We have created one app and planning to list in appexchange as free app. Do we need to pass security review, if yes then is it free or paid?. We have partner developer org to list in Appexchange.
Add a comment
|
1 Answer
Yes you do have to submit your application for security review; all apps must be vetted to ensure they're not a potential risk to customers' data.
For free apps the review is free, currently it's $2700 for paid applications.
answered Nov 11, 2013 at 5:36
-
How can know when to list the app after security review? is there any status like security passed or rejected?– ReddyCommented Nov 11, 2013 at 5:43
-
1Exactly that, Salesforce.com will email you when the app has passed the review. The process can take 2-3 months even if there are no security concerns.– Matt Lacey ♦Commented Nov 11, 2013 at 5:47
-
As i heard from some one said that we can use checkmarx for security review and the response is very fast. So is Checkmarx is free for free apps or we have to pay for for free apps also?– ReddyCommented Nov 11, 2013 at 5:54
-
2The Checkmarx Eclipse plug-in isn't sold by Salesforce. There is a free trial last I checked, and it's very much worth it. Alternatively you can run the web-based checkmarx but the reporting isn't as specific and you can only run so many checks per day I believe.– AdamCommented Nov 11, 2013 at 6:18
-
Not sure about the cost of Checkmarx, but even after doing that you'll still need to submit to Salesforce. Checkmarx would be a good way of ensuring you don't have any major issues before hand though (you're supposed to run the web one at least as part of the process).– Matt Lacey ♦Commented Nov 11, 2013 at 10:18