In this interactive session, we will walk through what “Salesforce native” actually means versus what most vendors want you to think it means. In 2025, the Salesloft Drift breach exposed more than 700 Salesforce instances in ten days. Gainsight followed three months later. The attackers did not breach Salesforce — they walked through trusted connections that admins had approved. This session breaks down the architectural difference between apps that live inside your org and apps that only connect to it, why that distinction defined the security story of 2025, and what Spring ’26 tells us about where Salesforce is heading. You will leave with a practical checklist of seven questions to ask every vendor before you click install.