Winter ‘27 Release: Top Development & Security Features

What happened

The Winter '27 release of Salesforce introduces several key features for developers and security professionals, including the Headless Experience Layer, Agent Skills and Plugins, and MCP Risk Scores. These features aim to improve automation, compliance, and security for enterprises using AI-driven tools like Agentforce.

Why it matters

These updates are crucial for AI developers and security professionals as they provide tools to enhance automation, ensure compliance, and secure AI-driven workflows. The features help organizations manage complex environments more efficiently and reduce risks associated with third-party integrations.

• The Headless Experience Layer simplifies cross-platform development for AI-driven applications.
• Agent Skills and Plugins provide a centralized way to manage and reuse AI capabilities.
• MCP Risk Scores help identify and block high-risk third-party servers automatically.
• Observability Center enables real-time monitoring and troubleshooting of AI-driven workflows.
• Platform Encryption for Archive and Backup ensures compliance with data protection regulations.

The bigger picture

The Winter '27 release significantly impacts enterprise operations by streamlining development workflows, improving security through automated risk assessment, and enhancing compliance with global privacy frameworks. These updates help organizations scale more efficiently and reduce the risk of data breaches.

The Winter '27 release of Salesforce introduces a suite of development and security features that enhance automation, compliance, and security for enterprises using AI-driven tools. These updates are designed to help organizations build, secure, and scale their operations more efficiently.

Technical details

• Headless Experience Layer uses the agentic-api-service translation layer to render widgets across multiple platforms.
• Agent Skills and Plugins include an automated verification pipeline for naming, accuracy, and outcome quality.
• MCP Risk Scores are continuously monitored and provide risk ratings for third-party servers.
• Observability Center offers near real-time session tracing and performance monitoring for agentic deployments.

FAQ