Connect
Authenticate through Salesforce OAuth. Org Sentinel never asks for or stores the Salesforce password.
Salesforce intelligence in your browser
Turn org complexity into the next clear action.
Org Sentinel analyzes limits, users, security, automations, release evidence and data reliability, then explains what deserves attention, why it matters and what to do next.
Browser-nativeWorks beside Salesforce
Explainable scoresSource and method on every signal
Release decisionsGO, warnings or NO-GO
Privacy-firstNo Salesforce password collection
How it works
From Salesforce evidence to an operational decision
The extension uses the permissions of the Salesforce user who connects it. Missing access is reported as a coverage limitation, never replaced with invented data.
Collect
Read permitted limits, metadata, operational events and administrative evidence directly from the active organization.
Prioritize
Normalize findings and rank them by severity, urgency, impact, recency and operational risk.
Act
Investigate in searchable tables, document a release decision, export evidence or mark the item as handled.
Attention now
See the few issues that matter before the many metrics that do not.
Instead of presenting a wall of numbers, Org Sentinel turns signals into a prioritized work queue with context and recommended next steps.
- Critical, high, medium, low and informational severity
- Filters by API, security, storage, users and automations
- Search, investigation status, resolve and temporarily ignore
- Evidence, collection source, calculation and known limitations
Explainable health model 2.0
Understand the score, the evidence and what was not measured.
The health view evaluates 22 weighted factors across eight operational areas. It keeps model coverage, access coverage and confidence separate, so unavailable Salesforce evidence is never presented as healthy.
- Security, users, API, storage, automations and integrations
- Release quality and governance evidence
- Source, calculation, limitation and recommendation per factor
- No score below 60% of applicable evidence coverage
Activity and investigation
Move from a signal to the underlying records without losing context.
Recent changes and quick investigations help answer who, what, when and where. Searchable tables make it possible to locate a specific user, integration, permission or failure.
- Chronological administrative and operational activity
- User search and last observed platform activity
- Permission, login, API, flow and storage investigations
- Exportable evidence with explicit data-coverage notes
Release management
Guide a release from readiness to post-release evidence.
The release center now presents a nine-stage workflow with explainable gates, coverage, blockers and a visible GO/NO-GO recommendation.
- Release Readiness and automatic preflight
- Change intelligence and org comparison
- Deployment history and Validate Only guidance
- Post-release monitoring, evidence and audit
Data engineering
Follow reliability from Salesforce to the lakehouse.
Data Reliability connects source evidence with pipeline, freshness, schema and reconciliation signals so engineers can investigate impact without losing the Salesforce context.
- End-to-end reliability and evidence coverage
- Freshness, pipelines and job outcomes
- Schema contracts and drift
- Reconciliation and consumer impact
Specialized workspaces
One product for administration, releases and data reliability
The same evidence model supports three different operational jobs without hiding how a conclusion was reached.
Org operations
Limits, users, permissions, login anomalies, storage, API consumers, failed automations, integrations and administrative changes.
Explore org operations →Release readiness
GO/NO-GO decision, automatic preflight, change intelligence, org comparison, deployment history, validation evidence and post-release monitoring.
Explore release management →Data reliability
Salesforce-to-Databricks or Snowflake mappings, schema drift, freshness, provider runs, reconciliation evidence and data-contract health.
Explore data reliability →Shared audit trail
Encrypted cloud history, members and roles, release comments, approvals, decisions, evidence and account-level retention controls.
Compare team plans →Security by architecture
Designed to reduce credential and tenant risk.
Salesforce OAuth tokens remain inside the extension. Cloud synchronization uses an explicit allowlist of normalized operational metrics, with encryption, tenant isolation and audit controls on the server.
- Manifest V3 and restrictive CSP
- Exact-origin CORS allowlist
- AES-256-GCM sensitive-data encryption
- PostgreSQL tenant isolation and RLS
- Ed25519-signed entitlements and Enterprise evidence
- HMAC-verified Paddle webhooks
- Encrypted offsite backups
- Export and permanent deletion controls
Certification transparency: Org Sentinel does not currently claim ISO 27001, SOC 2 Type II, PCI DSS or Salesforce AppExchange certification. Implemented controls and formal certification status are documented separately on the security page.
Start with real evidence
Connect one organization and see what deserves attention.
Seven days of Team features, no card required and no automatic charge.