NEW Continuous permission drift detection

Every Salesforce org,
under control.

Forceware is the control plane for Salesforce org management. Compare metadata across sandboxes and production, ship changes through real pipelines, audit who can see what, and catch drift before your users do.

Start free Read the docs

Connect an org with OAuth in under a minute. Read-only scopes by default.

Works across every org in your estate

Production Full & partial sandboxes Developer orgs Scratch orgs Dev Hub Unlocked packages Managed packages
One platform, two jobs

Built for both sides of the org

Developers and administrators work on the same metadata but rarely with the same tools. Forceware gives each of them the view they need — and a shared source of truth.

For developers

Source-driven workflows that behave like the rest of your engineering stack.

  • Scratch org lifecycle — spin up, seed, and expire ephemeral orgs per branch.
  • Real metadata diffs — component-level comparison instead of raw XML noise.
  • CI/CD that fits — validation deploys, coverage gates, and rollback from any runner.
  • Conflict resolution — see who changed what in the org before you overwrite it.
  • CLI and REST API — every action in the UI is scriptable.

For administrators

Governance and visibility without exporting a single spreadsheet.

  • Access reviews — answer "who can see this field?" in one query, with evidence.
  • Unused metadata cleanup — surface fields, reports, and flows nobody has touched.
  • Change audit trail — a searchable history of every setup change, by person.
  • Sandbox refresh kits — post-refresh steps and masked data applied automatically.
  • Limit and health alerts — storage, API calls, and failing flows before they page you.
Capabilities

Everything your org estate needs

Six services that share one metadata graph, so a change you make in one is understood by all the others.

Org Explorer

A live inventory of every object, field, flow, Apex class, and integration user across all your orgs — searchable and cross-referenced.

Metadata Diff

Compare any two orgs — or an org against your repo — and get a readable, component-level changelist you can act on directly.

Deployment Pipelines

Promote work from scratch org to production through named stages, with approvals, validation runs, and one-click rollback.

Permission Analyzer

Trace effective access from user to record — through profiles, permission sets, groups, and sharing rules — and see exactly which grant is responsible.

Data Seeding

Build reusable, referentially intact datasets with sensitive values masked, then load them into any sandbox after a refresh.

Health Monitoring

Continuous checks on governor limits, API consumption, storage, failed flows, and Apex errors — routed to Slack, email, or a webhook.

How it works

Connected in a minute, useful immediately

1

Connect your orgs

Authorize with OAuth — no passwords, no security tokens to paste, no IP ranges to open. Start with read-only scopes and grant deploy rights when you are ready.

2

Get the full picture

Forceware indexes your metadata and builds a dependency graph, so drift, unused components, and risky permissions surface on the first scan.

3

Automate the routine

Turn findings into pipelines, scheduled audits, and alerts. Wire the same actions into your existing CI with the CLI or REST API.

Developer experience

Scriptable from the first command

The CLI is not an afterthought — it is the same API the web app runs on. Drop it into any CI runner, pin it in a container, and keep your org workflow in version control alongside everything else.

CLI reference CI/CD recipes
zsh — forceware 
$ forceware org connect --alias prod
✓ Connected ACME Production (00D5f000000AbCd)

$ forceware diff prod uat --type ApexClass,Flow,PermissionSet
  ~ 12 changed   + 3 added   - 1 removed

$ forceware access explain --user j.reyes --field Opportunity.Margin__c
  granted via PermissionSet/Revenue_Analyst → FLS read

$ forceware deploy uat --plan release-2026.09 --check-only
✓ Validation passed · 482 tests · 91% coverage
Trust

Your org data stays yours

Forceware sits beside your orgs, not in front of them. Access is scoped, auditable, and revocable at any time from Salesforce setup.

OAuth only

Named-principal OAuth with the narrowest scopes that do the job. No stored credentials, no security tokens.

Least privilege

Read-only by default. Deploy and write scopes are granted per org, per pipeline, and expire on a schedule you set.

Regional hosting

Choose the region your metadata index lives in, and keep it inside the boundary your policy requires.

Full audit log

Every read, deploy, and export is recorded with actor, org, and timestamp — exportable to your SIEM.

Pricing

Priced by the orgs you connect

Plans differ in how many orgs you connect and how many people work with you. A connected Git repository counts as an org.

  • Personal

    free

    $0.00 / month

    • 2 connected orgs
    • 1 member
    Start free

  • Professional

    $14.95 / month

    • 5 connected orgs
    • 3 members
    Get started

  • Team

    $49.95 / month

    • 10 connected orgs
    • 10 members
    Get started

  • Business

    $99.95 / month

    • 25 connected orgs
    • 20 members
    Get started

  • Enterprise

    Contact us

    • Orgs and members to fit your estate
    Contact us
Contact

Talk to us

Enterprise plans, a demo, or a question about your orgs.

Email

hello@forceware.io

Phone

866-996-2906

Stop guessing what changed in your org

Connect your first org free and run a full metadata and permission scan in minutes. No credit card, no install, no sales call to get started.

Start free Book a demo

Free for two orgs · Revoke access any time from Salesforce setup