AgentExchange security review for public listings
Key Takeaway
A solution that is subject to the security review must pass it before it can be publicly distributed on AgentExchange. If the review later expires, a public listing is removed.
The AgentExchange security review tests a solution's security posture, and Salesforce's Product Security team runs it. A partner submits a solution for the review before distributing it publicly on AgentExchange. Passing is not permanent, because the review can expire later.
Which solutions must pass, and the review fee
These solutions must pass the security review to be distributed on AgentExchange:
- Managed packages
- Salesforce Platform API solutions
- Marketing Cloud Engagement API solutions
The security review has a fee, but a partner who plans to distribute the solution for free doesn't pay it.