Token
Token (TokenCore) is a Rochester, NY-based private company that sells biometric, device-bound FIDO2 MFA authenticators and AI-agent authorization gates, serving enterprise security teams in financial services, healthcare, aerospace & defense, and critical infrastructure.
- Company typePrivate
- Founded2014
- HeadquartersRochester, United States
- Headcount101–250
- GTM typeB2B
- OfferingHardware or Manufacturing
What Token does
Token, operating legally as Tokenize Inc. and branded as TokenCore since March 2026, is a Rochester, NY-based private company founded in 2014 that sells biometric, device-bound multi-factor authenticators. Its product line includes the TokenCore Node (launched at RSA Conference 2026 for air-gapped and classified environments), a wearable ring form factor, and the Portable BioStick. All devices are built on FIDO2/WebAuthn standards and rely on on-device fingerprint matching with no PIN fallback, designed to eliminate the credential-phishing and PIN-recovery attack vectors that compromise PIN-protected hardware keys. In June 2026 the company extended this authentication layer into the agentic-AI market with Token for AI Agent Gateways, a product that places biometric hard gates around high-consequence actions performed by enterprise AI agents.
The company sells into enterprise security organizations — primarily CISOs and identity-and-access-management teams in financial services, healthcare, aerospace & defense, critical infrastructure, and manufacturing — where compliance with HIPAA, PCI DSS, NIST 800-171, FIDO2, and SOC 2 Type II is required. The platform is integrated with Microsoft Entra (including official deployment guides for token-only passkey profiles), Google, Okta, Oracle, 1Password, OneLogin, CyberArk, and Salesforce, allowing it to slot into the IAM/SSO/PAM and CRM environments customers already operate.
Revenue is generated through a hybrid of one-time hardware purchases and auto-renewing software subscriptions billed quarterly or annually. Distribution combines direct enterprise field sales, an e-commerce storefront, and channel partners; the June 2026 Salesforce partnership adds a second-party go-to-market vehicle. The company employs 101-250 people and in 2026 added a CRO (ex-Andreessen Horowitz), a Head of Engineering with 300+ patents, a VP of Marketing, and a Head of Partnerships recruited from direct competitor Yubico, indicating an active scale-up of the commercial and engineering organization.
Token firmographics
Firmographics- Name
- Token
- Legal name
- Tokenize Inc.
- Website
- https://tokencore.com
- Company type
- Private
- Founded year
- 2014
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Token (TokenCore) is a Rochester, NY-based private company that sells biometric, device-bound FIDO2 MFA authenticators and AI-agent authorization gates, serving enterprise security teams in financial services, healthcare, aerospace & defense, and critical infrastructure.
- Ownership category
- akta.pro rank
Token industry classification
Industry- Product category
- Identity & Access Management
- NAICS
- Computer and Peripheral Equipment Manufacturing (33411), Computer Terminal and Other Computer Peripheral Equipment Manufacturing (334118), Security Systems Services (56162)
- SIC
- Computer Peripheral Equipment, Nec (3577)
- akta.pro primary industry
- Authentication (MFA/Passwordless/Biometrics) Platforms (BPAMAEAE)
- akta.pro secondary industries
- Card Readers & Authentication Tokens (Smart Card, NFC, OTP Keys) (HDACAFAK), Fraud Prevention & Identity Verification (IDV/KYC) (BPAMAEAI), Identity Verification & Proofing (IDV, KYC, Biometrics) (HDADAAAF)
Keywords
Where Token is headquartered
LocationHeadquarters
- HQ city
- Rochester
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Token business model
Business model- GTM type
- B2B
- Offering type
- Hardware or Manufacturing
- Cost components
- Supply Chain, Technology or R&D, Personnel, Marketing or Sales, Operations
Revenue model
- Hardware Products: One-time purchases of biometric security devices including TokenCore Node, Wearable (ring), and Portable (BioStick). Products are shipped to end users with hardware-bound credentials.
- Software Subscriptions: Automatically renewing subscription services on quarterly or annual terms. Subscriptions include software applications and services with auto-renewal unless cancelled.
- Enterprise Pre-Orders: Pre-Order products that will be produced for customers, with fee charged at time of placement. Actual shipping date depends on payment and manufacturing schedule.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Subscription-based software services with quarterly or annual billing |
| One time/ perpetual license | Pay-as-you-go | One-time hardware purchases for biometric authenticators |
| Other | Multi-year contract | Enterprise customer pricing through direct agreement |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels6 records
Token product offering
Product offeringCore offering
Token designs, manufactures, and sells biometric multi-factor authentication hardware devices (TokenCore Node, Wearable ring, and Portable BioStick) and supporting software services that prove both the credential and the authorized human via on-device fingerprint matching. The products are built on FIDO2/WebAuthn standards and integrate with enterprise IAM, SSO, and PAM stacks to deliver phishing-resistant, hardware-bound identity assurance for privileged users and high-consequence actions, including AI agent workflows.
Product overview
TokenCore is a biometric multi-factor authentication platform that provides hardware-bound identity assurance through three core hardware products: the TokenCore Node (compact daily-carry authenticator with rear fingerprint sensor), TokenCore Wearable (ring form factor with BLE/NFC), and TokenCore Portable/BioStick (wireless USB biometric key). The platform adds biometric assured identity to enterprise IAM, SSO, and PAM stacks without replacing existing infrastructure. Additional offerings include Token for AI Agent Gateways (hard gates for AI agent actions), the Token Console web application for fleet management, and the Token mobile app. All products enforce FIDO2/WebAuthn standards with on-device biometric verification, ensuring credentials remain bound to verified individuals rather than just devices.
Differentiator
Problem solved
Functional benefit
Products and services
- TokenCore Node Compact biometric authenticator with a rear fingerprint sensor, FIDO2/WebAuthn + U2F compliance, BLE 5.4, 508 DPI fingerprint sensor, and IP65-rated enclosure, designed for daily carry and air-gapped or classified environments. Authentication requires a live on-device fingerprint match with no PIN fallback.
- TokenCore Wearable (Ring) Ring form factor biometric authenticator that stays with the user throughout the workday, providing frictionless biometric login via BLE 5.4 and NFC, with an IP67-rated enclosure and proximity-aware access. Intended for users who want a wearable that increases secure-use consistency across the workday.
- TokenCore Portable (BioStick) Wireless biometric stick form factor with IP65 rating and optional USB-C connectivity, designed for workstation-first and mobile admin workflows where users need hardware-key plus biometric assurance. Pairs with Token software services for authentication and management.
- Token for AI Agent Gateways Software architecture that places Token biometric hard gates around high-consequence AI agent actions, requiring a live fingerprint from the authorized human before the action completes. Protects against hijacked and well-meaning rogue agents while letting automation continue.
Quantifiable outcome
- No fingerprint = No login - credential sharing eliminated
- +2 more outcomes
Companies that use Token
Customer profileNamed customers1 record
Segments8 records
Ideal customer profiles6 records
Token technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration8 records
AI capability2 records
Feature10 records
Token partnerships and signals
Strategic signalPartnerships
Eight partnerships are on record, tiered core.
- Keith RameecoreFormer Yubico VP of Global Partnerships and Alliances appointed as Head of Partnerships at Token to lead partner strategy as the company enters its next phase of enterprise growth.
- Microsoft EntracoreTokenCore integrates with Microsoft Entra ID for FIDO2 authentication. Token provides biometrically verified authenticator for privileged users and high-consequence access. Microsoft has accelerated enterprise passkey adoption and Token supports organizations building trusted passkey architecture.
- GooglecoreCompatible authentication service listed on Token's website integration page.
- OktacoreCompatible identity provider with TokenCore FIDO2 authentication support.
- OraclecoreCompatible authentication service with FIDO2/WebAuthn support.
- 1PasswordcorePassword manager integration for enterprise authentication workflows.
- OneLogincoreEnterprise identity management platform compatible with TokenCore.
- CyberArkcorePrivileged access management integration for high-assurance authentication.
Scale indicators2 records
Recent moves8 records
Expansion highlights6 records
Token competitors and assessment
Company assessmentDirect peers
- Yubico: Yubico manufactures the YubiKey, the dominant hardware security key for FIDO2/WebAuthn phishing-resistant MFA. Token explicitly benchmarks against Yubico, hired its former VP of Global Partnerships, and even publishes a Yubico comparison page, making it the closest direct peer in hardware-bound biometric and possession-based authenticators.
- HYPR: HYPR delivers passwordless and phishing-resistant MFA centered on FIDO2 decentralized authentication, often paired with biometrics. Like Token, it targets enterprise IAM/PAM extensions and emphasizes credential phishing elimination, making it a directly comparable passwordless/biometric MFA platform peer.
- Beyond Identity: Beyond Identity provides passwordless, device-bound, phishing-resistant MFA built on FIDO2. It overlaps directly with Token's value proposition of replacing credential possession with verified identity assurance for enterprise SSO and workforce authentication.
- Transmit Security: Transmit Security offers a unified identity and authentication platform spanning passwordless MFA, fraud detection, and identity verification. It competes for the same enterprise CISO budget as Token's biometric assured identity layer, especially in financial services.
- HID Global: HID Global provides hardware authentication tokens, smart cards, and credential readers used for strong enterprise MFA. Its OMNIKEY and ActivID lines overlap with Token's hardware-bound authenticator approach for high-assurance and government/defense buyers.
Broad incumbents
- RSA Security: RSA is a long-established identity and access management vendor (RSA ID Plus, SecurID tokens) covering MFA, IAM, and fraud detection. It is a broad incumbent in the same enterprise authentication category Token targets with hardware-bound biometrics.
- CyberArk: CyberArk is a leading privileged access management platform. It is both a Token technology integration partner (for high-assurance authentication of privileged users) and a broad incumbent whose PAM footprint overlaps with Token's "proves who is doing it" value proposition for admin actions.
- Okta: Okta is a leading identity platform (SSO, MFA, workforce and customer IAM). It is both a Token technology integration partner and a broad incumbent whose platform-native authenticator options and adaptive MFA overlap with Token's biometric assured identity offering.
Emerging players
- DigiCert: DigiCert is a digital trust provider with PKI and device-identity/certificate-based authentication products. Its managed PKI and smart-card credentialing compete in adjacent slots of the same high-assurance authentication market Token addresses with biometric-bound credentials.
- 1Password: 1Password is a consumer-and-enterprise password manager and extended access management vendor. It is both a Token technology integration partner and an adjacent emerging player in the broader identity security category where phishing-resistant MFA is becoming a competitive battleground.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks5 records
Key highlights7 records
Customer concentration
Token social profiles
Digital presenceToken compliance and trust
Trust signalCompliance5 records
Token financial estimates
Financial estimateRevenue estimate
Valuation estimate
Token leadership team
Management profileNumber of profiles
Profiles6 records
Token funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Token M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Token
What does Token do?
Token designs, manufactures, and sells biometric multi-factor authentication hardware devices (TokenCore Node, Wearable ring, and Portable BioStick) and supporting software services that prove both the credential and the authorized human via on-device fingerprint matching. The products are built on FIDO2/WebAuthn standards and integrate with enterprise IAM, SSO, and PAM stacks to deliver phishing-resistant, hardware-bound identity assurance for privileged users and high-consequence actions, including AI agent workflows.
Is Token a public or private company?
Token is a private company. It is classified as venture growth investor backed and is currently operating.
When was Token founded?
Token was founded in 2014. It employs 101 to 250 people.
Where is Token based?
Token is headquartered in Rochester, United States, in the North America region.
How does Token make money?
Three revenue lines are on record. Hardware Products are the primary driver. The others are software Subscriptions and enterprise Pre-Orders.
Who are Token's main competitors?
Direct peers on record are Yubico, HYPR, Beyond Identity, Transmit Security and HID Global. Broad incumbents are RSA Security, CyberArk and Okta. Emerging players are DigiCert and 1Password.
Does Token have an API?
No public API is recorded for Token.
What industry is Token in?
Token's product category is Identity & Access Management. Its primary akta.pro industry code is BPAMAEAE, Authentication (MFA/Passwordless/Biometrics) Platforms, with a secondary code of HDACAFAK, Card Readers & Authentication Tokens (Smart Card, NFC, OTP Keys). Its NAICS code is 33411 and its SIC code is 3577.