Hello, is there any documentation that helps testing external web services endpoints using ZAP and Burp scanners?? I have searched everywhere in Google does not find a one. We are consuming web services from SAP. i.e., making callouts from Salesforce to SAP. Also, we are about to submit scan reports for the security review. This became a roadblock that we have difficulty to find right articles to start with. Please suggest. Would appreciate your help. Thanks a lot