FSESample content
From internal tool to AppExchange listing
Packaging an internal Salesforce tool as a managed AppExchange app and taking it through security review.
- attempt security review pass
- 1st
- subscriber orgs
- [x]
- managed package
- 2GP
The challenge
A useful internal tool had grown inside one org with hard-coded IDs and no namespace. The team wanted to sell it but had never been through security review.
What we did
- 1Re-architected the tool for multi-tenant use with a namespace and configurable settings.
- 2Rebuilt the UI in Lightning Web Components and enforced CRUD and FLS throughout.
- 3Set up a second-generation managed package with CI-based releases.
- 4Prepared scanner results and documentation for the security review submission.
The result
The app is listed on AppExchange and ships new versions to subscribers through push upgrades.
Have a similar problem?
A 30-minute call with a Salesforce architect. You'll leave with a clear next step, whether or not we work together.