Here are some common mistake or reasons of not getting security scan report for salesforce package .
When your product get complete you send that product for security review , security review is critical process but not for us we use https://security.secure.force.com/security/tools/forcecom/scanner for submitting our package for security review .
Once you send your code for security review then within few minutes you get the mail that your Job for security scan is added In the Queue.
And if all goes well then you will get security scan report within a hour .
In some cases it may take more then 5-hr to generate report .
If it take’s more 5-hr then here are some reasons for behind that.
Reasons for not getting security scan report :
Reasons 1 :
The security scan report E-mail contains attachment file of html file , check if your organization allows you receive an E-mail with this type of attachment’s .
Reason 2 :
Go through this doc before you submit your solution for security scan.
If you found any other solution then please share ,Thank you…