Act on Security Review Results | ISVforce Guide

Approximately 4–6 weeks after you submit a solution for an initial review, your security review is complete. Check the AppExchange Partner Console to see if your solution passed. Learn how to publicly list a solution that passed and how to request a follow-up review for a solution that didn’t.

Submit Your Solution for a Follow-Up AppExchange Security Review
The security review of your solution is complete, but our security team found security vulnerabilities. Your solution isn’t approved for distribution on AppExchange. It’s not the result that you hoped for, but you’re in good company. Many solutions don’t pass on the first try. Fix the vulnerabilities, and submit your solution for a follow-up review.
Periodic Security Re-Reviews on AppExchange
To help safeguard against the latest vulnerabilities, we conduct periodic security re-reviews of AppExchange solutions. These reviews are similar in scope to an initial security review, and they include automated and manual testing. You can voluntarily request a re-review of your solution, or in certain instances we notify you that your solution requires a re-review. In both cases, security review fees apply.