30-Day Free Trial • 15 Prompts • Bring Your Own API Key

Plan, Build, and Verify
Salesforce Changes with AI

Go from plain-English request to deployed Salesforce delivery across fields, secure Apex, LWC bundles, permission sets, bounded updates to named existing Flows, list views, dashboards, and more. Clean runs move automatically; your team steps in only when a run needs it. Underneath it all, an intelligence layer scans your org, remembers what it learns, and watches for risky change.

Fields • Flows • Apex • LWC • List Views • Dashboards • Auto-deploy when clean

🔒 Controlled org deploys Approval when needed📑 Full audit trail🔐 AES-256 encryption👤 SSO & policy-based MFA🚀 Auto-deploy clean runs
Evidence first
plan, validate, deploy, and verify each run
Fields to LWC
one surface for supported build work
Policy driven
Change Guardian evaluates scans when monitoring is configured
THE ASK One box. One verdict.

Plain English in.
A build-ready plan out.

Type the change you need. The same intake pass that drives the build locks onto the entities in your org — blue is resolved, amber will be created or asked about — and resolves to a single readiness verdict before anything runs.

BUILD A CHANGEDEV · Deployment Verification Only

blue = things the machine resolved in your org · amber = things it will create or ask a human about. Nothing else earns pixels.

THE ORG, INDEXED

Grounded in your metadata,
not a hallucination of it.

SF Agent crawls your org into a queryable graph before it plans anything. Every proposed change is checked against what actually exists — and the blast radius is computed before a single line deploys. Try it: hover and click the graph.

ORG INDEX · LIVE GRAPH1,204 components · 3,861 edges · generation 47
exists in org proposed by run touched — collision-checked
Hover to identify · click a node to see how the platform grounds every change in what actually exists.

The Old Way vs. SF Agent

Turn a plain-English request into a deployment-ready Salesforce change instead of bouncing between Setup, code, testing, and manual metadata work.

Without SF Agent
  1. 1Navigate to Setup → Object Manager → Opportunity
  2. 2Click Fields & Relationships → New, set type, label, API name, precision
  3. 3Configure field-level security for each profile
  4. 4Navigate to Validation Rules → New
  5. 5Write the formula syntax, test, debug formula errors...
  6. 6Navigate to Apex Triggers → New
  7. 7Write trigger code with bulk-safe patterns, create handler class
  8. 8Write test class (75% coverage), run tests, fix failures
  9. 9Update Permission Set to grant field access
  10. 10Verify everything works end-to-end
~2-3 hours of Setup + coding
With SF Agent
  1. 1Type: "Add a required Revenue field to Opportunity. Block saving when Stage is Closed Won but Revenue is blank. Create a trigger that logs revenue changes."
  2. 2SF Agent plans the change and auto-deploys when the run is clean. If something needs confirmation, you step in.
  3. 3Done. The change lands in Salesforce with an audit trail.
One governed workspace, with timing measured per org and change
Natural Language to Deployment

From Description to Deployment

Stop hand-editing metadata and clicking through Setup. Describe the Salesforce change you need, let SF Agent generate the plan, and auto-deploy the clean runs.

Supported build work: custom fields, validation rules, flows, Apex classes, triggers, test classes, LWC bundles, permission sets, layouts, record types, list views, reports, dashboards, custom settings, report types, and more.

Human in the loop when it matters: if the AI runs into ambiguity or a blocker, users can provide input directly on the run so SF Agent can continue with the right context.

Transform Workbench Beta remains available as a secondary lane for modernization work.

Try It Free
// You describe what you need: "Add a required Revenue field to Opportunity and a validation rule that blocks save when Stage is Closed Won but Revenue is blank" // AI generates the deployment spec: { operations: [ { type: "CUSTOM_FIELD_CREATE", target: "Opportunity.Revenue__c" }, { type: "VALIDATION_RULE_CREATE", formula: "AND(ISPICKVAL(...))" } ] } // Clean run → policy-controlled deploy + verification evidence

One platform, understood by everyone

SF Agent means something specific to each person who touches Salesforce change — from the boardroom to the debugger.

Executives & Buyers

Delivery speed without the delivery risk.

Turn a backlog that took a consulting statement-of-work into governed, plain-English changes. Every run leaves a tamper-evident audit trail, and the platform is sandbox-first — it never touches production uninvited.

  • Lower change cost vs. consulting engagements
  • Full evidence trail for every deployment
  • Humans approve; nothing ships behind your back
Admins & Ops

Describe the change. Skip the Setup maze.

Stop clicking through Setup and hand-editing metadata. Type what you need in plain English; SF Agent plans it, validates it against your real org, and deploys the clean runs — asking you only when a decision is genuinely yours to make.

  • Fields, flows, validation rules, layouts, permission sets
  • Grounded in a live index of your actual org
  • Guided recovery instead of raw Salesforce errors
Developers & Architects

Real, reviewable code — not a black box.

Bulk-safe, FLS-aware Apex with genuine test coverage, LWC bundles, and triggers — compiled into one atomic Metadata API package, check-only validated, and identity-hashed so what you approve is exactly what deploys. Or download the package for your own CI/CD.

  • One deterministic package per change, hash-verified
  • Salesforce check-only validation before anything commits
  • Deployable zip for your existing release pipeline
Security & Compliance

Governed by design, provable on demand.

Human approval gates on the exact compiled artifact, a source→plan→package→approval→deploy evidence chain, least-privilege permission sets, AES-256 encryption, and SSO with policy-based MFA. The platform validates against a sandbox, so prod stays yours.

  • Approval bound to the exact artifact hash
  • Immutable decision + model-trace records
  • SSO, policy MFA, tenant isolation, encryption at rest

Built for Natural Language to Deployed Changes

Generate supported Salesforce primitives from natural language and ship clean runs into Salesforce, with a human step only when the run needs it.

Data Model & Configuration

Custom objects, fields, record types, validation rules, page layouts, and picklist values. Generated from your description, deployed via Metadata API.

Automation & Code

Flows, Apex classes, Apex triggers with test classes, LWC bundles, approval processes, assignment rules, list views, dashboards, custom settings, and report types. Each operation goes through preflight validation before reaching your org.

🔍

Auto-Deploy or Step In

Clean runs can move straight through to deployment. When a change needs confirmation, SF Agent surfaces the plan so you can inspect exactly what will change before approving.

🔄

Transform Workbench Beta

Modernization is a secondary lane when you need it: break Profiles into Permission Sets, reconstruct Workflow Rule or Process Builder behavior, and implement the best-fit secure Apex or non-Flow design.

🔒

Validate → Deploy → Verify

Three-layer safety: preflight checks before deploy, quality gates on the spec, and post-deploy verification that fields exist, flows activate, and Apex compiles.

🛠

Guided Error Recovery

Deploy failures are classified into structured fix options, including retry, rename, or skip paths, instead of raw Salesforce error dumps and manual guesswork.

Supported Primitives

These are the Salesforce primitives SF Agent is positioned to generate, validate, and deploy from plain-English requests, with human review only when the run needs it.

Modernization Lane

Transform Workbench Beta handles org cleanup and legacy migration work, but the core product story is still feature delivery across supported Salesforce primitives.

Data Model

Custom ObjectsCustom FieldsFormula FieldsPicklist ValuesRecord TypesPage LayoutsValidation RulesCustom Settings

Automation and Code

FlowsApproval ProcessesAssignment RulesApex ClassesApex TriggersTest Classes

UI and Access

LWC BundlesPermission SetsList ViewsReportsDashboardsReport Types

Modernization Beta

Profiles to Permission SetsWorkflow Rules to FlowProcess Builder modernizationLegacy Automation Cleanup

Coming Soon In Development

These primitives are being built and tested. They will move into supported status as each one passes live deployment validation.

Matching RulesCustom ApplicationsPath AssistantLightning Message ChannelsAura BundlesCSP Trusted SitesBusiness ProcessesCustom TabsWeb LinksCustom Notification Types

Enterprise Security, Built In

Security controls are part of the architecture and remain subject to customer validation, deployment configuration, and production assurance.

🔒

Deployment Controls

Decide how your team deploys. Clean runs can move automatically, higher-risk changes can require a human step, and every run stays visible with traceable audit history.

🔐

AES-256-GCM Encryption

All secrets and API keys encrypted at rest with AES-256-GCM. Random IV per encryption. Your BYOK keys never stored in plaintext.

👤

Salesforce SSO + MFA Controls

Use Salesforce SSO via PKCE OAuth, or email and password with email or TOTP challenges. Tenant policy, enrollment state, trusted devices, and email-service configuration determine when MFA is enforced.

🔑

Bring Your Own API Key

Use your own Anthropic, OpenAI, or Azure key. Full control over model selection and cost. Keys encrypted at rest, used only in-flight.

📑

Immutable Audit Trail

SHA-256 hash-chained audit log. Every deployment, login, and admin action recorded with tamper-detection built in.

👥

Role-Based Access Control

Four roles: Admin, Developer, QA, Viewer. Tenant-scoped server-side authorization is designed into protected operations and is continuously covered by security and negative-authorization testing.

🛡

Data Egress Policies

Three policy levels: block all model calls, allow summaries only, or require approval. Control exactly what data leaves your tenant.

🛠

CSRF + Origin Validation

HttpOnly secure cookies, SameSite=Lax session handling for OAuth compatibility, SameSite=Strict trusted-device cookies, origin validation on mutating APIs, and server-side rate limiting for auth and run creation.

More Than a Builder — Your Org’s Intelligence Layer

SF Agent connects delivery work to governed org context: retained scan evidence, permission-aware memory, drift analysis, recommendations, and decision records.

🧠

Persistent Org Memory

Completed scans, builds, and governed drift events can contribute durable, source-linked memory. Ask questions in plain English and inspect the org evidence used in each answer.

🛡

Change Guardian

When scheduled monitoring is configured, Change Guardian compares scans, detects supported drift, estimates blast radius, ranks risk, and creates evidence your admins can review.

📐

Well-Architected Org Scan

A diagnostic mapped to Salesforce Well-Architected concerns such as legacy automation, security posture, technical debt, and API-version age. Supported findings include evidence, impact context, and priority.

🤖

Agentforce Readiness Score

Planning AI agents on your org? Use a readiness assessment across observable data configuration, automation health, security, and metadata hygiene, with cited gaps for human review.

Tamper-Evident Governance

Covered AI and human decisions are written to hash-chained records so later mutation or missing links can be detected. Governance exports preserve the evidence for independent review.

🔧

Repair Agent

When validation fails, bounded repair attempts can classify Salesforce errors, propose package edits, and revalidate. The run stops for review when policy, confidence, or retry limits require it.

🗃

Your Metadata, Your Git

Org snapshots serialize into clean SFDX source format — the same diff-friendly structure Salesforce tooling uses — for a version history you own. Your org’s state stays reviewable, comparable, and yours.

📈

Self-Learning Loop

Eligible failures can become structured lessons. Recurring patterns are proposed as governed rules and must pass review and evaluation gates before influencing future runs.

📊

Model Cost Visibility

Tracked model calls expose usage and estimated cost by run, purpose, and model. Bring your own supported provider key and use routing policies and budgets to control spend.

THE PIPELINE Twelve stations. One human diamond.

AI decides what to build.
Deterministic code decides how.

Round nodes are machine stations that run without you. The amber diamond is the only place a human is interrupted — and only when the answer is genuinely unknowable. Everything with a safe default gets the default; everything the AI breaks, the AI repairs first.

01Input Captureauto
Your words, verbatim, become the contract for the run.
02AI Interpretationmodel
Intent → typed primitives. The intake you previewed above.
03Review & Approvalhuman gate
Auto-approved when low-risk. Asks only the genuinely unknowable.
04Deterministic Planning0 tokens
Every operation mapped to a typed executor — no guessing.
05Org Contextlive
The plan is re-grounded against your live org, this minute.
06Architectureauto
Trigger → handler → service. Established patterns, not vibes.
07Code Auditcontract
Security policy + test-evidence contract, self-repair on failure.
08Implementationgenerated
Bulk-safe, FLS-aware Apex with recursion guards and real tests.
09Deploy Preflightfail-closed
Existence, references, collisions — before Salesforce sees it.
10Salesforce DeploycheckOnly → quick
The org itself validates the exact package before anything commits.
11Post-Deploy Verificationbehavioral
Did the org actually change the way you asked it to?
12Evidence & Traceabilityledger
Receipts written for every stage. Nothing taken on faith.

THE RULE: a human is interrupted only when the answer can’t be inferred safely. Clean runs move automatically, end to end.

THE RECEIPTS Trust is a ledger, not a promise.

Every run leaves evidence
your auditor can read.

What the model was asked, what it answered, what the org validated, who approved what — a tamper-evident trail on every run. This is what no consulting invoice ever includes.

RUN LEDGER · cc1f63e6spec sha256 · 437bb0b1b06d
RCPT-01Requirement confirmationintent hash matched at run start — zero drift between ask and buildSEALED
RCPT-02Model trace · 16 callsevery prompt + response archived, redaction attested per callARCHIVED
RCPT-03Human decision recordwho approved, what they saw, and when — immutableHUMAN
RCPT-04Salesforce checkOnly validationthe org compiled and validated the exact package before deployPASSED
RCPT-05Apex test evidence · 3/3positive · negative · bulk — material assertions, no tautologiesPASSED
RCPT-06Deployment packagedownloadable zip — runs in your own CI/CD without usYOURS
0+
Primitive types
0
Deterministic checks
0
Human gate
$0
Tokens to analyze

A $200K consulting engagement ends with a slide deck. A run ends with receipts.

From Sandbox Evidence to a Controlled Release

SF Agent assembles inspectable packages and Salesforce validation evidence. Your release policy and authorized reviewers decide whether a production deployment proceeds.

1

Assemble the Package

Supported changes are compiled into a deployment package — package.xml plus metadata — that you can download and inspect before deployment.

2

Validate Against Your Org

Check-only validation runs against the selected target org, with Apex test level selected by environment and policy. The resulting Salesforce response becomes part of the run evidence.

3

Bounded Repair

If validation fails, the Repair Agent can classify the returned errors, propose an edit, and revalidate within explicit retry, confidence, and approval limits.

4

You Click Deploy

When Salesforce reports the validation as eligible, an authorized user or policy can request quick deploy using its validation reference. The outcome is recorded in the audit and governance evidence.

How It Works

Three steps from requirement to deployed Salesforce work — watch it happen end-to-end.

Live walkthrough · ~2 minWatch a plain-English request use org context, move through the governed delivery pipeline, and produce Apex deployment evidence you can inspect.
1

Connect Your Salesforce Org

Sign up and connect through a Salesforce Connected App using guided OAuth setup. No managed package or custom in-org component is required for the current integration model.

2

Describe & Validate

Type your requirement in plain English. SF Agent generates the plan, runs validations, and prepares the build path for deployment.

3

Auto-Deploy or Step In

Clean runs deploy automatically. If the run needs confirmation, you step in, approve the change, and the platform completes deployment with verification.

Deep dive · Connect a sandboxFirst-time setup walkthrough: create a Connected App in Salesforce, paste the credentials, complete OAuth.

Free Evaluation Trial

SF Agent is in evaluation — use the available workflow in a sandbox, review its evidence, and help shape the production offering. Paid plans come later; early design partners get first access.

Evaluation Access
Free Trial

Evaluation access. No credit card.

Explore the currently available build, deployment, scan, monitoring, and governance capabilities in a sandbox evaluation.

  • All supported metadata types
  • 15 prompts over 30 days
  • 1 connected org
  • Bring your own API key (Anthropic, OpenAI, or Azure)
  • Auto-deploy clean runs, human step when needed
  • Org scan, Change Guardian & readiness score
  • Tamper-evident audit & governance export
  • No credit card required
Start Free Trial

During evaluation the platform is free — model usage is billed by your own AI provider. Pricing plans will be announced later.

Frequently Asked Questions

Short answers to the questions serious buyers, admins, and platform teams ask before they trust automation in a Salesforce org.

How much does it cost?
SF Agent is currently offered for sandbox evaluation at no platform charge and without a credit card. Your AI provider may charge for model usage when you bring your own key. Commercial packaging and production terms have not been announced.
What metadata types are supported?
Custom fields, custom objects, record types, validation rules, formula fields, Apex classes, triggers, test classes, LWC bundles, permission sets, page layouts, list views, reports, dashboards, custom settings, report types, approval processes, assignment rules, bounded updates to named existing Flows, and modernization workflows such as Profiles to Permission Sets or legacy automation to secure Apex. New Flow creation is intentionally disabled. Additional primitives including matching rules, custom applications, path assistant, lightning message channels, and more are currently in development.
Is this safe for my Salesforce org?
The platform is built around controlled Salesforce delivery. Clean runs can move automatically, and runs that need confirmation are surfaced for human input before deployment. Three layers of safety: preflight validation, spec quality gate, and post-deploy verification.
What is the Transform workbench?
It is the secondary modernization lane for teams with legacy Salesforce configuration, and it is currently in beta. It can assess Profiles to Permission Sets, automation cleanup, and Workflow Rule or Process Builder modernization, then recommend secure Apex or LWC + Apex. A named existing Flow is considered only for a bounded, baseline-preserving local update.
What happens if a deployment fails?
The platform classifies the error into 8 categories and offers structured fix options — "auto-fix and retry," "use a different name," or "skip this operation." No raw Salesforce error dumps. Metadata API deployments are transactional, so failed deploys dont leave partial changes.
What AI model does it use?
You bring your own API key — we support Anthropic (Claude), OpenAI, and Azure OpenAI. Full control over model selection and cost. Keys are encrypted at rest with AES-256-GCM. The architecture is model-agnostic.
How does authentication work?
The platform supports email and password, email-delivered or TOTP challenges, optional trusted-device recognition, and Salesforce SSO through PKCE OAuth. MFA enforcement depends on tenant policy, enrollment, and production email configuration. Session, password, and login-attempt controls are enforced server-side.
Do my team members each need a Salesforce license?
SF Agent can deploy through a governed Salesforce integration identity, so SF Agent users do not each need Salesforce administrator credentials solely to operate the integration. Salesforce licensing for people who use Salesforce remains governed by your Salesforce agreement; SF Agent does not promise a specific license saving.
Do I need to install anything in Salesforce?
The current integration uses a Salesforce Connected App and does not require a managed package or custom in-org component. Setup time varies with your organization’s security review, access policy, and Connected App approval process.
Where does my org’s metadata live?
Your metadata stays under your control. Org snapshots can be serialized into standard SFDX source format for a version history you own, secrets are AES-256-GCM encrypted at rest, and data egress policies let you decide exactly what — if anything — is sent to a model. SF Agent works from metadata, not your business records.

Ready to Evaluate Governed Salesforce Delivery?

Connect your Salesforce org, describe one real request, and see how SF Agent handles the build path from natural language to deployed Salesforce work.

Start Free Trial
No credit card required for SF AgentBring your own API keyModel usage billed by providerHuman step when needed
SF Agent — Governed Salesforce Change Intelligence