Develop & publish “5 star”
AppExchange app

2
I’m Chirag Mehta
I am here because I love to share!
Namaste!
You can find me at
@chiragmehta84
@chiragmehta84
@chiragmehta84
chirag@satrangtech.com

Idea!!!!!
We all go one, isn’t :)
3

Idea to Execution
❖ Believe in Yourself
❖ Create Your Own Personal Board of Advisors
❖ Embrace Risk as Your Best Friend
❖ Be Extremely Patient
❖ Learn How to Sell Your Vision
❖ Connect the Dots Along the Way
❖ Be Passionate With Your Pursuit
❖ Be Purposeful
❖ Always Make the Idea Better
Reference : http://bit.ly/2fbfBuH
4

”
To me, ideas are worth nothing
unless executed. They are just a
multiplier. Execution is worth
millions.
5

Develop
Most essential we consider, but is least time consuming part of app building.
6

Development Life Cycle
Development
Do development.
QA
Sanity and
Regression
testing.
Packaging
Release beta and
major package
versions.
7

”
if everyone is moving forward
together then success takes care of
itself.
8

Security
Really ???
9

Security Review
Force.com
Security Scanner
Scan and fix
vulnerabilities
Read more @
https://security.secure.for
ce.com/sourcescanner/
Web Application
Scanner (ZAP)
External
Integrations
Read more @
https://security.secure.for
ce.com/security/tools/web
app/burpabout
Best Practices
Adhere and follow
best practices.
10

Read more @ https://security.secure.force.com/security/tools/forcecom/scannerhelp
Add Topics : Retire.js, False +ve/-ve, Support Case, Security Office Hours etc
Quality Profile:
The Force.com Security Source Scanner will detect the following
common Apex coding and design issues:
● DML statements inside loops
● SOQL/SOSL inside loops
● Hardcoding Trigger.new[0]
● Hardcoding Trigger.old[0]
● Queries with no Where clause or no LIMIT clause
● Not bulkifying apex methods
● Async (@future) methods inside loops
● Hardcoding IDs
● Multiple triggers on same object
● Static Resource referencing
● Multiple Visualforce forms in the same page
● Test methods without assert
Additional Info
Security Profile:
The scanner will help to detect the following security vulnerability
types:
● Cross Site Scripting (reflected, stored, and DOM based)
● SOQL/SOSL Injection
● Access Control Issues (Sharing, FLS)
● Cross site request forgery attacks
● Arbitrary Redirects
● Overly permissive postMessage targets
11

”
Security review is not a burden, it's a
necessity to ensure customer
success.
12

Support
13
Most important part of app success!

Support
App Notes
- Configuration
Guides
- Release Notes
- Videos
- Tutorial
- FAQ’s
Reach out
- Customers
- Seek feedback
- ISV Org
14
Updates
- Listen to
customer
- Make new
releases
- Address
customer
requirements
Ticket/Case
- Support
System
- Round the
clock support
- Instant
replies

”
Delivery Management is more
important than Project
Management.
15

Resources
Zap Scanner : https://security.secure.force.com/security/tools/webapp/burpabout
Force.com Scanner : https://security.secure.force.com/sourcescanner/
Force.com Scanner Help (FAQs) : https://security.secure.force.com/security/tools/forcecom/scannerhelp
ISV Security Review (Trailhead Module) : https://trailhead.salesforce.com/en/modules/isv_security_review
Build Apps as an AppExchange Partner (Trailhead Trail) : https://trailhead.salesforce.com/en/trails/isv_developer_beginner
AppExchange : https://appexchange.salesforce.com/
Security Office Hours : https://security.secure.force.com/security/contact/ohours
Reite JS : Retire.js
16

My Apps ….17

18
THANKS!
Any questions?
You can find me at
@chiragmehta84
@chiragmehta84
@chiragmehta84
chirag@satrangtech.com