Partner Security Portal | ISVforce Guide

Log In to the Partner Security Portal
To access the Partner Security Portal, you must be a Salesforce ISV partner. Connect your DevHub or packaging org to the AppExchange Partner Console. Then log in to the portal by using the credentials for that org. Logged-in users can access security scanning tools and schedule office hours appointments.

Source Code Scanner on the Portal
To identify security vulnerabilities, we require that you run security scanning tools on your solution and all external endpoints that run independently of the Salesforce platform. he Partner Security Portal hosts the Source Code Scanner (Checkmarx).

Types of Security Review Office Hours
Salesforce security review teams host two types of office hours for AppExchange partners. During office hours, you have direct, scheduled, web conference access to security review team members. To get answers about the submission process, attend operations office hours with Security Review Operations team members. To get help with troubleshooting security vulnerabilities, attend technical office hours with members of the Product Security team.

Schedule a Security Review Office Hours Appointment
Access expert guidance from AppExchange security review team members through scheduled web conferences. Get answers about security review logistics and submission requirements from Security Review Operations. Troubleshoot security-related technical issues with Product Security engineers. Visit the Partner Security Portal to schedule an appointment.