Marketplaces that require a formal security review before listing — plan for a longer path to publish.
27 marketplaces in this directory match this tag.
These marketplaces gate listing behind a formal security or certification review — a questionnaire, a scoped-permission check, sometimes a penetration test or source-code review. It raises the bar to publish but also raises buyer trust, which matters most in enterprise sales.
Timelines range from a few days (Zendesk, Gorgias) to several weeks (Salesforce, Miro, the cloud marketplaces). Budget for it: minimize the scopes you request, prepare a privacy policy and data-handling story, and expect a back-and-forth with the platform’s review team before you go live.
Salesforce, Inc.
CRM marketplace for apps, components, integrations, and data connectors that extend Salesforce workflows.
SAP SE
Enterprise marketplace for SAP-certified apps, extensions, and integrations across SAP's business cloud portfolio.
Google LLC
Marketplace for add-ons and apps that extend Gmail, Docs, Sheets, Drive, and Google Workspace admin.
Google LLC
Distribution store for Chrome browser extensions, themes, and progressive web apps.
Microsoft Corporation
Store for Edge browser extensions, largely Manifest V3-compatible with Chrome Web Store submissions.
Amazon Web Services, Inc.
Marketplace for deployable SaaS, AMIs, containers, and data products that run on or alongside AWS.
Oracle Corporation
Marketplace for solutions built on or integrated with Oracle Cloud Infrastructure (OCI) and Oracle Fusion apps.
ServiceNow, Inc.
Marketplace for ITSM, ITOM, and workflow apps built on the ServiceNow platform.
Creatio
Partner-gated marketplace of apps, connectors, and AI agents extending Creatio's no-code CRM and workflow-automation platform.
monday.com Ltd.
Curated marketplace for embedded apps, workflow recipes, connectors, and AI agents on monday's Work OS and CRM, with native billing.
RealtimeBoard, Inc. (Miro)
Reviewed marketplace for embedded whiteboard apps and REST integrations extending Miro's collaborative canvas, gated by partner approval and OAuth2.
Cisco Systems, Inc.
Cisco's reviewed directory for Webex bots, OAuth integrations, service apps, and embedded apps across enterprise messaging, meetings, and calling.
Formagrid, Inc. (Airtable)
React-based embedded extensions that add visualizations, tools, and integrations inside Airtable bases, published through a reviewed CLI submission.
Apple Inc.
Apple's mandatory, review-gated storefront for native iOS, iPadOS, and macOS apps, with Apple as Merchant of Record for paid content.
Google LLC
Android's dominant app store with a $25 one-time fee, policy review, and Google Play Billing as Merchant of Record.
Microsoft Corporation
Windows' built-in app store with zero registration fees and optional 15%/12% commerce, or bring-your-own-billing to keep 100%.
Opera Norway AS
Opera's official catalog for Chromium-based WebExtensions, free to publish but subject to slow human moderation.
Raycast Technologies Ltd.
Open-source extension store for the Raycast launcher, published via GitHub PR review, free and MIT-licensed, with AI-agent tool support.
Apple Inc.
Safari's browser extensions, distributed only as App Store apps under Apple Developer Program terms and full App Review.
Google LLC
Google's marketplace for deploying and buying third-party software that runs on Google Cloud, billed through the customer's cloud account.
Microsoft Corporation
Microsoft's marketplace for Azure-based infrastructure software and transactable SaaS, billed through the customer's Azure agreement.
Snowflake Inc.
Snowflake's marketplace for data products and Native Apps that run inside a consumer's Snowflake account, with billing handled by Snowflake.
Vercel Inc.
Vercel's marketplace for native integrations that provision and bill third-party backend and AI services through the Vercel dashboard.
DigitalOcean Holdings, Inc.
DigitalOcean's marketplace of 1-Click Droplet and Kubernetes app images plus SaaS add-ons, deployable and billed through DigitalOcean's cloud.
Intercom, Inc.
Intercom's marketplace for Canvas Kit-embedded Inbox/Messenger apps and Fin AI-agent integrations, with OAuth for public apps and a partner program.
Genesys Cloud Services, Inc.
Genesys's enterprise AppFoundry marketplace for contact-center apps, bots, and virtual agents, with OAuth, certification, and Genesys-billed Premium usage models.
Talkdesk, Inc.
Talkdesk's AppConnect marketplace for contact-center apps using Events-API webhooks and per-install OAuth, with certification gates and Autopilot/Copilot AI agents.