ADVISORY: Malware in Polyfill.io Code Poses Threat to Salesforce and Exposes Over 100K Websites to Attack
DigitSec
Automated Application Security Testing Platform for Salesforce
Effortless Security for Salesforce & B2C Commerce
WHY?
Security is a Shared Responsibility
As a Salesforce customer, you are directly responsible for custom code, data protection such as PII, compliance requirements, and other critical components derived from customization. The DigitSec SaaS security platform for Salesforce enables you to address your responsibilities within the shared responsibility mode
OWN YOUR RISK
Salesforce's Responsiblity
- Core applications
- Network Controls
- Server OS
- Physical Servers
- Physical Network
- Physical Data Center
Your Responsibility
- Custom Code
- 3rd-Party Libraries
- Configurations
- Installed Cartridges
- User Accounts & Permissions
- Device Security
- Compliance requirements
- PII and Other Data
Trusted Across the Globe
READY TO try a quick SCAN?
SUSTAINABLE SECURITY
“InCountry ran DigitSec four times daily, with each and every release commit. This empowered our developers to remediate application security bugs minutes after coding them. The quick cycle of finding vulnerabilities and fixing them on the same day was key to accelerating our SDLC and at the end of day, our app’s secure deployment in the AppExchange”
“Even our most experienced developers can not find all of the issues discovered by DigitSec. We constantly save several hours by automating security testing. DigitSec is a must have application in your pipeline. Don’t release code without it.”
“We take security at Hanna Andersson very seriously and wanted to implement consistent security controls for our custom development on Salesforce Commerce Cloud. DigitSec’s security solution enabled us to bake security into our development process. Our technical team found DigitSec easy to integrate into our processes for automated security testing. DigitSec’s support was unmatched and it is great to have DigitSec as a partner in our security journey”
“DigitSec helps redefine how DevSecOps can work efficiently in CI/CD pipelines by automating what were once difficult and manual tasks.”
“DigitSec helped us through the Salesforce AppExchange security review process. It is a good product and [it’s] beneficial in the security review process as well as helping us remain compliant in the continuous development arena.”
Latest at DIGITSEC
- CRUD/FLS Flaws (Authorization Bypass)
- Reflected Cross-site Scripting (XSS)
- Stored Cross-site Scripting (XSS)
- DOM Based Cross-site Scripting (XSS)
- Lightning Components Security (DOM, XSS, CRUD)
- SOQL & SOSL Injection
- Cross-site Request Forgery (CSRF)
- Common Vulnerabilities and Exposures (CVE)
- Weak Session Management
- Weak Integration Endpoints (Remote sites, CSP, CORS)
- Weak Password Controls
- Clickjacking Attacks
- Access Control (Excessive Permissions)
- Weak Cryptography