Mandiant has released an open source tool to help Salesforce admins detect misconfigurations that could expose sensitive data.