Cloudflare CASB Extends to Salesforce and Box

Cloudflare has added two new SaaS integrations to its API-based CASB (Cloud Access Security Broker) product: Salesforce and Box. The integrations let security and IT teams scan those environments for misconfigurations and risky sharing settings, closing a visibility gap for systems that often hold an organization's most sensitive customer and business data.

Scanning Salesforce for Exposure

Salesforce is a common hub for deal tracking, customer conversations, and contractual agreements — data that is highly attractive to attackers. With the new CASB integration, operators can connect their Salesforce environments and surface issues such as:

  • Uploaded files shared publicly with anyone who has the link.
  • Default permissions that grant employees access to records beyond a need-to-know basis.
  • Employees sending emails as other Salesforce users.

These checks help administrators spot problems that might otherwise go unnoticed inside a sprawling CRM deployment, giving them a chance to remediate before the data is leveraged against the organization.

Box: Catching Over-Shared Files

Box is widely used to store contracts, financials, product roadmaps, and employee records. The new Cloudflare CASB integration works alongside Box's built-in content and collaboration security to provide an additional layer of protection. Security teams can link their Box admin accounts and scan for files and folders shared publicly or with users outside the organization — a common vector for data exfiltration.

Cloudflare's status as an official Box Technology Partner underpins the integration. In a statement, Areg Alimian, Head of Security Products at Box, said the partnership enables joint customers to "have a single pane of glass view allowing them to consistently enforce security policies and protect leakage of sensitive information across all their apps."

Beyond the Big Two

The two new integrations expand Cloudflare CASB's coverage to include Google Workspace, Microsoft 365, Slack, GitHub, Salesforce, and Box. Cloudflare says more critical applications are on the way, and invites users to request specific integrations.

Organizations not yet on Cloudflare Zero Trust can try the platform with 50 free seats by signing up here, or contact the team here to learn more about using CASB to secure their SaaS apps.