Enterprise Agents: Agentforce, ServiceNow, Joule, UiPath — 2026-09-25
This week, the post-Dreamforce narrative matured: analysts framed Agentforce as a governance play built around the customer record, while a 'SalesBleed' security disclosure showed the attack surface autonomous agents create. Meanwhile, SAP's gated Joule strategy drew analyst attention and pricing debates over per-seat vs. per-agent models intensified.
Enterprise Agents: Agentforce, ServiceNow, Joule, UiPath — 2026-09-25
Top developments
'SalesBleed' vulnerabilities in Agentforce enabled zero-click CRM data theft
Security researchers disclosed flaws in Salesforce Agentforce that allowed 0-click CRM data theft and anonymous phishing, according to The Register, which called the consequences of the 'SalesBleed' flaws "very unexpected." The disclosure lands shortly after Dreamforce 2026's heavy agentic push and underscores that agent governance is now a cybersecurity issue, not just a workflow design one. Enterprise buyers evaluating agent platforms should factor agent-permitted data access into their risk models.
Analysts: Salesforce built agent governance around the customer record at Dreamforce 2026
Moor Insights & Strategy's Mike Leone breaks down the AI harness, new "AIforce" layer, and Informatica integration news from Dreamforce 2026 (Sept 2026), arguing Salesforce is anchoring agent trust and governance to the customer record itself. Info-Tech Research separately framed Dreamforce 2026 as Salesforce positioning for a "post-CRM-interface era," where customer work starts in Copilot, Claude, Slack, and Gemini, and Salesforce makes its data and semantics consumable from any interface. Both readings point the same way: the platform, not the UI, is the moat.(mozat.
Agentforce pricing detailled: Flex Credits, $2 conversations, $550 enterprise tiers
InfotechLead published a breakdown of 2026 Agentforce pricing: free entry-level access, $2 per conversation, and $550 per user/month for Agentforce 1 Editions. This comes as the per-seat model itself is under scrutiny — Forkast argued the new AIforce layer (which brings Salesforce data into Claude, Slack, and Lightning) "forces a pricing question" since agents replacing human seats threaten seat-based monetization. Expect hybrid consumption/seat pricing to become the competitive battleground between Salesforce, ServiceNow, and SAP.
SAP's gated Joule agent strategy draws analyst take
Futurum analyst Keith Kirkpatrick examined SAP's tools for governing AI agents and tying them to business processes, published one day before this issue. SAP continues to route external agent access through Joule rather than opening the platform directly — a contrast with Salesforce and ServiceNow that Japanese-language analysis (homula.jp) describes as SAP "closing" while Salesforce and ServiceNow "open," citing Salesforce's Headless 360 Exposition of platform functions as API/MCP tools. For buyers, the choice is now becoming platform openness vs. process-gated autonomy.(as background)
Salesforce vs. UiPath: two profit roads for enterprise agents
The Motley Fool's comparison (Sept 23) frames the two agent leaders' divergent economics: Salesforce is generating record cash flow and closing thousands of AI deals, while UiPath has reached consistent profitability after years of losses and is rebuilding investor confidence. With UiPath now profitable, agentic automation has become a margin story, not a growth-at-all-costs story.
Local view
Japanese-language commentary continues to weigh in on the "agent access" divide. homula.jp argues that SAP restricting external AI agents to Joule-based access — while Salesforce exposes platform functions via API/MCP/CLI through Headless 360 — is shaping 2026's purchasing criteria for core-system agent integration. Separately, SAP Japan's press room recapped Q2 2026 Business AI release highlights for its domestic customer base.
Context & numbers
- Agentforce 2026 pricing: free entry level, $2 per conversation, $550/user/month for Agentforce 1 Editions
- Agentforce ARR crossed $1.5B, growing over 240% Y/Y, per recent reporting (prior quarter data; context for this week's pricing and security news)
- IDC's new blog argues the "SaaSpocalypse" premise — AI agents wholesale replacing SaaS — is flawed; the real shift is structural
On the radar
- SAP's free Joule Studio design-time access promotion runs through 2026-12-31, after which the Premium AI offering becomes generally available "for an additional charge" — a December pricing event to watch.
- Subsequent disclosures or fixes related to the 'SalesBleed' Agentforce vulnerabilities, and vendor security guidance for agent-permitted data access.
- Analyst follow-through on the per-seat vs. per-agent monetization debate (Forkast, Substack essays this week) ahead of Q3 earnings seasons.
This content was collected, curated, and summarized entirely by AI — including how and what to gather. It may contain inaccuracies. Crew does not guarantee the accuracy of any information presented here. Always verify facts on your own before acting on them. Crew assumes no legal liability for any consequences arising from reliance on this content.
Powered by
