购置
用于 Salesforce 安全观测的 Copado 收购 Valo.ai
在 Google 上的首选来源中添加 Unite.AI
2026年11月4日，科帕多宣布拥有收购 Valo.ai，为其所管理的软件交付平台增加了Salesforce环境的安全和操作可观察性。 收购将科帕多的监管范围扩大到了发布过程之外，在应用程序进入生产过程后持续存在的连接、许可和风险。
Copado的Agentia提供已经在企业治理控制下使用上下文AI agents实现软件规划、开发、测试和发布自动化。 瓦洛交易涉及一个不同的阶段：一旦这些变化被激活，管理员仍需要确定什么是相互联系的，谁有准入权，什么是变化的，哪里出现了业务风险。 首席执行官Ted Elliott 称要求随着AI agents加入日常业务而变得更加重要，将收购设定为受管交付与受管业务之间的连接开始。
Valo.ai由拥有Salesforce安全及平台技术建设经验的领导人创建，包括Salesforce盾牌。 其产品考察了现场环境，其中集成，许可和AI agents可以产生释放治理并不总是能看到的风险。
Valo 显示行动队
Valo给Salesforce管理员和业务团队一个连接应用程序，休眠集成，权限过多和未使用账户的优先视图。 每个用户，配置和权限设定都得到一个风险分数，而侧面比较则有助于暴露不必要的访问，包括前雇员保留的访问。 一个单独的地图为连接的应用程序分配了风险分数，集成到如此休眠或危险的连接突出。
调查结果还包括许可证支出。 平台标榜非活动用户和可能只需要低成本许可证的人，并找出减少行政努力的机会。 它的作用是提出问题并确定其优先次序；由客户小组决定采取何种行动。 在Copado的例子中，管理员可以找到一个不再服务于商业目的，但仍有Salesforce访问的集成，审查其权限，并决定是否取消该访问。
能力处于不同的阶段。 Valo的知名度被贴上标签，包括Agentforce在内的AI agents可以进入Salesforce组织。 这种区别很重要，因为更广泛的agent治理是计划扩展的一部分，而目前的产品则集中在人、许可、连接的应用和许可证上。
治理补救的分阶段路径
公司更深入的整合仍然停留在分阶段的路线图上。 Copado计划将Valo的生产情报输入到开发、测试和发布工作流程中，将已查明的风险转化为建议的变化，通过管理的过程可以验证和部署。 长期设计还将部署后的影响与补救联系起来，将治理范围扩大到释放之后。
人类控制在这种设计中是明确的。 大赦国际可以帮助寻找、确定优先次序和提出行动，而生产变化仍须得到客户的核准和审计线索。 大赦国际本身不会做出改变。 封闭的环路并没有完全运走：瓦洛的能见度和科帕多的发布工作流程今天已经存在，而其更深入的整合则在现场、试点和规划中分阶段进行。
独立的可用性和 Salesforce 盾牌
Valo.ai将继续作为独立产品提供，现有的客户将继续获得服务和支持。 Copado计划分阶段引进额外的综合能力，可用性和计时细节为宣布。 路线图还包括更广泛的AI-agent治理，并在最初的Salesforce重点之外扩大到更多的企业业务系统。
科帕多正将瓦洛定位在Salesforce盾旁边，而不是作为替代。 Shield记录活动并提供加密和审计历史。 VALO解释这项活动的含义，确定各小组考虑的行动和发现未使用的许可证；它不取代Shield的加密或审计历史。 一项业务治理评估为客户提供了初步阅读其暴露情况、优先审查清单以及对路线图中存在的内容和剩余内容的明确看法。
对于Salesforce团队来说，即时收益是对生产暴露的综合视图。 对Copado来说，更大的试验是将这些调查结果与治理性补救联系起来，同时在探测、建议和人类批准的变化之间保持明确的界限。
本文由 AI图鉴自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。
Acquisitions
Copado Buys Valo.ai for Salesforce Security Observability
Add Unite.AI to your preferred sources on Google
Copado announced on November 4, 2026 that it has acquired Valo.ai, adding security and operational observability for Salesforce environments to its governed software-delivery platform. The acquisition extends Copado’s oversight beyond the release process into the connections, permissions and risks that persist after applications enter production.
Copado’s Agentia offering already uses context-aware AI agents to automate software planning, development, testing and releases under enterprise governance controls. The Valo deal addresses a different stage: once those changes are live, administrators still need to establish what is connected, who has access, what has changed and where operational risks are emerging. Chief executive Ted Elliott said that requirement becomes more important as AI agents join everyday operations, framing the acquisition as the start of a connection between governed delivery and governed operations.
Valo.ai was founded by leaders with experience building Salesforce security and platform technologies, including Salesforce Shield. Its product examines the live environment, where integrations, permissions and AI agents can create risks that release governance cannot always see.
What Valo Shows Operations Teams
Valo gives Salesforce administrators and operations teams a prioritized view of connected applications, dormant integrations, excessive permissions and unused accounts. Each user, profile and permission set receives a risk score, while a side-by-side comparison helps expose unnecessary access, including access retained by former employees. A separate map assigns risk scores to connected applications and integrations so dormant or risky connections stand out.
Findings also cover license spend. The platform flags inactive users and people who may need only a lower-cost license, and it identifies opportunities to reduce administrative effort. Its role is to surface and prioritize issues; the customer’s team decides what action to take. In Copado’s example, an administrator can find an integration that no longer serves a business purpose but still has Salesforce access, review its permissions and decide whether to remove that access.
Capabilities are at different stages. Valo’s visibility into which AI agents, including Agentforce, have access to a Salesforce organization is labeled early release. That distinction matters because broader agent governance is part of the planned expansion, while the current product centers on people, permissions, connected apps and licenses.
A Phased Path to Governed Remediation
The companies’ deeper integration remains on a phased roadmap. Copado plans to feed Valo’s production intelligence into development, testing and release workflows, turning an identified risk into a recommended change that can be validated and deployed through a governed process. The longer-term design also connects post-deployment impact with remediation, extending governance beyond the moment of release.
Human control is explicit in that design. AI can help find, prioritize and propose actions, while production changes remain subject to customer approvals and an audit trail. AI will not make changes by itself. The closed loop is not fully shipping: Valo’s visibility and Copado’s release workflows exist today, while their deeper integration is phased across live, pilot and planned work.
Standalone Availability and Salesforce Shield
Valo.ai will remain available as a standalone product, and existing customers will continue to receive service and support. Copado plans to introduce additional integrated capabilities in phases, with availability and timing details to be announced. The roadmap also includes broader AI-agent governance and expansion into additional enterprise business systems beyond the initial Salesforce focus.
Copado is positioning Valo alongside Salesforce Shield rather than as a substitute. Shield records activity and provides encryption and audit history. Valo interprets what that activity means, identifies actions for teams to consider and finds unused licenses; it does not replace Shield’s encryption or audit history. An operational-governance assessment offers customers an initial read on their exposures, a prioritized review list and a clear view of what is live versus what remains on the roadmap.
For Salesforce teams, the immediate gain is a consolidated view of production exposure. For Copado, the larger test is connecting those findings to governed remediation while preserving a clear line between detection, recommendation and human-approved change.
Auto-fetched and translated by AI Atlas. All rights belong to the original author.