Tell me more ×
Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. It's 100% free, no registration required.
up vote 1 down vote favorite

How do I run burp scan? Do I have to buy a burp suite? What is partner license mentioned in this url?

share|improve this question

1 Answer

up vote 5 down vote

Burp is software that does security scanning on web applications. The goal of the software is to find security vulnerabilities.

Salesforce provides partners a security scan once a year. If you are not a salesforce partner, you could buy the software yourself.

To qualify as a salesforce partner and use the Burp Scanner you must:

  • Be enrolled in the AppExchange or OEM program, and have a Partner Portal login
  • Be current with your AppExchange Listing Fees
  • Application contains integrations with web-services not residing on the Force.com Platform. If your application completely resides on Force.com, please use the Force.com Security Source Scanner instead.
share|improve this answer
1  
My SFDC App sends request to two urls (both written by me). But they don't have UI and are just api's to a larger application which pulls and pushes data to Salesforce. Do I still need Burp Scanner. Contacting external service this way <apex:commandButton action="https://sfdc.datadoctorit.com/authenticate?key={!key}" image="{! $Resource.authBtn }"/> – Bhushan Lodha Jan 15 at 6:07

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.