I have a question about the status of my security review or the submission process.

We review all apps in a first-in-first-out manner and can’t provide estimates on review time. We will review your app as soon as we can! For other process related questions, please log a case in the partner portal. For other similar issues check out our FAQ page.

Please do NOT book an office hour for status-related questions.

I am having trouble with the Force.com code scanner/results of the scan.

Check out our force.com scanner help page or email your questions to sourcescanner@salesforce.com

If this does not answer your question, proceed to the booking page.

I am having trouble with running a Chimera scan on my external endpoint.

Check out our FAQ page for the Chimera scanner or email your questions to chimerascanner@salesforce.com

If this does not answer your question, proceed to the booking page.

I don’t understand the security issues identified in my review report.

Have you reviewed our Secure coding guidelines for detailed explanations about these issues?

If this does not answer your question, proceed to the booking page and make sure to provide the name of your app.

I think the issues in my report are false positives.

Please go ahead and resubmit your app along with false positives documentation.

If you would like to clarify if something is a false positive, proceed to the booking page.

Do I need to fix all issues in my report?

You may ignore informational issues from your ZAP report. The same goes for code quality issues in your Checkmarx report. All other security issues need to be addressed. Make sure to provide appropriate documentation if you believe there are false positives.

Please do NOT book an office hour for this question.

I have a question about the scope of the review.

Have you looked at our documentation explaining the review scope? We require an end-to-end review of your offering.

Please do NOT book an office hour to negotiate the scope of your review.

I have security-related questions about the design/implementation of my app.

Proceed to the booking page and provide a detailed description of your issue.

My question is not any of the above.

Proceed to the booking page.