Aptumo

Code Reviews has been able to support us at a time when our own resources were stretched due to fast growth and the interest levels in our new product, Aptumo. Their experience navigating the AppExchange Security Review Process has been extremely valuable to our team.

Andrew Edge | Salesforce Technical Lead | Aptumo
Start your free trial

Gearset’s Code Reviews helps Aptumo hit their time-to-market goals on the AppExchange

Aptumo was born because Echo Managed Services envisioned an easy-to-use, cloud-native solution designed to transform how utility companies manage billing in the era of connected customers.

An innovative SaaS customer billing solution, Aptumo reduces billing and CRM data synchronization headaches across customer service operations.

Problem and Challenges

Echo’s team is large and globally distributed, and it was crucial that the same security and technical standards were observed consistently throughout product development.

Successfully passing the AppExchange Security Review was vital to avoid delays to Echo’s planned time-to-market, and this was adding additional pressure to the product development team.

In the meantime, customers from multiple geographies were buying into Echo’s vision and new regulatory requirements continued to emerge that needed to be built into the product quickly. Simply put, development couldn’t be paused.

Echo needed a way to deliver innovation quickly while ensuring top-class security standards were always met, enabling them to clear the AppExchange Security Review in line with their planned timeline.

Solution

Code Reviews’s software helped Echo pass the AppExchange Security Review and to meet their time-to-market goals, thanks to a combination of continuous automated reviews, and one-off manual inspections.

Echo’s team runs its Salesforce development on GitHub, using Code Reviews’s solution to ensure all new developments are compliant with all AppExchange Security Requirements.

Echo’s team uses a feature-branch Git workflow. Every feature is developed on its own branch, and a pull request is created as soon as development is complete.

As soon as this happens, Code Reviews performs a complete security check, outlining any potential issues and recommending fixes to the Echo developers. Once all checks pass, a peer-to-peer review takes place and the feature is eventually merged, triggering the CI pipeline and automatic deployment to a testing environment.

Outcome

With a stronger cloud-first vision and more apps on the way, Echo has chosen Code Reviews to support secure development across the Aptumo product.

Start your Salesforce DevOps journey today

Join the thousands of other companies already deploying with Gearset