5 AppExchange Security Tools every ISV should know

https://is1-ssl.mzstatic.com/image/thumb/Podcasts221/v4/00/a1/3c/00a13c67-86ff-07d9-0c58-056fc619f7a4/mza_11435433478347166188.jpg/600x600bb.jpg

T.A.G.S (The Abhinav Gupta Show)

Abhinav Gupta

14 episodes

1 week ago

We aim to have hyper-focused, high-value conversations on Salesforce with guests from diverse backgrounds and geographies. Conversations that inspire a wider community with a range of ideas from Trailblazers coming from diverse backgrounds.

Technology

RSS

All content for T.A.G.S (The Abhinav Gupta Show) is the property of Abhinav Gupta and is served directly from their servers with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.

Technology

https://d3t3ozftmdmh3i.cloudfront.net/staging/podcast_uploaded_episode/40697177/40697177-1722430300976-ea58eecbaf384.jpg

5 AppExchange Security Tools every ISV should know

T.A.G.S (The Abhinav Gupta Show)

21 minutes 22 seconds

1 year ago

5 AppExchange Security Tools every ISV should know

In this conversation, Abhinav and Harting discuss five App Exchange security review tools that every ISV should know.

The tools covered are Checkmarx, Code Analyzer, OWASP ZAP, Burp Suite, and Chimera.

Checkmarx is a must for AppExchange apps with code, while Code Analyzer is a powerful code scanner for Salesforce native code.

OWASP ZAP and Burp Suite are used for scanning external API integrations, with ZAP being more comprehensive in its free version.

Chimera is used for scanning servers that are owned by the client. The tools have different levels of CI/CD compatibility and limitations.