an exportable committee report, snapshot history with a verified integrity chain. The auditor receives a documented trail, not a screenshot.
Our honesty as a vendor
The regulatory mapping is built methodically, article by article, and reviewed internally. The two NIS2 points of interpretation that remained in doubt (Articles 21(2)(f) and (g)) were settled by a compliance expert’s verdict on 2 August 2026: the verdict and the exact scope of each mapping are displayed in the product, not in the small print.
OrgGuardian measures the technical posture of your Salesforce org. It is no substitute for your DPO, for your legal counsel, or for a full compliance audit.
Trust
By default, no data leaves your org.
The product’s non-negotiable principle: the analysis lives on your side.
100% inside your org
Scan, findings, history: everything is computed and stored in your Salesforce org, under your access rules (strict user mode). Nothing is sent out by default.
Fail-closed by design
An unconfigured feature never degrades silently: it switches itself off and says so. What you see is what is running.
Optional external viewer, in the EU
No outbound flow is active on delivery. Two can be opened, one at a time and by you: the health aggregates to the viewer (no personal data, hosted in the European Union), and the Slack, Teams, PagerDuty or webhook alert channels, which go to your destination through your Named Credential. Each one is explicit, consented to on a dedicated screen, and revocable.
Read-only, zero surprises
OrgGuardian never modifies your configuration. The remediations it proposes remain human actions, documented, that you carry out.
What the package asks of your org
No token, but read rights, and we may as well write them down here: OrgGuardian needs to see the configuration (“View Setup and Configuration”) in order to read profiles, permission sets, certificates and connected apps, and to read the objects it creates in your org. It runs under the session of the person who opens the screen, with that person’s own sharing rules — not under a technical account. The permission sets shipped are visible before installation, on the package listing.
An attestation to hand over, not a screenshot
When a customer, an auditor or an insurer asks you to prove your posture, you open a trust link: a public page that shows the state of the org without giving access to the console. It carries a mandatory expiry date, is revoked individually once the engagement is over, and is never indexed. You choose what it exposes, and for how long.
What this site processes, who hosts it and who to write to: our legal notice and our privacy policy. The list of the viewer’s sub-processors and the liability cap live in the DPA and the terms of service, provided before any subscription. The DPA and the contractual terms are provided on request at privacy@orgguardian.com.
Pricing
One plan per size of organisation.
The price follows your Salesforce size, never the value of your data.
Discovery
for evaluation
€0
- 1 org, basic alerts
- 7-day retention
- 30-day trial of the full plan, on request
Free forever, no payment card
Small business
up to 15 Salesforce users
€49/ month (1 to 5 users)
- 1 to 5 users: €49
- 6 to 15 users: €99
- Security posture, code quality, email alerts, web viewer
No commitment, cancellable monthly
Recommended
SME & mid-market
16 to 250 Salesforce users
€249/ month (16 to 40 users)
- 16 to 40 users: €249
- 41 to 100: €499
- 101 to 250: €1,490
- DORA / NIS2 compliance pack included
NIS2 in principle targets entities with at least 50 employees; DORA targets financial entities, whatever their headcount. An org’s number of Salesforce users is not its headcount: it is our billing basis, not a regulatory threshold.
Enterprise
beyond 250 users
€2,490/ month (251 to 600 users)
- 251 to 600: €2,490
- 601 to 1,500: €4,990
- Beyond that: quote
- Annual billing, dedicated DPA, fleet of up to 5 orgs included
Service pack: SLA, guidance, additional orgs
Small business, 4 users: €499/year
SME, 30 users: €2,540/year
Mid-market, 150 users: €15,200/year (€10.2k at founder pricing)
Enterprise, 540 users: €25,400/year
Amounts excluding VAT, prepaid annually (15% discount included); monthly billing with no commitment remains available at the price shown on the cards, except Enterprise, sold annually only. Billing basis: the org’s full, active Salesforce licences. Portal, community, guest and integration licences are monitored, never billed, and the basis is never aggregated across orgs — an additional org is billed at 30% of its own tier. Contractual floor: €499/year, below which the org stays on Discovery. A tier is crossed at renewal, never mid-year, and the first year at the new tier carries a 25% discount. Founder pricing: −33% for 24 months on Small business, SME and Mid-market, for the first 20 customers or until 31/03/2027, in exchange for a public reference.
Guidance
The product is enough. Guidance accelerates.
Week 1
Assisted onboarding
Two sessions with an expert: installation, reading the first report, prioritising findings, tuning alerts. Your teams are self-sufficient within a week.
Every 6 months
Half-yearly Success Plan
Posture review: trends, new detectors, audit preparation, remediation roadmap. The product measures, we help you decide.
Partners
MSSP / systems integrator offer
Multi-tenant console, a status page per customer, volume-based tiered pricing: additional orgs are billed at 30% of their own tier. Each org keeps its own measurement and history; the viewer brings them together on a single page.
Frequently asked questions
Frequently asked questions
Does OrgGuardian send data outside my org?
Not by default: no outbound flow is active on delivery. All computation and storage live in your org. Two flows can then be opened, one at a time, by your administrator: the health aggregates to the external viewer — no personal data, hosted in the European Union — and the Slack, Teams, PagerDuty or webhook alert channels, which go to your destination. Each one is revocable at any time.
How long until the first results?
Ten minutes to install. The recurring scan schedules itself the first time you open the console, and the first findings arrive within the hour that follows: on an org that has never been audited, there are always some.
Is it suited to an SME with 20 users as well as to an account with 10,000?
Yes. The collectors are designed for Salesforce limits (bulkified mode, circuit breakers, quotas) and tested on heavily loaded orgs. Pricing follows size: each tier has its own single price, detailed in the pricing table above.
Does OrgGuardian replace Salesforce Security Center or Health Check?
No — OrgGuardian is a complement, not a replacement. It goes far beyond Health Check, which is point-in-time, technical, and carries neither financial exposure nor alerts. Against Security Center, it brings what that product does not cover: DORA/NIS2 compliance article by article, monitoring of integrations and limits, risk quantified in euros, and the external viewer. The two complement each other; we publish no price comparison, as Salesforce does not make its own public.
What happens at the end of the 30-day trial?
You choose a plan, or you fall back to Discovery (free, 7-day retention). Nothing is deleted without notice, and the export of your posture stays available.
Is the DORA/NIS2 mapping a guarantee of compliance?
No, and be wary of anyone who promises it. OrgGuardian measures the technical posture of your org and produces the evidence. Compliance remains a company-wide effort, with your DPO and your counsel. The trickiest NIS2 points of interpretation were, moreover, settled by a compliance expert’s verdict, displayed in the product itself.
Ready in 10 minutes
Your first posture report, today.
Install OrgGuardian on your org, let the first scan run, and look at what nobody had shown you yet.
reply within 24 working hours · guided installation offered free during the launch phase