Burp is software that does security scanning on web applications. The goal of the software is to find security vulnerabilities. Salesforce provides partners a security scan once a year.

learn more… | top users | synonyms

2
votes
1answer
12 views

Burp suite rest webservice callout

We have been asked to do a BURP Scan of our Salesforce app during security review. Our application is built completely on Force.com platform but we have 1-2 REST webservice calls to external server. ...
0
votes
0answers
17 views

Burp Suite Code Scan for 3rd party APIs

I am using close to 40 API web services (from a 3rd party provider) and am in the process of publishing the application I built using these API calls. I see that we got to submit the "Burp Suite scan ...
-1
votes
0answers
14 views

Burp Scanning in Security Review Wizard [duplicate]

I have not gone through the security review process yet . I want to know whats the process of scanning my endpoints (or API Callouts) using BURP and its Report, is the process too complex?
2
votes
2answers
104 views

Security review for paid apps in appexchange

I want send my app to security review of appExchange. Is the Burp Report Compulsory? Thanks in advance
1
vote
1answer
28 views

Salesforce Security Review for composite app

I have developed a managed package which is using public API's for providing functionality. I have gone through CheckMarx source code scanner and got report as "you do not have any security issues". I ...
3
votes
0answers
28 views

Security Scan/Report for iOS SFDC Product Review

I'm in the process of submitting an iOS application for a Salesforce security review. I'm having trouble figuring out what kinds of security scans/reports they're expecting for an iOS application. ...
1
vote
1answer
110 views

How to run Burp web scanner for HTTP Callout?

I have submitted app for security review and they asked for Burp Scan Report. I have followed video tutorial but not get succeeded. Burp Scanner scan salesforce site instead of my HTTP Callout. ...
4
votes
2answers
516 views

Burp Scanner in Salesforce

Salesforce have asked me to do a BURP Scan on my managed package before I submit it to the AppExchange. My Managed Package is built on the Force.com platform. It does perform a couple of callouts to ...
3
votes
1answer
113 views

Security Review - False Positive Document

I want to submit my app for security review. Since my App is calling some external API security review wizard is prompting to provide below details. Burp Scan report False positive document I have ...
1
vote
2answers
101 views

How to BURP test our outbound message endpoint?

We are using some workflows and trigger to send out outbound messages to a listening end-point of ours. We are going into a security review with SF and that requires some testing using BURP. What I ...
2
votes
2answers
138 views

Salesforce security review process

I am planning to submit my salesforce app for security review. The app also fetches some data from an external java spring based application. The external application does not make any api call back ...
6
votes
1answer
175 views

Anyone have examples of genuine security issues identified by the Burp Scanner for external web services called via Apex?

Thanks to this blog post Using the Burp Suite to test a Web Service that is consumed in a Salesforce app I believe I have successfully scanned the two web services that my managed package calls. (This ...
11
votes
1answer
593 views

BURP Scanning a managed package

Salesforce have asked me to do a BURP Scan on my managed package before I submit it to the AppExchange. My Managed Package is built on the Force.com platform. It does perform a couple of callouts to ...
1
vote
1answer
657 views

How do I run burp scanner

How do I run burp scan? Do I have to buy a burp suite? What is partner license mentioned in this url?