Before a company can list an application on the Salesforce AppExchange, the company needs to go through the Salesforce Security Review process.