Very Good Security
Very Good Security (VGS) provides payment tokenization and a Card Management Platform — including Network Tokens, Account Updater, 3DS, Vault, and PCI compliance — via a single API for merchants, fintechs, and enterprises, with growing infrastructure for AI-agent payments.
- Company typePrivate
- Founded-
- HeadquartersSouth San Francisco, United States
- Headcount—
- GTM typeB2B
- OfferingSoftware
What Very Good Security does
Very Good Security (VGS) is a payment infrastructure company that provides data tokenization and a Card Management Platform (CMP) for merchants, fintechs, and payment-adjacent businesses. Its core product, the CMP, unifies Network Tokens, Account Updater, Card Attributes, 3DS, Account Validation, Wallet Payments, and Tokenized Account Numbers behind a single API, backed by an independent Vault and PCI Compliance Solutions. Underlying technology includes direct integrations to card networks, merchant-specific network tokens that reduce per-PSP token fees, and a vault architecture that allows merchants to reduce PCI DSS compliance scope by eliminating raw cardholder data from their systems. As of the input data, VGS holds 7 billion tokens globally and processes approximately 45 billion payment interactions annually (over 3.5 billion per month), with adoption spanning Fortune 500 enterprises (Robinhood, Albertsons, MoonPay, Careem, Rappi, Sprout Social) and mid-market and startup customers.
VGS operates a usage-based revenue model charging for API and platform usage across tokenization, Network Tokens, Account Updater, 3DS, Account Validation, and Vault services, supplemented by recurring PCI compliance and security service revenue and a new usage-based stream from its Agentic Commerce offering. Pricing is not publicly disclosed; customers engage via a self-serve developer sandbox or direct enterprise sales for custom contracts. The go-to-market blends product-led developer adoption (sandbox, docs portal, sandbox environment) with enterprise field sales and a channel ecosystem spanning card networks, PSPs, cloud providers (notably AWS Financial Services Competency), fraud and risk vendors, services & consulting partners, pay-by-bank partners, and Qualified Security Assessors who recommend VGS during PCI audits. The company's segmentation is vertical-based across 10 industries including eCommerce, delivery & marketplaces, restaurants, gaming, crypto, financial institutions, agentic commerce, OTA & insurers, merchant enablers, and earned wage access.
The company is privately held by Very Good Security, Inc., a California corporation headquartered at 207 Powell Street, Suite 200, San Francisco, and is backed by strategic and financial investors including Visa, Andreessen Horowitz, Nyca Partners, Goldman Sachs, and Vertex Ventures. In 2025 VGS expanded into agentic commerce with the Agentic Commerce Hub and AI Data Firewall, was recognized by CNBC and Statista among the World's Top Fintech Companies, and attained AWS Financial Services Competency status — moves that position it as infrastructure for autonomous AI-agent transactions alongside its traditional payment tokenization franchise.
Very Good Security firmographics
Firmographics- Name
- Very Good Security
- Legal name
- VERY GOOD SECURITY, Inc.
- Website
- https://vgs.io
- Company type
- Private
- Operating status
- Operating
- Short description
- Very Good Security (VGS) provides payment tokenization and a Card Management Platform — including Network Tokens, Account Updater, 3DS, Vault, and PCI compliance — via a single API for merchants, fintechs, and enterprises, with growing infrastructure for AI-agent payments.
- Ownership category
- akta.pro rank
Very Good Security industry classification
Industry- Product category
- Payment Tokenization Infrastructure
- NAICS
- Financial Transactions Processing, Reserve, and Clearinghouse Activities (522320), Financial Transactions Processing, Reserve, and Clearinghouse Activities (52232)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Tokenization & Secure Payment Vaults (Card-on-File) (FSAMACAC)
- akta.pro secondary industries
- Tokenization, Network Vaults & Credential Management (FSAGABAF), Key Management, Encryption & Secrets Management (KMS/HSM/Vault) (HDABAHAG), Virtual Prepaid & Single-Use / Tokenized Cards (FSAMANAJ), Digital Asset Custody & Key Management (MPC, HSM, Wallet Infra) (FSAGAMAB)
Keywords
Where Very Good Security is headquartered
LocationHeadquarters
- HQ city
- South San Francisco
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Very Good Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Operations, Marketing or Sales
Revenue model
- API/Platform Usage Fees: VGS charges for API calls and platform usage across its Card Management Platform services including Network Tokens, Account Updater, Card Attributes, 3DS, Account Validation, and Vault. The pay-once model for network tokens (vs. per-PSP fees) suggests a per-transaction or volume-based pricing structure aligned with payment flows.
- PCI Compliance / Security Services: Revenue derived from PCI compliance solutions including tokenization services, audit support, and assessment that help businesses reduce their PCI DSS scope by eliminating raw cardholder data from their systems.
- Agentic Commerce Infrastructure: Emerging revenue stream from providing payment infrastructure for AI agent and agentic commerce platforms, enabling secure transactions between autonomous agents, consumers, and merchants.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Usage-based | Monthly | API-based platform with usage-driven pricing — no public tiers disclosed |
Go-to-market motion4 records
Distribution channels4 records
Marketing channels10 records
Very Good Security product offering
Product offeringCore offering
Very Good Security (VGS) operates a payment tokenization infrastructure platform that tokenizes, stores, and manages sensitive payment data (PANs, card credentials, PII) via secure vault infrastructure, replacing raw data with tokens usable across payment processors without re-exposure. Its Card Management Platform unifies Network Tokens, Account Updater, 3DS, Card Attributes, and Account Validation behind a single API, with the Vault as an independent secure data store and PCI compliance services that descope merchant environments from PCI DSS scope.
Product overview
Very Good Security (VGS) is a payment infrastructure platform specializing in payment tokenization. The offering consists of a Card Management Platform (CMP) as the core unified product with multiple integrated modules accessible via single API: Network Tokens, Account Updater, Card Attributes, 3DS, Account Validation, Wallet Payments, and Tokenized Account Numbers. Supporting the CMP is the Vault (independent secure data vault) and PCI Compliance Solutions. VGS has expanded into AI/agentic commerce with the Agentic Commerce Hub and AI Data Firewall for enabling autonomous AI agent payments. The platform serves industries including eCommerce, financial institutions, crypto, gaming, restaurants, delivery & marketplaces, and agentic commerce platforms.
Differentiator
Problem solved
Functional benefit
Products and services
- Card Management Platform (CMP)
- Vault
- Network Tokens
- Account Updater
- Card Attributes / BIN Lookup
- Account Validation
- 3DS
- Wallet Payments
- Tokenized Account Numbers
- AI Data Firewall
- Agentic Commerce Hub
- Agentic Commerce Hub for Merchants
- PCI Compliance Solutions
Quantifiable outcome
- 7 billion tokens stored globally, 45 billion annual interactions
- +3 more outcomes
Companies that use Very Good Security
Customer profileNamed customers14 records
Segments10 records
Ideal customer profiles5 records
Very Good Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability3 records
Feature10 records
Very Good Security partnerships and signals
Strategic signalPartnerships
Eight partnerships are on record, tiered core and supporting.
- Amazon Web Services (AWS)coreVGS is an AWS Financial Services Competency Partner, integrated within the AWS cloud ecosystem to serve financial services customers. AWS is also listed as a customer logo on the VGS website.
- Card NetworkscoreVGS maintains direct integrations with card networks (Visa, Mastercard, etc.) for Network Token issuance and Account Updater services, enabling real-time card data updates and network-level token management.
- PSPs & ProcessorscoreVGS maintains an ecosystem of Payment Service Provider and processor integrations listed in its partner directory, enabling merchants to route tokenized payments across any number of processors.
- Qualified Security Assessors (QSAs)supportingQSA firms are listed in the VGS partner directory, recommending VGS tokenization to clients undergoing PCI DSS audits as a way to reduce compliance scope.
- Cloud PartnerssupportingCloud infrastructure partners listed in the VGS partner directory, supporting deployment and integration of VGS services within major cloud environments beyond AWS.
- Fraud & Risk Prevention ProviderssupportingFraud and risk prevention technology providers are listed in the VGS partner directory, enabling complementary security solutions alongside VGS tokenization.
- Services & Consulting PartnerssupportingProfessional services and consulting firms in the VGS partner directory that implement and deploy VGS solutions for enterprise clients.
- Pay by Bank PartnerssupportingPay by Bank and open banking partners listed in the directory, supporting VGS tokenized account number capabilities for bank transfer payments.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
Very Good Security competitors and assessment
Company assessmentBroad incumbents
- Adyen: Enterprise payments platform offering tokenization, Network Tokens, and account-updater functionality directly to merchants. Represents the bundled-incumbent threat to independent tokenization layers.
- Stripe: Global payments incumbent with growing native tokenization, Network Token access, and PCI descoping tooling (Stripe Vault, Stripe Issuing). Competes for the same enterprise buyer with deeper PSP bundling.
- AWS Payment Cryptography: AWS-managed service for encryption, key management, and PIN/transaction security in payments. Represents the cloud-incumbent alternative for enterprises already standardizing on AWS.
Direct peers
- Spreedly: Payment orchestration platform with a vault layer for card-on-file tokenization across multiple PSPs. Direct competitor on the multi-PSP tokenization and orchestration thesis.
- Marqeta: Card-issuing and payment-processing platform that operates tokenization infrastructure for consumer-facing programs (e.g., modern card issuers, fintech apps). Compares on issuing/tokenization mechanics.
- Basis Theory: Tokenization-as-a-service vault platform that lets businesses secure sensitive data (cards, PII, bank accounts) via a unified API. Closest direct competitor to VGS's Vault and Card Management Platform.
- Lithic: Modern card-issuing API with embedded vault/tokenization primitives for fintech card programs. Overlaps with VGS's Card Issuance use case and PAN management.
- Skyflow: Data privacy vault combining tokenization, encryption, and governance for PII, PHI, and payment data. Competes with VGS for tokenization vault buyers across fintech and enterprise.
- Plaid: Open-banking data network with Tokenized Account Numbers / Pay by Bank capabilities that overlap with VGS's Tokenized Account Numbers and open-banking tokenization use cases.
Emerging players
- Privy: Embedded wallet and key-management infrastructure for crypto/web3 applications; overlaps with VGS's crypto customer use cases (MoonPay-style on-ramp tokenization) from a blockchain-native angle.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Very Good Security social profiles
Digital presenceVery Good Security compliance and trust
Trust signalCompliance2 records
Very Good Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Very Good Security leadership team
Management profileNumber of profiles
Very Good Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Very Good Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Very Good Security
What does Very Good Security do?
Very Good Security (VGS) operates a payment tokenization infrastructure platform that tokenizes, stores, and manages sensitive payment data (PANs, card credentials, PII) via secure vault infrastructure, replacing raw data with tokens usable across payment processors without re-exposure. Its Card Management Platform unifies Network Tokens, Account Updater, 3DS, Card Attributes, and Account Validation behind a single API, with the Vault as an independent secure data store and PCI compliance services that descope merchant environments from PCI DSS scope.
Is Very Good Security a public or private company?
Very Good Security is a private company. It is classified as venture growth investor backed and is currently operating.
When was Very Good Security founded?
Very Good Security was founded in -1.
Where is Very Good Security based?
Very Good Security is headquartered in South San Francisco, United States, in the North America region.
How does Very Good Security make money?
Three revenue lines are on record. API/Platform Usage Fees are the primary driver. The others are PCI Compliance / Security Services and agentic Commerce Infrastructure.
Who are Very Good Security's main competitors?
Broad incumbents on record are Adyen, Stripe and AWS Payment Cryptography. Direct peers are Spreedly, Marqeta, Basis Theory, Lithic, Skyflow and Plaid. Privy is listed as an emerging player.
Does Very Good Security have an API?
Yes. VGS provides a comprehensive Card Management Platform (CMP) API that developers can use to integrate payment capabilities including Network Tokens, Account Updater, Card Attributes, Account Validation, 3DS, Agentic Commerce, and Vault functionality. Documentation is available at docs.verygoodsecurity.com. The platform offers developer resources including getting started guides, sandbox environment for testing (dashboard.verygoodsecurity.com/signup), API status monitoring, community support, and Help Center. SDKs/libraries available for Card Management, Network Tokens, Account Updater, Card Attributes, Account Validation, 3DS, and Agentic Commerce. Developer documentation is at docs.verygoodsecurity.com/cmp.
What industry is Very Good Security in?
Very Good Security's product category is Payment Tokenization Infrastructure. Its primary akta.pro industry code is FSAMACAC, Tokenization & Secure Payment Vaults (Card-on-File), with a secondary code of FSAGABAF, Tokenization, Network Vaults & Credential Management. Its NAICS code is 522320 and its SIC code is 7370.