To list an app on Salesforce AppExchange, which Salesforce now runs as AgentExchange, you join the Salesforce Partner Community, build a second-generation (2GP) managed package, pass the AgentExchange security review, create the listing in Listing Builder, and sign the Partner Application Distribution Agreement (PADA) once the listing is approved. Trailhead states a $999 review fee for each attempt on a paid solution, and the ISVforce Guide v68.0 says free solutions pay nothing.
Last verified: September 17, 2026, by Sunny Chauhan, who previously worked on AppExchange partnerships at Salesforce. Every fee, timing and marketplace count below was checked against the linked source on that date.
How do you list an app on Salesforce AppExchange (AgentExchange)?
Salesforce frames the same work as a six-stage product lifecycle: Plan, Build, Distribute, Market, Sell and Support. Listing an app on AgentExchange follows the order Salesforce documents in the ISVforce Guide, Version 68.0 (Winter '27, last updated July 22, 2026). The eight steps:
- Join the Salesforce Partner Community and sign up for the ISV Partner Program. AgentExchange solutions are built by official Salesforce partners.
- Confirm your Partner Business Org (PBO). It is provisioned when you join and comes with two Sales and Service Cloud Enterprise Edition licenses. See our Partner Business Org guide.
- Choose ISVforce or OEM. ISVforce apps sell to companies that already own Salesforce licenses; OEM apps embed a Salesforce license in your product. The ISV vs OEM comparison covers the trade-offs.
- Build a managed 2GP package. Salesforce recommends managed 2GP for every new app. Our managed package guide explains 1GP vs 2GP.
- Scan and document. Run the Source Code Scanner (Checkmarx) from the Partner Security Portal and, if the app calls any non-Salesforce domain, a DAST scan of those endpoints.
- Submit for security review and pay the fee for a paid solution. The security review guide goes check by check.
- Create the listing in Listing Builder in the Partner Console, choosing the listing type carefully, because it cannot be changed later.
- Sign the PADA after the listing is approved, then publish. Listings that use AgentExchange Checkout sign a clickthrough PADA.
How big is AgentExchange compared with other enterprise app marketplaces?
Salesforce AgentExchange (formerly AppExchange) is the largest CRM app marketplace by published count: Salesforce's April 2026 ISV Track overview cites 9K+ listings and 14M+ installs. The comparisons: the ServiceNow Store publishes no exact count and describes "hundreds of certified" apps, the HubSpot App Marketplace showed 2,437 apps, Zoho describes 2000+ extensions, and the Atlassian Marketplace API returned 7,941 listings (all checked September 17, 2026).
Each figure below measures a different scope (listings, apps, extensions, or solutions), so read the "What it counts" column before comparing numbers across rows.
| Marketplace | Published figure (exact wording) | What it counts | Reach or installs published | Gate to list | Source, checked |
|---|---|---|---|---|---|
| Salesforce AgentExchange (formerly AppExchange) | "9K+ AgentExchange listings"; catalog of "10k" Apps, Integrations & Experts, "2.7k" Slack apps and agents, "1k" Agentforce agents and tools | Listings of all types, including consultant listings in the 10k bucket | "14M+ installs"; 91% of Salesforce customers use one or more apps (IDC, July 2025) | Security review for every listed package; Trailhead states a $999 fee for a paid solution's initial submission and any subsequent attempt (checked Sept 17, 2026) | Salesforce ISV Track overview PDF, Sept 17, 2026; Trailhead, Submit Your Solution for Security Review |
| HubSpot App Marketplace | "2,437 results for Apps" | Apps listed on the marketplace page | Not stated on the listing page | At least three active installs in unaffiliated production accounts, OAuth only; initial review within 10 business days | HubSpot marketplace and listing requirements, Sept 17, 2026 |
| Atlassian Marketplace | 7,941 listings (public REST API count) | Apps for all Atlassian products; 6,314 cloud, 1,606 Data Center, 2,273 server and 5,301 for Jira (hosting counts overlap) | Not in the API count | Not covered here | Atlassian Marketplace API, Sept 17, 2026 |
| Microsoft Marketplace | "Tens of thousands of cloud and industry solutions"; "Over 3,000 AI apps and agents" | All Microsoft cloud solutions (AppSource and Azure Marketplace combined, launched in the US on Sept 25, 2025), not CRM only | Not stated as a number | Not covered here | Microsoft announcement, Sept 17, 2026 |
| ServiceNow Store | "Hundreds of certified, ready to use applications"; no exact count published | Certified apps for the ServiceNow platform | Not stated | Not covered here | ServiceNow Store, Sept 17, 2026 |
| Zoho Marketplace | "2000+ ready-to-use extensions for Zoho products" (site description) | Extensions for all Zoho products, not Zoho CRM alone | Not stated | Not covered here | Zoho Marketplace, Sept 17, 2026 |
Which platform has a larger marketplace for third-party apps, Salesforce or ServiceNow?
Salesforce has the larger third-party app marketplace. AgentExchange publishes 9K+ listings and 14M+ installs, while the ServiceNow Store publishes no exact count and describes its catalog as "hundreds of certified, ready to use applications". Other ServiceNow Store counts that circulate online are not published by ServiceNow, so treat them as unsourced.
How does the Atlassian Marketplace compare to Salesforce AppExchange for enterprise apps?
The Atlassian Marketplace and AgentExchange are in the same size range (7,941 Atlassian listings against 9K+ Salesforce listings), but they serve different buyers: Atlassian apps extend Jira, Confluence and other Atlassian tools, while AgentExchange apps extend Salesforce CRM, Slack and Agentforce. For enterprise buyers, 1,606 Atlassian listings support self-managed Data Center, and every packaged solution listed on AgentExchange has passed Salesforce's security review. The partner economics also differ, as the revenue share section shows.
Which CRM supports the most third-party app integrations?
Salesforce publishes the largest CRM-specific marketplace: 9K+ AgentExchange listings, against 2,437 apps on HubSpot and 2000+ extensions that Zoho counts across all its products. Microsoft Marketplace publishes a bigger total ("tens of thousands" of solutions), but that figure covers every Microsoft cloud product, not Dynamics 365 CRM alone. Our HubSpot Marketplace guide covers listing there.
Which AppExchange number should you quote?
Salesforce publishes several AgentExchange figures because each one covers a different scope. This table matches the figure to the question you are answering.
| If you need | Quote | Scope and source |
|---|---|---|
| The official 2026 marketplace size | 9K+ listings and 14M+ installs | Salesforce ISV Track overview, effective April 2026 |
| Apps plus Slack and agents | 10k apps, integrations and experts; 2.7k Slack apps and agents; 1k Agentforce agents and tools | Same Salesforce PDF |
| The figure Trailhead uses | "12,000+ apps and integrations and 1,000+ agents and skills across Salesforce and Slack" | Trailhead AgentExchange module |
| An independent app-only count | 6,233 apps from 3,668 developers on December 1, 2025, up 10% from 5,661 a year earlier | SFApps.info State of AppExchange, dev.to edition |
What changed for AppExchange listings in 2026?
The biggest 2026 change for AppExchange listings is the name and the catalog. Salesforce launched AgentExchange as a marketplace for Agentforce components on March 4, 2025, and at TDX on April 15, 2026 it unified AppExchange, Slack Marketplace and the Agentforce ecosystem into a single catalog. appexchange.salesforce.com now reads "Salesforce AppExchange is now AgentExchange". Our AgentExchange explainer covers the rebrand in depth.
| When | What changed | What it means for a listing |
|---|---|---|
| June 2025 | Salesforce sunset its Chimera DAST scanner (old reports downloadable until June 15, 2025) | Partners run a DAST scanner of their choice, such as ZAP or Burp Suite, per the Partner Security Portal help |
| April 2026 | AgentExchange GTM App: automated private offers, advanced licensing, and consolidated billing and payment processing became generally available | Private offers, licensing and billing can run inside the marketplace |
| April 2026 | One catalog for AppExchange, Slack Marketplace and Agentforce | Salesforce's Summer '26 ISV blog says the unified storefront puts "20 million users in your reach" |
| Summer '26 | Salesforce's Summer '26 ISV blog announced ISV MCP Tool Action Listings, "a brand-new listing type specifically for your off-platform tech" | Blog-announced scope; the v68.0 guide documents the three Listing Builder types (Packaged Solution, API, Consultant) |
| July 22, 2026 | ISVforce Guide Version 68.0 (Winter '27) published | Sets out Salesforce's "Connected App and External Client App Security Requirements" for listed solutions |
What are the requirements to list on Salesforce AppExchange?
The requirements to list on AppExchange are a partner account, a Partner Business Org, a solution that passed security review, and a complete listing. For a Salesforce-native package, the ISVforce Guide v68.0 asks the security review submission to include:
- A Salesforce Developer Edition org with the managed package installed
- A Source Code Scanner (Checkmarx) report from the Partner Security Portal (not required for mobile clients or API solutions)
- DAST scan reports for any external endpoints the solution calls
- URLs and login credentials for external components that require authentication
- Solution documentation
- False-positives documentation, if you are disputing scanner findings
Salesforce's Security Review Requirements Checklist Builder in the Partner Community generates the exact list for your architecture.
Choosing a listing type
AgentExchange has three listing types in the v68.0 guide, and you cannot change the type after the listing is created:
- Packaged Solution, with Salesforce Platform Package sub-types Salesforce App, Bolt Solution, Flow Solution, Lightning Component and Agentforce Solution, plus B2C Commerce Cartridge and Tableau Accelerator
- API, for Salesforce Platform API, Marketing Cloud Engagement API or headless B2C Commerce integrations
- Consultant, for consulting companies
Agentforce listings must also state the number of agents, topics and actions, and describe the Agentforce capabilities in 100 characters or fewer. Our listing creation walkthrough covers the Listing Builder fields.
How long does the AppExchange security review take?
Trailhead says a security review typically takes 4 to 5 weeks, and "most submissions pass on the second attempt." The ISVforce Guide puts an initial review at approximately 4 to 6 weeks and breaks it into stages, which it labels estimates that vary with the completeness of the submission and the total volume of submissions.
| Security review stage | Salesforce estimate |
|---|---|
| Security Review Operations verifies the submission is complete | 1 to 2 weeks |
| Product Security tests the solution for the first time | 3 to 4 weeks |
| Product Security tests a resubmission that shows progress on fixes | 2 to 3 weeks |
Salesforce does not publish an end-to-end listing timeline, because build time depends on the scope of the package.
What does it cost to list on AppExchange?
Listing on AppExchange costs nothing to start: joining the Partner Community is free and the PBO is provisioned when you join. The Salesforce fee that applies to most ISVs is the security review fee. Trailhead states it as "a $999 fee payment for the initial submission and for any subsequent attempts" for every paid solution. The ISVforce Guide adds the rest of the fee rules:
- Free solutions pay no security review fee.
- Three Source Code Scanner runs per solution version are included in the fee.
- There is no fee to evaluate a false-positives report or to take a second look at verification feedback.
- There is a fee to retest a remediated solution.
- A new package version built on a version that already passed inherits listing readiness, so it does not need a new review or fee.
Our security review fee breakdown walks through these cases. The larger cost is engineering. Noltic, a Salesforce consultancy, estimates $25,000 to $150,000+ to build a typical AppExchange app and $100,000 to $300,000+ for a complex enterprise app; treat those as a third-party estimate, not a Salesforce figure.
How does AppExchange revenue share work?
AppExchange revenue share is set in each partner's agreement with Salesforce. The AppExchange Starter Pack for ISVs, Salesforce's ISV onboarding PDF dated August 2023, states 15% of net revenue for ISVforce and 25% of net revenue for OEM, and adds that partners enrolled in the Marginal PNR model become eligible for lower marginal royalty rates once they generate USD 1,000,000 or more in Annual Order Value. When a partner uses AgentExchange Checkout, the ISVforce Guide says Stripe deducts "the Salesforce percentage net revenue (PNR) specified in the partner's agreement." This table sets Salesforce's published rates next to the marketplaces in the size comparison that publish their terms.
| Marketplace | What the marketplace publishes | Source |
|---|---|---|
| Salesforce AgentExchange | Salesforce keeps 15% of net revenue (ISVforce) or 25% (OEM) | Starter Pack PDF |
| Atlassian Marketplace | Partners keep 84% (Forge), 80% (Connect), 75% (Data Center) from April 1, 2026, then 83%, 75% and 75% from October 1, 2026; 100% of the first $1M lifetime Forge revenue from January 1, 2026 | Atlassian pricing, payment and billing |
| HubSpot App Marketplace | No fee or revenue share is stated on the listing requirements page | HubSpot listing requirements |
Who builds the managed package if you have no Salesforce developers?
The managed package can be built by your own Salesforce engineers, by a Salesforce consulting partner, or by a done-for-you engineering service, and all three routes must produce the same thing: a 2GP managed package that follows Salesforce's secure coding guidance and passes the Checkmarx scan and security review. In-house teams suit companies planning several Salesforce products. Consulting partners suit a one-off build with a defined budget. A done-for-you engineering service such as Appnigma (the author's company) builds the package for a custom flat quote while the SaaS company keeps the code and IP.
Whichever route you choose, the ISVforce Guide suggests running an alternative scanner such as the open-source PMD Source Code Analyzer during development and reserving the three included Checkmarx runs for the final submission.
For the firms themselves, our matrix of nine AppExchange development companies compares PDO level, partner tier, listing rating, certifications and the two firms that publish rates.
Is it worth listing your SaaS product on AppExchange?
Listing a SaaS product on AppExchange is worth it when your buyers run Salesforce and your deals involve a vendor or security review. The listing gives you three things, and only one of them is traffic.
| What you get | What it means in a deal | Who it matters to |
|---|---|---|
| Credibility | Salesforce has security-reviewed your package, so procurement and IT treat you as a vetted vendor | Enterprise buyers with a vendor review process |
| Distribution | Buyers searching the marketplace can find you and try the app without a sales call | Admins sourcing tools |
| API access in smaller editions | After security review, your app can use the standard Data SOAP and REST APIs in Group and Professional Edition orgs, which normally have no API access, plus Metadata API in Professional Edition | SaaS teams whose customers run Professional Edition |
The Group and Professional Edition point is often missed. The ISVforce Guide says access comes through an API token (client ID) for SOAP calls or connected app allowlisting for REST, and Bulk API 2.0 stays unavailable in those editions.
Listing tends to pay off when:
- Your customers are mid-market or enterprise companies on Salesforce, and prospects ask whether you are on AppExchange.
- Procurement or security teams review every new vendor.
- Your product depends on Salesforce data in the customer's daily workflow.
It is usually worth waiting when your buyers are small businesses with short sales cycles, your product has no real Salesforce dependency, or it mostly repeats features Salesforce already ships.
What should you do after your AppExchange listing goes live?
An AppExchange listing needs ongoing work after it goes live, because buyers judge it by reviews, recency and whether they can try it. The SFApps.info data shows 50.65% of AppExchange apps (3,157) had no reviews in December 2025, so a handful of genuine reviews already sets a listing apart.
- Ask design partners and early customers for reviews in the first weeks.
- Add a demo and a video: the ISVforce Guide notes that interactions such as watching the listing's demo video can trigger lead collection.
- Watch AgentExchange Marketplace Analytics, which supports every listing type.
- Build new versions on the version that passed review so they inherit listing readiness.
Frequently Asked Questions
How do I list my app on Salesforce AppExchange?
Join the Salesforce Partner Community, confirm your Partner Business Org, build a 2GP managed package, pass the AgentExchange security review, create the listing in Listing Builder, and sign the Partner Application Distribution Agreement after the listing is approved. Then publish.
What does it cost to publish an app on Salesforce AppExchange?
Joining the Partner Community is free. Trailhead states a $999 security review fee for a paid solution's first submission and for each later attempt; the ISVforce Guide v68.0 says free solutions pay no fee. Salesforce's Starter Pack (August 2023) states a 15% net revenue share for ISVforce and 25% for OEM.
How long does it take to get an app on the Salesforce AppExchange?
Trailhead says the security review typically takes 4 to 5 weeks, with 1 to 2 weeks of verification and 3 to 4 weeks of first testing per the ISVforce Guide. Build time depends on the package and is not published by Salesforce.
How many apps are on Salesforce AgentExchange in 2026?
Salesforce's April 2026 ISV Track overview cites 9K+ AgentExchange listings and 14M+ installs. Trailhead cites 12,000+ apps and integrations plus 1,000+ agents and skills across Salesforce and Slack, and the independent SFApps.info scrape counted 6,233 apps on December 1, 2025.
Is Salesforce AppExchange bigger than the ServiceNow Store?
Yes. AgentExchange publishes 9K+ listings, while the ServiceNow Store publishes no exact count and describes "hundreds of certified, ready to use applications" (checked September 17, 2026).
What is the AppExchange revenue share percentage in 2026?
Salesforce's Starter Pack (August 2023) states 15% of net revenue for ISVforce partners and 25% for OEM partners. The exact percentage for each partner is set in that partner's agreement.
Is AppExchange now called AgentExchange?
Yes. At TDX in April 2026, Salesforce unified AppExchange, Slack Marketplace and the Agentforce ecosystem into one catalog called AgentExchange, and appexchange.salesforce.com now says AppExchange is now AgentExchange.
Sources
- Salesforce, AgentExchange ISV Track overview (effective April 2026)
- Salesforce, ISVforce Guide Version 68.0, Winter '27 (PDF)
- Trailhead, Submit Your Solution for Security Review
- Trailhead, Experience the New AgentExchange
- Salesforce, The AppExchange Starter Pack for ISVs (PDF)
- Salesforce Partner Security Portal help
- Salesforce, AgentExchange announcement (March 4, 2025)
- Salesforce, TDX 2026 live blog
- Salesforce, ISV strategy for the Summer '26 release
- SFApps.info, State of AppExchange 2026 (dev.to edition)
- HubSpot App Marketplace and HubSpot App Marketplace listing requirements
- Atlassian Marketplace REST API and Atlassian pricing, payment and billing
- Microsoft, Introducing Microsoft Marketplace (September 25, 2025)
- ServiceNow Store
- Zoho Marketplace
- Noltic, How much does it cost to build an app for AppExchange
