What happens after I pass the security review?

After you pass the security review, you can list your offering publicly on the AppExchange and distribute it to customers. If your app uses the SOAP or REST APIs, you can request an API token at this time. You can only associate an approved package version with your public listing. Every package version associated with a public listing must be submitted for security review.

If your offering passed the security review within the last year, the new version is auto-approved, and its status changes to Passed; the status change can take up to 24 hours.