To get security guidance during the development phase in the AppExchange Security Review program, you can schedule technical office hours with the Product Security team. During these sessions, you can receive assistance on navigating AppExchange security requirements, designing secure solutions, addressing issues detected by automated security scanning tools, and resolving findings in your security review report. You can book these appointments through the Partner Security Portal.
Additionally, it is recommended to designate a security expert on your development team to integrate security considerations throughout the development lifecycle. Regular collaboration with this expert can help prevent security violations and delays.