Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How do I run burp scan? Do I have to buy a burp suite? What is partner license mentioned in this url?

share|improve this question

Burp is software that does security scanning on web applications. The goal of the software is to find security vulnerabilities.

Salesforce provides partners a security scan once a year. If you are not a salesforce partner, you could buy the software yourself.

To qualify as a salesforce partner and use the Burp Scanner you must:

  • Be enrolled in the AppExchange or OEM program, and have a Partner Portal login
  • Be current with your AppExchange Listing Fees
  • Application contains integrations with web-services not residing on the Platform. If your application completely resides on, please use the Security Source Scanner instead.
share|improve this answer
My SFDC App sends request to two urls (both written by me). But they don't have UI and are just api's to a larger application which pulls and pushes data to Salesforce. Do I still need Burp Scanner. Contacting external service this way <apex:commandButton action="{!key}" image="{! $Resource.authBtn }"/> – Bhushan Lodha Jan 15 '13 at 6:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.