How do I run burp scanner

Question

How do I run burp scan? Do I have to buy a burp suite? What is partner license mentioned in this url?

Ryan Guest · Accepted Answer · 2013-01-15 05:59:31Z

6

Burp is software that does security scanning on web applications. The goal of the software is to find security vulnerabilities.

Salesforce provides partners a security scan once a year. If you are not a salesforce partner, you could buy the software yourself.

To qualify as a salesforce partner and use the Burp Scanner you must:

Be enrolled in the AppExchange or OEM program, and have a Partner Portal login
Be current with your AppExchange Listing Fees
Application contains integrations with web-services not residing on the Force.com Platform. If your application completely resides on Force.com, please use the Force.com Security Source Scanner instead.

answered Jan 15, 2013 at 5:59

Ryan Guest

3,3681 gold badge22 silver badges36 bronze badges

1

My SFDC App sends request to two urls (both written by me). But they don't have UI and are just api's to a larger application which pulls and pushes data to Salesforce. Do I still need Burp Scanner. Contacting external service this way <apex:commandButton action="https://sfdc.datadoctorit.com/authenticate?key={!key}" image="{! $Resource.authBtn }"/>
– Bhushan Lodha
Jan 15, 2013 at 6:07

Add a comment |

1 Answer 1