Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [zap-scanner]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
31 views

ZAP Scan: Apex callout to our backend API

I am in the process of preparing materials for our security review submission. I have a case where our Apex code calls out to our backend API: Directly from Apex code Background job: Schedule, ...
vctqs1's user avatar
  • 85
0 votes
1 answer
63 views

Question about Endpoint scanning (ZAP) for security review

As part of the Salesforce security review they state: If your solution connects to any non-Salesforce domains, also run Chimera, ZAP, or Burp Suite on the external endpoints. Include reports from your ...
ravent's user avatar
  • 35
1 vote
1 answer
165 views

Security Review: Cloud Service uses and stores OAuth tokens

My customer runs a Cloud Service for many years, that connects with Salesforce orgs via OAuth flow and stores org tokens in its database. As this service wasn't on the AppExchange my customer did not ...
Robert Sösemann's user avatar
-2 votes
1 answer
662 views

Security Scanner Report in Owasp zap

How to scan my salesforce app in Owasap zap, need to cover everything such as custom objects, flow, process builder, reports and dashboard, etc. at the end need to generate a report, is possible?
Catherin's user avatar
8 votes
2 answers
5k views

How to OWASP ZAP scan external REST API using OAuth2

I have built a Managed Package that talks to an external REST API using OAuth2 Named Credentials. I now want to submit this app for Security Review. I can't use the Chimera Scanner as it would require ...
Robert Sösemann's user avatar
0 votes
1 answer
295 views

How to save webhooks page data to Salesforce custom object?

In my requirement my webhook url having some data. when i am updating or inserting some data in my webhook page i want to save those data automatically in salesforce custom objects. Is there a way to ...
Sfdcprgmr's user avatar
  • 437
1 vote
0 answers
37 views

Is there a way to scan a document directly using a vf page or a button script?

I want to scan document without installing any desktop applications or salesforce packages, and to save that directly scanned document as an attachment in an object. Is there a way to do this?
leafen sandy's user avatar
1 vote
1 answer
185 views

Scan report for custom REST service for security review. Is that mandatory?

We are about to submit our app for the security review process. I have created two REST resources in Salesforce and they are accessed from SAP system. SAP will send JSON i/p to Salesforce using that ...
Bforce's user avatar
  • 6,828
3 votes
0 answers
126 views

Burp Scanner-License Issue. Experts suggestions please

We are planning to submit our app in AppExchange. We have succeeded in generating ZAP but we were also asked to submit BURP Scanner report. But the issue with Burp is that, the professional edition ...
Priyalakshmi's user avatar
  • 1,456
4 votes
1 answer
146 views

ZAP Scanner Issue [duplicate]

We are currently using a Web service Secured URL for SAP using two way SSL with Authentication based on User Name and Password Scanning the above URL directly in URL to attack it results in ...
Priyalakshmi's user avatar
  • 1,456
0 votes
0 answers
52 views

Security Review-Requirements [closed]

We submitted for security review yesterday,and they have sent a mail saying few reports are not being uploaded like ZAP and also few Composite piece(s) of your application was not accessible What ...
Priyalakshmi's user avatar
  • 1,456