+ Start a Discussion
vishal chaudhary 16vishal chaudhary 16 

security review of app and related website on appexchange

hi, i am publishing an app on appexchage and had passed my salesforce organisation security and review scan but , but as my app is getting data from my ruby on rails website through rest api, now salesforce reviewers are asking for the my website security scan report also from zap or other security scnanners provided by them and my website is having some security header issues. is it really that much necessary to provide scan result of my website too.
Andy BoettcherAndy Boettcher
Yes - the purpose of the security process is to ensure that any system touching Salesforce.com is properly architected and does not pose a risk to the ecosystem.