Malware Scanning for Salesforce Files (GA)

Summer '26 makes malware scanning for Salesforce Files generally available, providing a platform-level security layer for file uploads without requiring external tooling.

Where

Applies to all files uploaded to Salesforce Files in Lightning Experience. Available across Enterprise and Unlimited editions with the feature enabled in Setup.

How

Once enabled, files are automatically scanned during upload. If a file is identified as malicious, it is flagged and admins receive a notification. The file remains quarantined and inaccessible to other users until reviewed.

Why

Files shared through Salesforce-between agents, customers, and partners-can be a vector for malware distribution. Built-in scanning removes the need to rely solely on endpoint antivirus and adds a centralized control point for file security.