It is an integrated platform for conducting security testing of web applications.īurp Suite is one of the most reliable and popular security tools that cybersecurity experts use.

Best Parental Control for iPhone & iPadīurp Suite is a set of tools developed by Portswigger for penetration testing of web applications.

IPVanish VPN vs Private Internet Access.

Can we confirm that Salesforce does not provide a Burp license for the external app security review? The latest Salesforce docs contradict answers like this.

Salesforce docs only mention using Burp Suite, however, which Burp product should be chosen for creating the scan and why?

There are three different Burp products, namely Enterprise Edition, Professional, and Community (the last one is free).There are a few main questions I would love to know before closing my investigation: I don't think this license is provided by Salesforce happening anymore.Īs a result, all this information is creating more confusion rather than helping, therefore I would appreciate some help to have a clear overview of the Burp tool. Some StackExchange posts such as How to run burp, where at the moment a Burp Suite license was provided if you were going through the Security Review process as a partner.Burp suite guide by Daniel Ballinger (2013)Īnd things seem to have changed since then.The information that I am finding, either in Salesforce docs or StackExchange post is quite outdated (up to 2014 overall).

I am investigating the possibility of using Burp as an alternative to Chimera or OWASP Zap to provide a scan report of an External Service in the Salesforce Security Review.

Burp suite licence