Copado Buys Valo.ai for Salesforce Security Observability

PUBLISHER ARTICLE PREVIEW

From the original article

Copado announced on November 4, 2026 that it has acquired Valo.ai, adding security and operational observability for Salesforce environments to its governed software-delivery platform. The acquisition extends Copado’s oversight beyond the release process into the connections, permissions and risks that persist after applications enter production.

Copado’s Agentia offering already uses context-aware AI agents to automate software planning, development, testing and releases under enterprise governance controls. The Valo deal addresses a different stage: once those changes are live, administrators still need to establish what is connected, who has access, what has changed and where operational risks are emerging. Chief executive Ted Elliott said that requirement becomes more important as AI agents join everyday operations, framing the acquisition as the start of a connection between governed delivery and governed operations.

Valo.ai was founded by leaders with experience building Salesforce security and platform technologies, including Salesforce Shield. Its product examines the live environment, where integrations, permissions and AI agents can create risks that release governance cannot always see.

Valo gives Salesforce administrators and operations teams a prioritized view of connected applications, dormant integrations, excessive permissions and unused accounts. Each user, profile and permission set receives a risk score, while a side-by-side comparison helps expose unnecessary access, including access retained by former employees. A separate map assigns risk scores to connected applications and integrations so dormant or risky connections stand out.

Findings also cover license spend.