Purchasing organizations or third-party labs need to vet apps before selling them to help ensure their security. However, the vetting process poses several challenges, including specifying security and analysis requirements; identifying appropriate tools, mechanisms, and approaches for analyzing security vulnerabilities; and finding appropriate personnel to manually vet the apps.