Complete the Security Review Cycle | ISVforce Guide

Required Materials for Security Review Submission
Learn about the materials that you must provide, such as test environments and documentation, when submitting your solution for an AppExchange security review. Mobile apps have platform-specific submission requirements. Extension packages undergo security review and Salesforce requires the same materials for them as for a standalone solution.

Security Review and AppExchange Listing Fees
When you submit your solution for an initial security review, you pay security review and AppExchange listing fees. We waive the fees for solutions that are distributed for free on AppExchange. If we find security vulnerabilities in your solution, you can fix and resubmit it a limited number of times at no extra charge.

Update Your Payment Information
Update the payment information that’s on file for your AppExchange listings from the Security Review tab of your listing.

Submit Your Solution for Security Review
Use the security review submission interface in the Salesforce Partner Community to submit your solution for review. Share your solution and all required materials, and pay applicable fees.

Check Security Review Progress and History
After you submit your solution for review, find key review information in the progress and history components on your listing’s Security Review tab. Check the progress component for review status. Scan the history component for data on past and current reviews.

Act on Security Review Results
Approximately 4–6 weeks after you submit a solution for an initial review, your security review report arrives in your inbox. Check the report to learn if your solution is or isn’t approved. Learn how to request a follow-up review for a solution that isn’t approved and how to publicly list an approved solution.

Periodic Re-Reviews
We conduct periodic re-reviews for all solutions listed on AppExchange. Re-reviews ensure that solutions continue to safeguard against the latest security vulnerabilities.