Token

What Token does

Token is a Rochester, NY-based biometric authentication company founded in 2014 that sells the TokenCore platform, a FIDO2/WebAuthn- and U2F-compliant identity assurance layer combining fingerprint-based MFA with cryptographic proximity and domain binding. Its product line consists of three hardware form factors — the Wearable (biometric ring), Portable (biometric stick), and Node (daily-carry device for air-gapped/classified environments) — supported by on-device credential storage and signed firmware update capability. Token positions itself above, rather than as a replacement for, customers' existing IAM, SSO, and PAM infrastructure, with pre-built integrations into Okta, CyberArk, Oracle, Google, 1Password, and OneLogin.

The company targets high-security verticals including healthcare (HIPAA-aligned), financial services, aerospace & defense, insurance, critical infrastructure, and technology, with stated use cases centered on preventing phishing, relay attacks, credential sharing, and silent access handoff. In June 2026 Token extended TokenCore with a 'hard gate' architecture that requires biometric human approval before AI agents execute high-consequence actions, addressing emerging agentic AI risk.

Token makes money through enterprise hardware sales plus an implied subscription and services layer; pricing is quote-based and not publicly disclosed. Go-to-market combines direct enterprise field sales, a self-serve e-commerce storefront for individual purchases, and a channel/technology partner program for distribution through major identity platforms. The company is privately held, has raised over $43 million cumulatively from Grand Oaks Capital (founded by Paychex's B. Thomas Golisano), and is led by CEO John Gunn and Chairman Kevin Surace.

Name

Token

Legal name

Token

Website

https://tokenring.com

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

51–100 employees

Short description

Token (TokenCore) sells FIDO2-compliant biometric authentication hardware — a ring, stick, and Node device — to enterprises in healthcare, financial services, aerospace & defense, and critical infrastructure, adding fingerprint-bound human verification above existing IAM, SSO, and PAM systems.

Ownership category

akta.pro rank

Product category

Biometric Authentication Hardware

NAICS

Security Systems Services (except Locksmiths) (561621), Current-Carrying Wiring Device Manufacturing (335931)

akta.pro industry

PRIMARYHDADALAJ

Verification & Risk Signals (Device Fingerprinting, Behavioral Biometrics)

Hardware, Technology & Telecom/Cybersecurity/Fraud, Bot & Abuse Prevention

SECONDARYBPAMAEAE

Authentication (MFA/Passwordless/Biometrics) Platforms

Business & Public Services/Web, Mobile & Digital Platforms/Digital Identity, Authentication & Access

Keywords

• Biometric authentication hardware
• Passwordless MFA platform
• Phishing-resistant authentication
• FIDO2 security devices
• Enterprise identity assurance

Headquarters

HQ city

Rochester

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Hardware or Manufacturing

Cost components

Technology or R&D, Personnel, Supply Chain, Marketing or Sales, Operations

Revenue model

1. Hardware Device Sales: Sale of biometric authentication hardware including the TokenCore Node (lanyard-friendly portable), Wearable (ring form factor), and Portable (biometric stick). Hardware is sold directly via enterprise sales and e-commerce.
2. Enterprise Software/Subscription: TokenCore platform likely includes software licensing or subscription components for enterprise deployment, management, and integration with existing IAM/SSO/PAM infrastructure.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels4 records

Core offering

Token designs and sells biometric multi-factor authentication hardware (Node, Wearable ring, and Portable biometric stick) built on FIDO2/WebAuthn/U2F standards. The TokenCore platform binds enterprise access to a live on-device fingerprint match combined with cryptographic proximity and domain verification, sitting above existing IAM, SSO, and PAM stacks to stop phishing, credential theft, relay attacks, and silent access handoffs.

Product overview

TokenCore is a unified biometric identity assurance platform that combines hardware authenticators with cryptographic authentication. The platform encompasses three hardware product lines: the Wearable (ring form factor), Portable (biometric stick), and Node (daily carry device with rear fingerprint sensor). All products integrate with existing IAM, SSO, and PAM infrastructure using FIDO2/WebAuthn standards, adding biometric human verification at the moment of access to prevent phishing and credential theft.

Differentiator

Problem solved

Functional benefit

Brands

• TokenCore: Biometric identity assurance platform that verifies user identity through biometrics and cryptographic authentication rather than traditional credentials.
• Token Ring

Products and services

• TokenCore Node A lanyard-friendly daily-carry biometric authenticator with a rear fingerprint sensor for fast, deliberate verification. FIDO2/WebAuthn and U2F compliant, with BLE 5.3, a 508 DPI fingerprint sensor, and IP65-rated durability, intended for high-security enterprise users.
• TokenCore Wearable A ring-form-factor biometric wearable that stays with the user throughout the workday, supporting frictionless biometric login with proximity-aware access over NFC and Bluetooth. FIDO2/WebAuthn and U2F compliant, with BLE 5.3 plus NFC, a 508 DPI fingerprint sensor, and IP67-rated durability.
• TokenCore Portable A wireless biometric stick form factor designed for workstation-first and mobile admin workflows, combining hardware-key functionality with biometric assurance. FIDO2/WebAuthn and U2F compliant, with BLE 5.3 plus NFC, a 508 DPI fingerprint sensor, IP65 rating, and optional USB-C connectivity.

Quantifiable outcome

• Tycoon 2FA phishing kit used in 96,000 successful breaches, demonstrating scale of MFA vulnerability
• +1 more outcomes

Segments6 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration6 records

AI capability1 record

Feature6 records

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Yubico: Yubico manufactures the YubiKey, the dominant hardware FIDO/U2F security key. It is the closest direct competitor to Token's hardware authenticators, competing for the same enterprise MFA wallet with a strong, standards-based approach — though Yubico's keys are typically PIN-based rather than biometric.
• Beyond Identity: Beyond Identity offers a passwordless, device-bound biometric authentication platform for the enterprise. It competes head-to-head with TokenCore on the same phishing-resistant, biometric-bound value proposition, but delivers it as a software platform rather than dedicated hardware.
• HYPR: HYPR provides passwordless MFA using device-bound biometric credentials and FIDO2 standards, directly mirroring TokenCore's core value proposition. Both target the same enterprise security buyers looking to eliminate shared credentials and phishing risk.
• Transmit Security: Transmit Security offers a passwordless authentication and identity verification platform with biometric capabilities. It competes with TokenCore for enterprise customers seeking phishing-resistant, biometric-bound authentication as part of broader CIAM/IAM modernization.

Broad incumbents

• HID Global: HID Global is a large, established provider of physical and logical access control solutions, including hardware credentials and authentication devices. It overlaps with Token in the access-control hardware space but operates across a much broader portfolio including physical badges, readers, and identity management.
• Duo Security (Cisco): Duo Security, owned by Cisco, is a widely deployed enterprise MFA and zero-trust platform. While it primarily delivers software-based MFA with push notifications, it competes with Token for the same phishing-resistant upgrade spend within enterprise security budgets.
• Microsoft Entra ID / Authenticator: Microsoft Entra ID (formerly Azure AD) with Microsoft Authenticator provides MFA, passwordless, and passkey capabilities as part of the dominant enterprise identity stack. It competes with Token at the platform layer and often acts as the incumbent Token integrates alongside.
• Okta: Okta is a leading enterprise identity and access management platform offering MFA, SSO, and adaptive authentication. It is both a Token technology partner and a competitor, since Okta's own authenticator features overlap with TokenCore's passwordless/biometric value proposition.
• Google Titan Security Key: Google's Titan Security Key is a FIDO hardware authenticator that competes with Token's Node and Portable devices for budget-conscious phishing-resistant MFA deployments, particularly within Google Workspace-aligned environments.

Others

• CyberArk: CyberArk is a leader in privileged access management and a Token technology partner. While not a direct competitor (CyberArk controls what can be done; Token proves who is doing it), CyberArk's large enterprise footprint gives Token a complementary distribution channel into the same buyer.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/token-

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds8 records

Investors10 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Token