Flex Credits are usage-based units that meter activity inside an Agentforce subscription. Instead of paying only for access to a product, the customer consumes a defined pool of credits as agents run workflows, make requests, or trigger supported actions. The exact credit burn depends on the subscription tier and the type of work being performed.
In cyber security, metering matters because it turns AI usage into a governed resource. Security and platform teams need to know which agents, integrations, or automations are consuming credits, since heavy use can signal unexpected business logic, runaway automation, or abuse by a compromised account. Defenders monitor credit consumption alongside permissions and logs to spot anomalies, enforce least privilege, and control cost. In practice, usage-based credits can help limit exposure, but they also create a new operational surface that must be audited like any other entitlement.