How do I run burp scan? Do I have to buy a burp suite? What is partner license mentioned in this url?


Burp is software that does security scanning on web applications. The goal of the software is to find security vulnerabilities.

Salesforce provides partners a security scan once a year. If you are not a salesforce partner, you could buy the software yourself.

To qualify as a salesforce partner and use the Burp Scanner you must:

  • Be enrolled in the AppExchange or OEM program, and have a Partner Portal login
  • Be current with your AppExchange Listing Fees
  • Application contains integrations with web-services not residing on the Force.com Platform. If your application completely resides on Force.com, please use the Force.com Security Source Scanner instead.
| improve this answer | |
  • 1
    My SFDC App sends request to two urls (both written by me). But they don't have UI and are just api's to a larger application which pulls and pushes data to Salesforce. Do I still need Burp Scanner. Contacting external service this way <apex:commandButton action="https://sfdc.datadoctorit.com/authenticate?key={!key}" image="{! $Resource.authBtn }"/> – Bhushan Lodha Jan 15 '13 at 6:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.