How to Build and Publish Your App on the CrowdStrike Marketplace

Aiming to get your custom security app published on the CrowdStrike Marketplace, but not sure where to begin? 

This technical guide walks you through the complete process, from building your app with Foundry's App Manager to successful Crowdstrike publication. 

The complete steps covered here:

  • Stage I: Building Your App in Foundry
  • Stage II: Preparing Your App for Marketplace Submission
  • Stage III: Testing and Validation
  • Stage IV: Exporting Your App
  • Stage V: Marketplace Submission

About us: At Metron, we've helped numerous organizations navigate the Foundry development and marketplace submission process, and we know what it takes to get your app live.

Let’s dive in.

Stage I: Building Your App in Foundry

Getting Started: App Initialization

Your journey to marketplace publication begins with creating your app in Foundry. 

Navigate to Foundry > App Manager to begin your development process. 

You'll see two options here: 

1. Import App if you're bringing in an existing application

2. Create a Custom App if you're building from scratch. 

For most marketplace submissions, you'll be creating a new custom app. When you click Create Custom App, you'll be prompted to configure several foundational elements. 

Give your app a clear, descriptive name and a compelling description that explains what problem it solves. You'll also want to add branding elements that make your app visually identifiable. 

Once you've filled in these details, click Create App to generate your unique App ID, essential for all subsequent development activities.

Building Your Data Foundation

Once your app is initialized, it's time to configure how it will handle data. Head to the Data tab and click Start to begin this critical configuration step. 

API Integrations: Connecting to External Services

API integrations let you connect with external services, pull data from third-party platforms, enrich alerts with threat intelligence feeds, or integrate with your internal systems.

Setting up an API integration is straightforward. Start by clicking Create API Integration, then choose whether to use an OpenAPI specification for quick setup or manual creation for full customization. However, OpenAPI specification is the recommended option for faster setup instead of going about it manually.

Next, configure your API profile with API profile name, host environment, host protocol, host URL, and Authentication type (API key, OAuth, basic auth, etc.)

Now, create your operations by defining the Operation name, HTTP method, and Endpoint path. The operations are a wrapper for API calls and can be used further in playbooks by exposing it to workflows

Finally, set your workflow sharing preferences:

  • Share with app workflows only - Keeps it contained within your app
  • Share with app workflows and Fusion SOAR - Enables custom actions across your platform
  • Do not share - Private operations for internal use

Click Save, and your integration is ready to use.

Stage II: Preparing Your App for Marketplace Submission

Creating Your App Listing Document

Before submitting to the CrowdStrike Marketplace, you need a comprehensive app listing document that covers two essential sections.

Actions Documentation

Should catalog every action your app provides, with action name and their short description, expected inputs, expected outputs, and real-world use case examples

Configuration Instructions

It should provide a step-by-step setup guide including: Required credentials (username, password, API keys), authentication tokens for external integrations, environment-specific settings and network requirements, and common troubleshooting scenarios

Write assuming zero prior knowledge, your users are seeing your app for the first time. Clear documentation reduces support burden and improves satisfaction.

Configuring Your App for Deployment

With your app built and documented, the next step is to configure it for deployment. In Foundry, this configuration is done through App Manager, where you define how the app will be installed and how its settings will be utilized when creating workflows.

Pay special attention to your workflow sharing settings at this stage. If your app is meant to integrate with Fusion SOAR, make sure those connections are properly configured and verify that authentication credentials are correctly stored.

Stage III: Testing and Validation

Before exporting your app for marketplace submission, thorough testing is critical. Verify that API integrations respond correctly, operations work individually and in combination, data collection functions properly, and authentication works consistently. 

Don't just test the happy path, intentionally trigger errors so you are confident that your app can handle real-world usage.

Stage IV: Exporting Your App

Once testing confirms everything works as intended, you're ready to export your app from Foundry. This export process packages your app, its configurations, and all associated components into a format that can be submitted to the CrowdStrike Marketplace.

In App Manager, the export option becomes available only after the app has been successfully Deployed and Released. Note that it’s not necessary for the app to be installed from the App Catalog  as deployment and release are sufficient prerequisites.

Once exported, this package can then be shared and used as part of your marketplace publication process.

Stage V: Marketplace Submission

With your exported app package in hand, you're ready to submit to the CrowdStrike Marketplace. The marketplace team will review your submission to ensure it meets quality standards, security requirements, and user experience guidelines.

Your submission should include:

  • The exported app package from Foundry
  • Your complete app listing document with actions and configuration details
  • Any supplementary documentation (user guides, video tutorials, etc.)
  • Marketing materials if you're offering the app commercially
  • Support contact information for users who need assistance

Ready to Publish?

On the surface, this process can seem daunting, especially if you're unfamiliar with marketplace submission requirements. However, if you run into any problems or need assistance from start to finish, we can help. 

Our team of expert developers has guided numerous organizations through the complete end-to-end process, from initial app development to successful marketplace publication.

The power of CrowdStrike Foundry and the Marketplace lies in their ability to transform security operations through customization and community collaboration.

Considering publishing an app on the CrowdStrike Marketplace, but not sure where to begin? Send a note to connect@metronlabs.com, and our team will be happy to connect. Metron Security is a trusted CrowdStrike development partner.