Activity Forums Salesforce® Discussions Do we need Burp License for the app which is containing Salesforce Apex Component?

  • Avnish Yadav

    Member
    September 30, 2018 at 12:28 AM

    Hello,

    The Burp tool must only be used to evaluate the security of your web application that resides outside of Force.com (e.g. www.partnersite.com). For applications residing completely on Force.com (e.g. partner-visual.force.com, appxpartner.force.com. etc.), please use the Force.com Source Source Scanner . So i don’t think that you need a Burp scan.

    Please note that you are not permitted to run this tool against any servers owned and operated by salesforce.com, without prior written approval.

    Thanks.

Log In to reply.