ISVforce Guide

ISVforce Guide: Build and Distribute AppExchange Solutions
Quick Start Tutorials: Become a Partner and Build a Simple AppExchange Solution
Design and Build Your AppExchange Solution
Package and Test Your AppExchange Solution
Pass the AppExchange Security Review
Publish Your Solution on AppExchange
What Is AppExchange?
Business Plans for AppExchange Listings
Submit a Due Diligence and Compliance Certification
Publish on AppExchange
Connect Your Dev Hub or Packaging Org to the Partner Console
Create or Edit Your Provider Profile
Create or Edit Your AppExchange Listing
Add a Business Plan to an AppExchange Listing
Make Your AppExchange Listing Effective
Select an Installation Option
Register Your Package and Choose License Settings
Complete the Security Review Cycle
Required Materials for Security Review Submission
AppExchange Security Review Fees
Submit Your Solution for Security Review
Check Security Review Progress and History
Act on Security Review Results
Periodic Re-Reviews
How Does AppExchange Search Work?
Email Notifications
Collect AppExchange Leads
Analytics Reports for Publishers
Update the Package in Your AppExchange Listing
AppExchange FAQ
Sell on AppExchange with Checkout
Monitor Performance with Analytics for AppExchange Partners
Report Orders to Salesforce with the Channel Order App
Manage Licenses for Managed Packages
Manage Features in First-Generation Managed Packages
Provide a Free Trial of Your AppExchange Solution
Update Your AppExchange Solution
User License Guides for Salesforce Partners
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Periodic Re-Reviews

We conduct periodic re-reviews for solutions listed on AppExchange. These reviews include automated and manual testing. We also reserve the right to conduct random security pen tests on your solution throughout the year. Re-reviews and pen tests ensure that solutions continue to help safeguard against the latest security vulnerabilities.

When you upgrade a managed package version of a solution that passed security review, you don’t have to go through the full review process again. You can immediately associate the new version to your AppExchange listing.

To identify which listed solutions are due for re-review, we consider potential risk and the amount of time since the solution was listed. To determine potential risk, we run risk-factor reports. If your solution shows significant change, it’s likely that we conduct a re-review. The usual re-review timeframe is six months to two years after the solution was listed. However, if your solution’s risk factor is low, it may not be flagged for re-review.

When the time comes, we contact you to make arrangements. If we find that your solution no longer meets our enterprise security standards, we notify you. We also provide a timeline for you to remedy the issues. In extreme cases, we pull the AppExchange listing from public viewing. Before you can relist it for distribution, you must fix the security issues and submit it for a follow-up review.