ISVforce Guide

Welcome to the ISVforce Guide
ISVforce Quick Start
Grow Your AppExchange Business
Design and Build Your Solution
Package and Test Your Solution
Pass the AppExchange Security Review
Security Review
Required Materials for Security Review Submission
Security Review Steps
Security Review Wizard
False Positives
Submit a Client or Mobile App for Security Review
Submit an Extension Package for Security Review
Security Review Resources
Security Review FAQ
Is an AppExchange security review required?
What happens during a security review?
Why do I need to have a security review?
How long does the security review take? How often is it required?
Is there a fee for the security review?
Why do I have to test my offering before the review if the security team is going to test it anyway?
What are the typical reasons why I would not pass the security review?
Can I submit my offering before it’s complete to get the security review process done early?
If I have any “No” responses in the security review wizard, or no formal and detailed documentation, do I fail the review?
Why does the review team need to test the X or Y part of my offering?
Do I have to fix all the issues that the security review team reported?
Why can’t the review team send me every instance of every finding for my review?
What happens after I pass the security review?
What happens if my offering isn’t approved?
What’s the difference between Approved, Provisional Pass, and Not Approved?
When I update my offering, do I need to pay the security review fee again to have it reviewed?
When I create a managed package to upgrade my offering, do I need to pay the security review fee again?
Why perform periodic security reviews?
How do reviewed solutions work with PE and GE organizations?
Publish Your Solution on AppExchange
Sell on AppExchange with Checkout
Monitor Performance with Analytics for AppExchange Partners
Manage Orders
Manage Licenses
Manage Features
Provide a Free Trial of Your Solution
Support Your AppExchange Customers
Update Your Solution
Appendices
Glossary
PDF

Newer Version Available

This content describes an older version of this product. View Latest

How do reviewed solutions work with PE and GE organizations?

Eligible partners can apply for access to the API in the Partner Community, which enables approved offerings to make API calls. If you’re an eligible partner and have passed the security review, request API access by logging a case in the Partner Community. See Use of ClientID for code examples.