Do we need Burp License for the app which is containing Salesforce Apex Component?

Hello,

The Burp tool must only be used to evaluate the security of your web application that resides outside of Force.com (e.g. www.partnersite.com). For applications residing completely on Force.com (e.g. partner-visual.force.com, appxpartner.force.com. etc.), please use the Force.com Source Source Scanner . So i don’t think that you need a Burp scan.

Please note that you are not permitted to run this tool against any servers owned and operated by salesforce.com, without prior written approval.

Thanks.