We have created one app and planning to list in appexchange as free app. Do we need to pass security review, if yes then is it free or paid?. We have partner developer org to list in Appexchange.

1 Answer 1


Yes you do have to submit your application for security review; all apps must be vetted to ensure they're not a potential risk to customers' data.

For free apps the review is free, currently it's $2700 for paid applications.

  • How can know when to list the app after security review? is there any status like security passed or rejected?
    – Reddy
    Commented Nov 11, 2013 at 5:43
  • 1
    Exactly that, Salesforce.com will email you when the app has passed the review. The process can take 2-3 months even if there are no security concerns.
    – Matt Lacey
    Commented Nov 11, 2013 at 5:47
  • As i heard from some one said that we can use checkmarx for security review and the response is very fast. So is Checkmarx is free for free apps or we have to pay for for free apps also?
    – Reddy
    Commented Nov 11, 2013 at 5:54
  • 2
    The Checkmarx Eclipse plug-in isn't sold by Salesforce. There is a free trial last I checked, and it's very much worth it. Alternatively you can run the web-based checkmarx but the reporting isn't as specific and you can only run so many checks per day I believe.
    – Adam
    Commented Nov 11, 2013 at 6:18
  • Not sure about the cost of Checkmarx, but even after doing that you'll still need to submit to Salesforce. Checkmarx would be a good way of ensuring you don't have any major issues before hand though (you're supposed to run the web one at least as part of the process).
    – Matt Lacey
    Commented Nov 11, 2013 at 10:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .