📌 Need advice from experienced people

[Nurlan]

Hello.

My name is Nurlan, I’m from Kazakhstan.

I need the community’s help: I’ve found myself trapped and have been unable to escape for several months.

Here’s the situation: I created a Windows app, but I can’t build an audience for it because Microsoft blocks any activity related to my app – both its download from the internet and its launch. Of course, my app is signed with a valid digital signature, and as its developer I guarantee that it is 100% safe.

The problem is that despite all my efforts, no one is using my app – because the operating system itself hints at its potential danger and openly advises all users to avoid it, explaining that my app has a “low reputation” (and how could it have a high reputation if the system itself is constantly blocking it?).

I don’t know what to do: this is someone else’s operating system, and I’m just a guest in it with no moral right to ask for anything (let alone demand), but it’s already been several months, and I still haven’t found a solution.

I have repeatedly written letters to them and published appeals (both on Tech and on Medium) to draw their attention to my problem, but the corporation does not respond at all.

What should I do?



P.S.
I want to remain an independent developer, so I can’t afford an EV certificate (I’m an individual, not an organization), and I don’t want to get involved with publishers.

 

[ChatGPT]

Hello Nurlan,
It seems you're encountering issues with your app being flagged by Windows' security features due to low reputation. Here are several steps you can take to address this:

1. User Education and Documentation:
   • Prepare clear documentation and guides explaining that your app is safe, including how to bypass reputation warnings if necessary. This can help users trust your app and proceed with installation despite warnings.
2. Community Engagement:
   • Encourage users who have successfully installed the app to leave positive reviews and feedback, which can help improve your reputation over time.
3. Increase Install Base:
   • Arrange promotional campaigns or collaborations with community influencers or tech bloggers who can showcase and validate your app.
4. Use SmartScreen Mitigation:
   • Advise users to check if the "Unblock" checkbox appears when right-clicking the app in Windows Explorer under Properties. If available, selecting this can bypass the SmartScreen warning.
5. Regular Updates:
   • Keep your app updated with new features, security enhancements, and performance improvements. An actively maintained app can gain a positive reputation quicker.
6. Alternative Distribution:
   • Consider distributing your app through reputable third-party platforms or direct download from your website with clear instructions on how to trust and install the app.
7. Considerative Communication:
   • Persist with contacting Microsoft through official channels and community forums, although the response may be slow. Utilize insider programs to receive feedback and potentially faster resolutions.
8. Technical Solutions and Security Practices:
   • Investigate the possibility of any security vulnerabilities with the app or how it interacts with Windows SmartScreen and Smart App Control.

While these steps can help, remember that building a reputation takes time and consistent effort. If you have further questions or need more assistance, feel free to ask the community here. Good luck!

 

[Mike]

Hello.

My name is Nurlan, I’m from Kazakhstan.

I need the community’s help: I’ve found myself trapped and have been unable to escape for several months.

Here’s the situation: I created a Windows app, but I can’t build an audience for it because Microsoft blocks any activity related to my app – both its download from the internet and its launch. Of course, my app is signed with a valid digital signature, and as its developer I guarantee that it is 100% safe.



I don’t know what to do: this is someone else’s operating system, and I’m just a guest in it with no moral right to ask for anything (let alone demand), but it’s already been several months, and I still haven’t found a solution.

I have repeatedly written letters to them and published appeals (both on Tech and on Medium) to draw their attention to my problem, but the corporation does not respond at all.

What should I do?



P.S.
I want to remain an independent developer, so I can’t afford an EV certificate (I’m an individual, not an organization), and I don’t want to get involved with publishers.

To fully get around it you can try to register your application for review/malware analysis at Submit a file for malware analysis - Microsoft Security Intelligence . Make sure the files are clean and contain no malware. The issue will persist without a valid code signing certificate. You could try to self-sign the application as well, but it would not be trusted offhand.

 

[Nurlan]

To fully get around it you can try to register your application for review/malware analysis at Submit a file for malware analysis - Microsoft Security Intelligence . Make sure the files are clean and contain no malware. The issue will persist without a valid code signing certificate. You could try to self-sign the application as well, but it would not be trusted offhand.

Thank you.

In total, I have already submitted files more than 10 times both via Microsoft's file submission page and through Microsoft Edge, as recommended by the Microsoft Store:

Unfortunately, these methods have proven completely ineffective. The corporation barely responds, and many of my reports were not even registered — I can tell because I almost never received an automatic response with a registration number.

 

[Nurlan]

Looks like my app was finally approved, and it is no longer blocked when downloaded or launched (still can’t believe it). I hope it won’t be blocked after this message

A huge thank you to everyone who helped me solve this issue — I truly appreciate it

To Microsoft: if you genuinely want more new apps in the Store, you need to improve the verification process for independent developers. While I fully support all your security measures and policies as a user, as a developer I believe modernization is necessary because not all developers and apps pose a risk to end users.

To developers: unfortunately, I don’t know exactly what or who helped me (as I have reached out in many places and spoken with many people over the past few months). But one thing I know for sure — never give up (even if your messages/questions/accounts are ignored/blocked/removed) and always strive to make your product the best it can be.

 

[ChatGPT]

Congratulations, Nurlan! It’s wonderful to hear that your app has finally been approved and is no longer blocked! Your journey has demonstrated perseverance and resiliency—something every independent developer can draw inspiration from.
Your experience also sheds light on critical areas where Microsoft could enhance the usability and inclusiveness of their platforms for smaller, independent developers. Here’s an overview of your closing remarks and their significance:

Suggestions for Microsoft​

• Modernizing Verification Processes: Independent developers often face significant barriers with stringent app security and verification protocols, especially when EV certificates and corporate structures are prerequisites. Streamlining processes to verify independent and small-scale developers, possibly through reduced-cost signing programs or trust-building reviews, could expand the ecosystem of apps available for Windows.
• Better Communication: Improving the responsiveness of their systems—providing channels for indie developers to address SmartScreen or low-reputation flags—could help more apps meet trusted status without months of waiting.

Takeaway for Developers​

• Persistence Pays Off: Your advice to keep fighting for your app's inclusion in marketplaces is a vital reminder not to give up, even when it feels like hitting endless roadblocks. Publishing appeals, engaging communities, and trying every available route (social media, forums, and official submissions) eventually pay dividends.
• Quality and Trustworthiness Matter: While waiting for platform recognition, proving an app’s safety through clear documentation, prompt updates, meaningful user reviews, and transparency goes a long way toward building trust.

What’s even more encouraging is how developers like you help improve the ecosystem as a whole by pushing for change. Thanks to your experience, both developers and platform providers might slowly begin to address how independent voices can thrive without unnecessary hurdles. Keep building, innovating, and inspiring! If you ever face similar issues in the future, the community will surely be here to help.