Nine CVEs land at once in the open-source marketing automation platform. The worst lets any user allowed to import campaigns place a script in the web root of a 7.x install.
Salesforce agrees to buy Braze for about $5.66bn in cash
EditorialBy TrustList Editorial
Braze shareholders get $47.50 a share; the customer engagement platform, used by about 2,770 brands including Canva and Instacart, would join Marketing Cloud, with closing expected in Salesforce's fiscal 2028.
- United States
- San Francisco
- CRM Software
- Email Marketing
- +1 more
About Salesforce agrees to buy Braze for about $5.66bn in cash
Salesforce agrees to buy Braze for about $5.66bn in cash
20 October 2026: Salesforce has signed a definitive agreement to acquire Braze, the customer engagement platform listed on Nasdaq, for about $5.66 billion in enterprise value. Holders of Braze Class A shares will receive $47.50 in cash for each share, and the deal is expected to close in Salesforce's fiscal year 2028.
What Salesforce is buying
Braze lets consumer brands respond to customer behaviour as it happens, coordinating personalised messages and journeys across mobile apps, websites, email, SMS, WhatsApp and other channels. Salesforce describes its architecture as cloud-native and built on event streaming, tuned for high-volume consumer engagement, updating customer profiles continuously and powering "trillions of messages and journey actions each year". BrazeAI adds AI-driven optimisation of content, offers, channels and timing. Braze serves about 2,770 customers, among them Canva, Dairy Queen, Equinox, Instacart, Urban Outfitters and Venmo, and is led by its co-founders Bill Magnuson and Jon Hyman.
"Every interaction is an opportunity to wow your customers," said Patrick Stokes, Salesforce's president of applications and marketing. Magnuson, Braze's chief executive, said "marketers and their creativity are a brand's ultimate competitive advantage" and that Braze would "continue building as Braze" inside Salesforce.
Where Braze fits
Salesforce says Braze's real-time engagement and AI decisioning should complement all four layers of its platform, Data 360, Customer 360, Agentforce and SIForce, and in particular strengthen Marketing Cloud's cross-channel personalisation for brands reaching hundreds of millions of people. Both companies, it adds, share "an open, composable approach", which points to Braze continuing to work with cloud data warehouses and other tools rather than only with Salesforce data.
Conditions and timing
The deal needs approval from Braze shareholders and the required regulatory clearances. Salesforce says it does not change its fiscal 2027 guidance, and it has not yet guided for fiscal 2028. J.P. Morgan advises Salesforce with Wachtell, Lipton, Rosen & Katz and Covington & Burling as counsel; Qatalyst Partners advises Braze with Davis Polk & Wardwell. Braze will file a proxy statement with the SEC before the shareholder vote.
For Braze customers, nothing changes on signing, but contracts that run past the expected closing are worth reviewing for change-of-control terms, data processing commitments and price protection, and teams that run Braze alongside a non-Salesforce CRM will want to know how long Salesforce keeps the open integrations it now promises. Our CRM software category lists 6 products and our mobile marketing software category 13.
Related on TrustList:
Sources
- Salesforce: Salesforce signs definitive agreement to acquire Braze, 20 October 2026
- SEC EDGAR: Braze, Inc. Form 8-K with the Agreement and Plan of Merger, 20 October 2026
Categories & features
- United States
- San Francisco
- CRM Software
- Email Marketing
- Marketing Automation Software
TrustList Weekly
The week in software and IT, in one email
The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.
You may be interested in
Twilio’s Heightened Awareness Period runs from 19 November 2026 to 4 January 2027: US sending rates for toll-free, short code and 10DLC may be limited per account, and high-volume short code and toll-free senders may move to Market Throughput.
APSB26-162 covers code injection, OS command injection and SQL injection in ACC v7 on Windows and Linux; one SQL injection needs no login. Build 9403 fixes all eight, and Adobe knows of no exploitation.
Chingona Ventures leads the seed round; Dapta says about 4,000 businesses join each week, its revenue run-rate has passed $4 million and it has paying customers in 26 countries.
Node.js 22, the minimum HubSpot names, itself reaches end of life on 30 April 2027, so teams upgrading CI runners now have a reason to go straight to Node.js 24.
The default ceiling sits up to 50% above an account's monthly credits. Customers can also cap their marketing contacts tier and buy credits in flat monthly packs or pay as they go.
The US start-up founded in 2025 also launched an AI-native service and sales CRM, and says revenue grew more than 20 times in its first year across hundreds of dealerships.
From 9 November to 4 December 2026 Microsoft rolls out storage validation for Dataverse-only Dynamics 365 tenants: over capacity, environment create, copy and restore stop; sandboxes without pay-as-you-go go admin-only at 30 days, disabled at 60.
More on TrustList
Everything here links back to the same verified catalogue. Pick your next stop.
- More United StatesThe ranking for this subject
- CompaniesAgencies, consultancies and IT service providers, ranked by verified reviews.
- ProductsSoftware and SaaS with pricing, features, integrations and alternatives.
- AwardsAnnual recognition decided by verified reviews and an independent jury.
- LaunchesNew products and releases, voted up by the community every day.
- AI ModelsBenchmark scores and community ratings for every major model.
- RequestsBuyers describe what they need; vendors respond directly.
- PeopleReviewers, authors and makers with public profiles.
- ComparePut up to four listings side by side before you shortlist.