New app security questions

[ron.jailall (Ron)]

We’re starting the development of a new app and want to make sure we don’t have any issues when we get to the review stage. The new app registration mentions a few items to check, are all of these required for passing the review process?

Specifically the 3rd party penetration testing, or soc2 compliance, or iso27000 compliance.

We do use SAST and SSDLC practices.

[nigel.hughey (Nigel)]

Hello Ron,

The items in the Security section are not necessarily hard requirements. If you use use SAST and SSDLC practices, then describe this in detail in your Technical Design Document, and the Security Team will follow up with if they have questions.

You can read more about Security best practices for Marketplace apps here: Security Best Practices

Regards,
Nigel Hughey
Marketplace Operations

[nigel.hughey (Nigel)]

For more details:

Evidence Guidelines for Your Marketplace App

Evidence Guidelines for Your Marketplace App We accept all forms of documentation and ask that you include it in your Technical Design Document. This includes certificates, diagrams, and written documentation. Security evidence documentation (SSDLC, SAST/DAST etc.) is required for these app review requests: Request for an Authorization URLs (Beta) *If you have a specific use case you would like to inquire about, reach out to marketplace.security@zoom.us. In addition, please submit security…