Experience Cloud in Summer '26: AI Self-Service, Malware Scanning, and 10 GB Uploads
Salesforce Experience Cloud updates in Summer '26 — AI-assisted Self-Service Concierge components, generally available malware scanning for Salesforce Files, 10 GB file uploads on Aura and LWR sites, and the Chatter-off-by-default change for new orgs.
Experience Cloud powers customer portals, communities, and self-service sites — and Summer '26 makes them smarter, safer, and more capable. Here's what site builders and admins should know.
AI-assisted Self-Service Concierge components
The biggest addition is a suite of AI-assisted Self-Service components you can configure and deploy on Aura and LWR sites:
- Agentforce Orchestrator — route conversations to the right AI agents and workflows.
- Prompt bar and suggestion themes — an intelligent entry point for help.
- Dynamic content tiles and a Concierge sidebar — contextual assistance throughout the site.
- Chat history — continuity across sessions.
Together they deliver personalized, conversational self-service for both authenticated and guest users. This is the customer-facing edge of the same agentic strategy showing up across the platform — and it ties directly into the Agentforce Service Concierge experience.
Malware scanning for Salesforce Files is now GA
Security gets a meaningful upgrade: file scans for malware in Salesforce Files are now generally available. Notable changes:
- The "Scan files for viruses or malware" setting now lives on a dedicated Malware Scanning page in Setup.
- A new setting enables notifications about malicious files for users with the Manage Malicious Files permission.
- You can now assign the Manage Malicious Files permission to any standard user — previously admin-only.
For any site that accepts customer uploads, this is an important protection to turn on.
10 GB file uploads
The File Upload component now supports files as large as 10 GB on Aura and LWR sites (up from the previous limits). If your communities handle large documents, media, or data files, this removes a longstanding ceiling.
Better screen flows on sites
- View and link to related records from screen flow data tables — show record names instead of Salesforce IDs, and turn names into links that open the record in a new tab.
- More style overrides for screen flow components, including Action Button, Address, Choice Lookup, Dependent Picklists, Email, Lookup, Name, Phone, Slider, Toggle, and URL.
- Static resource images in Display Text (GA) — browse, upload, and add alt text without leaving the component.
- A Radio Button Group component to arrange screen-flow choices horizontally or vertically.
Security and password improvements
- Keep private LWR pages unavailable until password setup or reset is complete — now enabled by default for LWR sites (except those using custom Visualforce password pages).
- Because Salesforce now requires domain-level and user-level verification to send email, you can explicitly enable people using public email services to send messages from a site.
The Chatter change to watch
Heads-up for new orgs: Chatter is turned off by default in all orgs created in Summer '26 and later. To create an Aura site from the Customer Service template, or to add feeds to an Aura or LWR site, you'll need to enable Chatter. Orgs created before Summer '26 are unaffected. (More on new-org defaults in our new org changes guide.)
Frequently asked questions
What are the new Self-Service components? A suite of AI-assisted components — Agentforce Orchestrator, prompt bar, suggestion themes, dynamic content tiles, the Concierge sidebar, and chat history — for personalized self-service on Aura and LWR sites.
Is malware scanning automatic now? Malware scanning for Salesforce Files is generally available, configured on a new Malware Scanning page in Setup, with optional notifications and a permission you can assign to standard users.
How large can file uploads be? Up to 10 GB using the File Upload component on Aura and LWR sites.
Why is Chatter off in my new org? Chatter is off by default in orgs created in Summer '26 and later. Enable it to use Chatter-dependent features like feeds and the Customer Service template.
The bottom line
Experience Cloud's Summer '26 release combines an AI-first self-service experience with concrete platform upgrades — GA malware scanning, 10 GB uploads, and richer screen flows. Just remember the Chatter-off default for new orgs, or you'll be puzzled when feeds don't appear.
Building the agents behind that Concierge? See our Agentforce Service guide.