Weylon Solis
Senior Security Consultant
As a Senior Security Consultant, Weylon Solis is responsible for delivering exceptional service to NetSPI’s clients, staying informed on emerging threats, and proactively addressing client needs with customized solutions. With three years of professional cybersecurity experience, Weylon has focused on Salesforce security, including WaPens and Configuration Reviews. He holds a B.S. in Computer Science from the University of Minnesota - Twin Cities.
Weylon has enhanced NetSPI’s Salesforce offerings to provide greater value to clients and has reported security issues to major platforms such as Microsoft and Salesforce. Through ongoing research into Salesforce-related topics, he continues to strengthen the quality of services provided to clients and contribute to the broader success of NetSPI's security initiatives.
Weylon has enhanced NetSPI’s Salesforce offerings to provide greater value to clients and has reported security issues to major platforms such as Microsoft and Salesforce. Through ongoing research into Salesforce-related topics, he continues to strengthen the quality of services provided to clients and contribute to the broader success of NetSPI's security initiatives.
More By Weylon Solis
Web Application Pentesting
Walking Through an Attack Path with ForceHound
April 17, 2026
In Part 2 of the series, Weylon covers how to use ForceHound to visualize Salesforce attack paths in BloodHound CE, identify transitive privilege escalation, and legacy Connected App exposures.
Learn More
Web Application Pentesting
Auditing Salesforce Permission Hierarchies with ForceHound
April 17, 2026
Discover how ForceHound automates the collection of profiles, permission sets, and connected apps to reveal the true trust boundaries of your Salesforce organization.
Learn More
Web Application Pentesting
Assessing the True Business Impact of a Malicious Connected App
August 14, 2025
Discover the cascading risks of malicious Connected Apps in Salesforce. Learn how to assess business impact, secure your org, and protect critical infrastructure.
Learn More
Web Application Pentesting
A Not So Comprehensive Guide to Securing Your Salesforce Organization
March 31, 2025
Explore key background knowledge on authorization issues and common bad practices developers may unintentionally introduce in Salesforce Orgs.
Learn More