Connect
OAuth 2.0 with PKCE. Connect any Salesforce org in under a minute. Disconnect anytime — no data export, no holdouts.
OAuth + PKCEEncrypted token storageDisconnect anytime
~60 seconds
TECHNICAL DEBT, PRICED IN DOLLARS
See every dollar of technical debt hiding in your Salesforce org.
Get a free audit of your org and see every issue priced in dollars. We read metadata only, so we never touch a customer record. Clean the org before you agent the org.
Built by Chris Heppner · 13-year Salesforce Architect · USMC veteran · 70+ enterprise org audits
Read-only · Metadata only · Your data never leaves Salesforce
vanguardops · scan date June 12, 2026
15
findings
52/ 100
Health grade
F$125,064
Estimated 3-year cost of the technical debt in this org if nothing changes.
$17,021
One-time cost to remediate the top 5 areas (128 hours of specialist work).
Where the money’s going
- Aging technology(5 findings)$39,900
- Excess access(3 findings)$39,612
- Outside connections(2 findings)$24,600
- Costly configuration(4 findings)$19,152
- Missing documentation(1 finding)$1,800
Metadata only · No customer data accessed
70+ ENTERPRISE ORG AUDITS13 YEARS AS SALESFORCE ARCHITECTUSMC VETERANMFA ENFORCEMENT IS LIVE. CAN YOU SEE YOUR ADMIN ACCESS?
WHAT YOU'VE INHERITED
The org you can't safely touch.
Every architect I've audited has lived these. Recognize any?
THE ORG NOBODY DOCUMENTED
You inherited 38 active Process Builders. Nobody knows what they do.
Turning one off could break an Opportunity stage, a quote workflow, or a renewal trigger. So you leave them all running. The debt compounds.
MFA ENFORCEMENT IS LIVE
Wave 1 hit July 1. Wave 2 lands July 20.
The deadline proved enforcement is real: phishing-resistant MFA is now enforced for anyone holding System Administrator, Modify All Data, View All Data, Customize Application, or Author Apex — everyone those permissions reached through permission set sprawl. But don't tie your cleanup to a date that can move. Tie it to the agent era that won't.
THE AUDIT THAT COSTS $400/HR
A Salesforce Architect charges $200–$400/hr to tell you what VanguardOps finds in 4 minutes.
For $299/mo, you get the same findings — with an AI-reviewed remediation plan and human approval workflow.
THE ORG YOU CAN'T SAFELY TOUCH
11 automations fire every time an Opportunity updates.
You don't know which ones matter. So you touch nothing. Everything decays. New Agentforce deployments inherit years of structural risk.
SAMPLE AUDIT OUTPUT
This is what your scan looks like.
Not a polished SaaS dashboard. An architect-facing audit artifact.
VANGUARDOPS AUDIT REPORT
Generated: June 2026
Sample Enterprise Org · Scan date June 12, 2026
ORG HEALTH SCORE
52/100F
Critical attention required
$125,064
Estimated 3-year technical debt exposure · 15 findings
$17,021 one-time remediation · 128 hours
All 15 findings, grouped into 5 cost areas
COST AREAFINDINGS3-YEAR COST
Aging technology5$39,900
Out-of-date technology that gets more expensive to replace the longer it stays.
Excess access3$39,612
People and tools hold more access than their roles need — every extra grant is exposure.
Outside connections2$24,600
Connections to outside systems that are not locked down as tightly as they should be.
Costly configuration4$19,152
Configuration that adds maintenance cost without a clear business benefit.
Missing documentation1$1,800
Undocumented setup that slows down every new project and every new hire.
Generated by VanguardOps · Metadata only · No customer data accessed
FROM CONNECTION TO REMEDIATION
How VanguardOps works.
Four steps. Read-only by default. No change goes to production without your explicit approval.
Scan
We read your metadata layer only — Custom Objects, Fields, Permission Sets, Validation Rules, Flows, Apex. Customer records, contacts, and opportunities are never touched.
Metadata onlyRead-only accessOn-demand
~4 minutes
Analyze
Claude reviews every finding, scores org health, and generates a specific remediation plan. Each issue includes the why, the impact, and the recommended fix.
AI-reviewedSeverity-rankedNo changes made
Generated with results
Approve
Every fix shows a before/after preview. You approve each change, one by one. Full audit log.
Human approvalBefore/after previewFull audit log
You're in control
WHAT VANGUARDOPS NEVER DOES.
- Touch your customer records, contacts, or opportunities
- Push changes to production without your explicit approval
- Run continuous or scheduled scans without you initiating them
- Connect to anything beyond Salesforce metadata APIs
- Store any of your data outside encrypted token references
- Modify metadata in your org during a scan — scans are read-only
Read-only by default. Metadata-only by architecture. Human-approval by design.
Want to see what your org is hiding?
30 minutes. Live scan. Real dollar amount. No slideware.
PRICING
Three tiers. One mission.
Scan your org, fix what's broken, ship safer changes. Pricing scales with how much of the workflow you want automated.
Founding Member Rate·10 founding slots at $399/mo, locked for life.
When they're gone, Professional is $799.
STARTER
$299/month
See what's broken.
- On-demand metadata scanning
- Org health scoring
- Findings dashboard with severity ranking
- PDF audit export
- 4 scans per month
- Email support
Most Popular
PROFESSIONAL
$799/month
Fix what's broken.
- Everything in Starter
- AI-powered remediation plans
- Approval workflows with before/after preview
- Full audit log
- Unlimited scans
- 25 remediation executions/month with approval workflows (sandbox today; production unlocks when rollback GAs)
- Priority support
ENTERPRISE
$1,499+/month
Scale safely.
- Everything in Professional
- Multi-org management
- SSO / SAML
- API access for CI/CD integration
- Custom compliance frameworks
- Unlimited remediations
- Dedicated success manager
All plans include: read-only metadata scanning, human approval workflows, encrypted token storage, and zero access to customer records. No credit card required for beta.
THE GUARANTEE
Your first audit documents at least $25,000 in technical debt — itemized, in dollars — or your first month is free and you can walk.
That's the founding-cohort guarantee. We never touch a customer record. Metadata only. And every change goes through your explicit approval before it ships.
ON THE ROADMAP
What's shipping next.
We ship continuously. Here's what just shipped and what's next.
Shipped
Shipped
MCP Server
Pull your org's health score into Cursor, Claude Desktop, and other MCP-compatible tools. Agent-native by design.
Shipped
Agentforce Readiness Scanner
0-100 readiness score across 8 categories. Find the metadata blockers before deploying agents.
Shipped
Technical Debt Dollarization
Every finding includes one-time remediation cost, annual carrying cost, and 3-year exposure.
Shipped
Integration & Connected-App Health
Audit connected apps, named credentials, certificates, auth providers.
Shipped
Service Cloud Module
Case management, entitlements, SLA, and omni-channel detection.
On the roadmap
Q4 2026
Confluence + Jira Integration
Auto-publish audit findings to Confluence. Open Jira tickets for each remediation with full context.
Q1 2027
Marketing Cloud Module
Data Extension inventory, Journey health analysis, Automation review, AMPscript audits.
Roadmap reflects current planning. Subject to change based on what beta architects tell us matters most.
ABOUT THE FOUNDER
Built by an architect who's seen the patterns.
Chris Heppner
Founder & CEO, VanguardOps
13+Years as Salesforce Architect
70+Enterprise org audits
USMCMarine Corps veteran
“Every Salesforce org I've audited has the same problem: nobody documented what got built five years ago, and nobody's willing to touch it now. VanguardOps is the audit I wish I had on day one of every engagement — read-only, metadata-only, and built so the architect stays in control.”
4 minutes. Read-only. Cancel anytime.