What happens after I pass the security review?

You can list your app publicly on the AppExchange. You’re also eligible to request an API token, if your app uses the SOAP or REST APIs.