ISVforce Guide
jTypes of Security Review Office Hours
Salesforce security review teams host two types of office hours for AppExchange
partners. During office hours, you have direct, scheduled, web conference access to security
review team members. To get answers about the submission process, attend operations office hours
with Security Review Operations team members. To get help with troubleshooting security
vulnerabilities, attend technical office hours with members of the Product Security
team.
Operations Office Hours
During operations office hours, Security Review Operations team members answer questions about security review logistics and submission requirements. Typical questions include:
- What components of the solution are in scope for the security review?
- What types of reports and scan results am I required to provide?
- What happens if the solution that I submit doesn’t pass the review?
Technical Office Hours
The Product Security team hosts technical office hours for when you need specific security-related technical assistance. Typical questions include:
- How do I navigate the AppExchange security requirements?
- What is a secure way to design and implement a specific aspect of my solution?
- How do I address issues that the automated security scanning tools detect?
- What does a finding in my security review report mean?
- What security scan results can I regard as false positives?
- How do I resolve the issues in my security review report that I think are false positives?
- Does my reworking of the code fix the security vulnerabilities identified in the security review?