1

What kind of update of app on appexchange does trigger security review of app? For instance, if I change field of custom object to be unique, will this require new security review?

  • Usually, when your app passes review the security team will send you the date your next review will come up. They reserve the right to review the app whenever, however. – Christian Carter Jan 12 '16 at 18:23
3

Please check the FAQ guide below

https://developer.salesforce.com/page/Security_Review_FAQ

As per the FAQ guide published by SFDC

Security review is a periodic, point-in-time review at an interval determined by salesforce.com (typically anywhere between 6 months to 2 years).

When you upload a new package version to the AppExchange and attempt to associate it with your listing, we automatically run a source code analysis against your Force.com code to identify potential security vulnerabilities.

If issues are identified, you will receive a report via email and will be requested to address issues immediately.

We reserve the right to conduct random security penetration tests on your application throughout the year.

This is covered within the listing fee that you pay annually and there is no extra charge. However, if we find that you have deviated from our security standards and best practices we may remove your application from the AppExchange.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.