Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.
Vulnerability/Penetration Report Summary - Diffeo
Attestation of the latest vulnerability test. It does not contain details of vulnerabilities or findings and is intended only to provide information on the tests performed and the scope of testing. Vulnerabilities discovered during testing are tracked and resolved in accordance with corporate policy and industry best practice.