Vulnerability Management and Response Plan Summary

This document serves as the public version of the Salesforce Vulnerability Management and Response plan, which is part of our overall vulnerability management program. The plan applies to all security vulnerabilities that occur across Salesforce services and within Salesforce developed products. Salesforce defines a security vulnerability as any unintended capability within our product offerings and services that can adversely affect the confidentiality, integrity, or availability of any Salesforce computing service or the data of our customers.