All Questions
Tagged with zap-scanner security-review
8 questions
1
vote
0
answers
78
views
ZAP Scan: Apex callout to our backend API
I am in the process of preparing materials for our security review submission. I have a case where our Apex code calls out to our backend API:
Directly from Apex code
Background job: Schedule, ...
- 115
1
vote
1
answer
200
views
Question about Endpoint scanning (ZAP) for security review
As part of the Salesforce security review they state:
If your solution connects to any non-Salesforce domains, also run Chimera, ZAP, or Burp Suite on the external endpoints. Include reports from your ...
- 67
1
vote
1
answer
175
views
Security Review: Cloud Service uses and stores OAuth tokens
My customer runs a Cloud Service for many years, that connects with Salesforce orgs via OAuth flow and stores org tokens in its database.
As this service wasn't on the AppExchange my customer did not ...
- 38.2k
-2
votes
1
answer
748
views
Security Scanner Report in Owasp zap
How to scan my salesforce app in Owasap zap, need to cover everything such as custom objects, flow, process builder, reports and dashboard, etc. at the end need to generate a report, is possible?
- 13
8
votes
2
answers
5k
views
How to OWASP ZAP scan external REST API using OAuth2
I have built a Managed Package that talks to an external REST API using OAuth2 Named Credentials. I now want to submit this app for Security Review. I can't use the Chimera Scanner as it would require ...
- 38.2k
1
vote
1
answer
200
views
Scan report for custom REST service for security review. Is that mandatory?
We are about to submit our app for the security review process. I have created two REST resources in Salesforce and they are accessed from SAP system. SAP will send JSON i/p to Salesforce using that ...
- 6,878
3
votes
0
answers
126
views
Burp Scanner-License Issue. Experts suggestions please
We are planning to submit our app in AppExchange. We have succeeded in generating ZAP but we were also asked to submit BURP Scanner report. But the issue with Burp is that, the professional edition ...
- 1,456
0
votes
0
answers
54
views
Security Review-Requirements [closed]
We submitted for security review yesterday,and they have sent a mail saying few reports are not being uploaded like ZAP and also few Composite piece(s) of your application was not accessible
What ...
- 1,456