Security Certification Process

The Security Certification of 3rd Party Integration Service (IS) Connectors applies to all IS Connector listings from external publishers prior to being published on UiPath Marketplace.

There are two levels of security based on the number and type of checks performed. The levels are reflected through the badges showcased on each listing page.

1. Silver Certified

2. Gold Certified

Silver Certified

• The listing needs to pass each of the requirements listed below. In case there are issues with any of the steps, the Marketplace Partner will be required to fix them and explain any possible discrepancies.

• Once all three of the requirements are met, the IS Connector listing will receive the Silver Certified badge which will be visible on the listing’s page.

• The necessary time required for obtaining this level is 7 to 10 business days.

Phase 1: Content Quality Check

Name	Description
Content Review	What we check for: the accuracy of the information submitted in the Upload Form What is being checked: all fields in the Upload Form need to be filled in accordance to Publishing Guidelines for Integration Service Connectors

Phase 2: Security Checks

Name	Description
Malware analysis	What we check for: Malware/malicious files and other similar security checks. What is going to be scanned: Zipped Source code and the Activity Package provided by the Marketplace Partner.
Security Best Practices Scans	What we check for: Multi-technology software analytics, security measurement, and malicious code. What is going to be scanned: Source code

Phase 3: Functionality Testing

In this phase, the Publisher will showcase the functionalities of the Integration Services Connector in a demo meeting. During the demo, the Publisher will need to show:

• Connector Selection:

  • Choose the specific connector to be demonstrated.

• Connection Setup:

  • Show how to set up the connection to the data source using the chosen connector.

  • This involves entering relevant details such as the URL, API key, or other necessary credentials.

• Authentication Method:

  • Explain the authentication method being used (e.g., OAuth, API key, or username/password).

  • If there are any additional settings related to authentication, those should be covered as well.

• Testing the Connection:

  • The demonstration should include testing the connection to ensure it’s working correctly.

  • You can show how to retrieve sample data or perform a simple query using the connector.

• Execution using UiPath Studio

  • Demonstrate automations in UiPath Studio built using Connector activities.

Gold Certified

Important:

• All Silver Certified checks listed above are included.

• The listing needs to pass each of the requirements listed below. In case there are issues with any of the steps, the Marketplace Partner will be required to fix them and explain any possible discrepancies.

• Apart from fulfilling these checks, the Marketplace Partner must also provide Support for the IS Connector listing and have it in the Company profile.

• Once all of the requirements are met, the listing will receive the Gold Certified badge which will be visible on the IS Connector listing’s page.

• The necessary time required for obtaining this level of certification is up to additional two weeks.

Step	Name	Description
1	Malware analysis	What we check for: Malware detection with the help of antivirus engines. What is going to be scanned: Zipped Source code and Activity Package
2	Vulnerabilities in 3rd party dependencies	What we check for: Any vulnerabilities in 3rd party dependencies. What is going to be scanned: Zipped Source code and Activity Package
3	Static code analysis	What we check for: A comprehensive, top enterprise-level series of static code security measures and checks. What is going to be scanned: Zipped Source code and Activity Package