--- title: "How Agentforce-Powered AI Security Workflows Speeds Incident Response" url: https://daily.dev/posts/how-agentforce-powered-ai-security-workflows-speeds-incident-response-4ctrz0eto source_url: https://engineering.salesforce.com/how-agentforce-powered-ai-security-workflows-accelerate-incident-response type: article source: "Salesforce Engineering" published: 2026-08-12T19:34:22.977Z updated: 2026-08-12T19:34:47.796Z tags: ["security", "llm", "ai-agents"] reading_time: 6 upvotes: 2 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How Agentforce-Powered AI Security Workflows Speeds Incident Response **[Salesforce Engineering](https://daily.dev/sources/salesforceeng)** · 6 min read · 2 upvotes · 0 comments ## Summary A Salesforce engineering architect describes how Security Center evolved from a conversational AI interface into a stateful, Agentforce-powered investigations platform for security incident response. The interview covers challenges in validating non-deterministic LLM behavior at scale (solved via AI-driven evaluation pipelines that boosted testing throughput 10-20X), managing finite context windows across large telemetry datasets, mitigating hallucinations in security reasoning, and architecting extensible data models across heterogeneous telemetry systems. It also touches on ongoing work to ground responses in Salesforce-specific security knowledge rather than relying solely on public foundation models. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do you test AI agents that give different responses to the same prompt every time? Non-deterministic LLM behavior can be validated using AI-driven evaluation pipelines where one AI system checks the outputs of another. Simulated customer interactions are fed into the agent, and LLM evaluators judge whether responses match the intended investigative outcome rather than checking for exact wording, increasing testing throughput by roughly 10-20X compared to manual validation. _daily.dev surfaces engineering approaches like AI-evaluating-AI for teams building trustworthy agent workflows._ ### How do you handle large security telemetry datasets that exceed an LLM's context window during an investigation? Large telemetry data is partitioned into smaller contextual segments and compressed using AI-driven summarization pipelines before being fed into the agent, avoiding raw data overload of the context window. This approach was built to support long-running security investigations spanning multiple telemetry systems where reasoning context could otherwise collapse mid-investigation. _engineers tackling context-window limits in agent design track these patterns on daily.dev._ ## Similar posts on daily.dev - [How Salesforce Security Uses Agentforce to Triage Security Reports](https://daily.dev/posts/how-salesforce-security-uses-agentforce-to-triage-security-reports-a11xdyj2l) · Salesforce Engineering · 0 upvotes · 0 comments - [Salesforce AI agents set to assist enterprises with security and compliance](https://daily.dev/posts/salesforce-ai-agents-set-to-assist-enterprises-with-security-and-compliance-tdgargvdp) · CSO Online · 0 upvotes · 0 comments - [Agentforce: Enabling Conversational Recommendations with AI-Driven Intent](https://daily.dev/posts/agentforce-enabling-conversational-recommendations-with-ai-driven-intent-yytqlm8nh) · Salesforce Engineering · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#llm](https://daily.dev/tags/llm), [#ai-agents](https://daily.dev/tags/ai-agents) [View this post on daily.dev](https://daily.dev/posts/how-agentforce-powered-ai-security-workflows-speeds-incident-response-4ctrz0eto)