Security requirements for private cloud apps

Hi everyone,

Is there any security checklist that is applicable to the apps that are private listed on Atlassian Marketplace.

Thank you in advance