Aetrum LLC now does business as Trevaun. Same company, new brand. Read the noteAetrum LLC now does business as Trevaun. You followed an Aetrum link. Aetrum LLC now does business as Trevaun: same company, new brand. What changedAetrum LLC now does business as Trevaun.
Who can see which records, who can change them, and how did they get that access? Many orgs past year two cannot answer that with confidence. This assessment does.
This is not the right engagement if your org is new or still in its first implementation, if you need a code review of a build in progress, or if you need a compliance certification or formal audit opinion. For a review of the whole org, see the Architecture Assessment.
Every finding includes a remediation path that needs no product purchase. Where a tool is recommended, any commercial interest is disclosed in writing inside the report.
Up to twelve ranked findings, each with the exact evidence and the steps to reproduce it, so your own architect can verify or challenge any of them.
Ready to hand over when an auditor or a customer's security team asks.
Sequenced across this week, thirty days, and ninety days, with effort estimates and owners.
Written in full, as the template for the rest.
Your technical and business owners in the same room.
Finding F1 ยท High risk, small effort
We agree the scope and a fixed price first.
Your administrator sets up a user that can read everything and change nothing. Work starts once the connection is verified.
Three short interviews with your team, about four hours of their time in total including the readout.
Findings, evidence and the roadmap, walked through with your technical and business owners.
Led by a certified Salesforce architect. Trevaun is a Salesforce Consulting Select Partner.
Fifteen-plus years on the Salesforce platform, including ten years building on Salesforce at AOL and Yahoo across customer support and subscription platforms.
Read a sample excerpt (PDF) (opens in a new tab)
Your architect is the audience, not the obstacle. The report is built to be tested rather than trusted, and every finding includes the evidence and the steps to reproduce it. What an outside pass adds is the full picture of who can reach what, which nobody builds while they are also running a roadmap.
They score your settings against a Salesforce baseline, which is worth doing. Neither one tells you which people can actually reach which records, after profiles, permission sets, roles and sharing rules are combined. That is what this engagement answers.
Then you have documented evidence of that, which is what an auditor or a customer's security team will ask for anyway, at a fraction of what a formal audit costs. The report includes what was inspected and found clean, not only what was found wrong.
Yes. An agent runs as an identity, so its access is part of the same review: who and what can reach your Salesforce data, agents included.
Follow-on work is usually remediation of what the assessment found, or an ongoing advisory retainer. Both are scoped from the roadmap, so you see the price before you commit. If you also want your integrations, credentials and certificates reviewed, we scope that as a separate follow-on.
We reply within one to two business days.