Salesforce Agentforce: review, pricing, security and alternatives

What Salesforce Agentforce does

Salesforce Agentforce belongs to the business agents family: agents specialised in one job: customer support, sales, finance, legal, HR, security. The directory lists 52 agents in this family.

You use it from: web app and messaging (Telegram, Slack, WhatsApp…).

Who is Salesforce Agentforce for?

It targets a specific job (customer support, sales, finance, legal…) with workflows already set up. Typical tasks people give it:

• handle first-line customer requests
• prepare standard documents
• track cases and follow up

It is a good candidate if you want to talk to it from your usual messaging app, without opening another app, you prefer doing everything in a browser, with no install, and you want to try for free before paying.

Access and human control

According to its documentation, Salesforce Agentforce can:

• call online services and APIs
• read and send messages

We could not establish whether it asks for human approval before sensitive actions: test it first on an unimportant account or folder.

Salesforce Agentforce pricing

The cheapest paid plan that gives access to Salesforce Agentforce costs $2 per conversation, according to the official pricing page checked on October 25, 2026.

Agent prices change often and frequently depend on usage (credits, tasks, steps): check the pricing page before committing, especially for a team.

Getting started with Salesforce Agentforce

1. Create an account on the official website: the free tier is enough for a first try.
2. Pick the platform: web.
3. Give it a first playground with nothing at stake: a test folder, a secondary account or a throwaway project. Only open your real accounts once you have seen how it behaves.
4. Give it a short, checkable task, review the result and its action log, then raise the difficulty step by step.

Security: risk level

A business agent acts on the company's behalf: define what it may promise, refund or change, and keep a record of its decisions.

Points found for Salesforce Agentforce:

• Trifecta: access to private data, reading outside content and sending messages. That combination makes data leaks through prompt injection possible.

Three habits: least privilege (minimal rights, dedicated keys), human approval for irreversible actions, a sandbox for code execution. The AI agent security check reviews your setup in a few minutes.

Salesforce Agentforce and other business agents at a glance

The 7 best-ranked agents in the same family, 7 of them open source. The score out of 100 only applies to open-source projects; for proprietary services we show the published entry price. A dash marks information the documentation does not state.

How we rated it

We do not give proprietary agents a score out of 100: there is no public adoption or activity data for them comparable to open-source repositories, and we will not make up a number. This page relies on the vendor's documentation and pricing page, checked on October 25, 2026.

The risk level follows the same rule as for open-source projects: access granted, default human approval and where data is processed. Details on the method page.