--- title: Mandiant plugs Salesforce leaks with open source tool description: Mandiant released AuraInspector, a free open source tool that helps Salesforce administrators detect and fix misconfigurations in Salesforce Aura (the UI... canonical: https://daily.dev/posts/mandiant-plugs-salesforce-leaks-with-open-source-tool-fqroefijv twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Mandiant plugs Salesforce leaks with open source tool | daily.dev og:description: Mandiant released AuraInspector, a free open source tool that helps Salesforce administrators detect and fix misconfigurations in Salesforce Aura (the UI... og:url: https://daily.dev/posts/mandiant-plugs-salesforce-leaks-with-open-source-tool-fqroefijv og:image: https://api.daily.dev/og/posts/FQROEFijv.png og:image:alt: Mandiant plugs Salesforce leaks with open source tool og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Mandiant plugs Salesforce leaks with open source tool **[The Register](https://daily.dev/sources/theregister)** · 2 min read · 0 upvotes · 0 comments ## Summary Mandiant released AuraInspector, a free open source tool that helps Salesforce administrators detect and fix misconfigurations in Salesforce Aura (the UI framework for Experience Cloud sites) that could expose sensitive data. The tool automates detection of common access control issues, such as unauthenticated users gaining access to records via the getItems method or GraphQL API abuse. It provides read-only scanning and generates remediation recommendations without modifying Salesforce instances. Despite many customers migrating to Lightning Web Components, Aura remains widely used for legacy functionality, and security researchers continue finding widespread data leaks from misconfigured Salesforce Community and Experience Cloud sites. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [AuraInspector: Auditing Salesforce Aura for Data Exposure](https://daily.dev/posts/aurainspector-auditing-salesforce-aura-for-data-exposure-ewk2rh2hz) · Google Cloud · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#graphql](https://daily.dev/tags/graphql), [#data-protection](https://daily.dev/tags/data-protection), [#salesforce](https://daily.dev/tags/salesforce) [View this post on daily.dev](https://daily.dev/posts/mandiant-plugs-salesforce-leaks-with-open-source-tool-fqroefijv) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Mandiant plugs Salesforce leaks with open source tool","url":"https://daily.dev/posts/mandiant-plugs-salesforce-leaks-with-open-source-tool-fqroefijv","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/mandiant-plugs-salesforce-leaks-with-open-source-tool-fqroefijv"},"datePublished":"2026-01-13T12:39:54.452Z","dateModified":"2026-01-13T12:40:15.437Z","description":"Mandiant released AuraInspector, a free open source tool that helps Salesforce administrators detect and fix misconfigurations in Salesforce Aura (the UI...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b0d2ff195591c90b1cf839da8bb765bf?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b0d2ff195591c90b1cf839da8bb765bf?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/mandiant-plugs-salesforce-leaks-with-open-source-tool-fqroefijv","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,open-source,graphql,data-protection,salesforce","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"Mandiant plugs Salesforce leaks with open source tool"}]} ```