workload-identity
(2)
Defakto Security wants your machines to forget their passwords
A copied API key can outlive the job it was meant to do. Defakto replaces that lingering permission with short-lived workload identity, bringing an old security problem into the age of AI agents.
Token Security
Token Security is a New York- and Tel Aviv-based cybersecurity company that secures non-human identities (NHIs) - the service accounts, API tokens, workloads and, increasingly, autonomous AI agents that now vastly outnumber human users inside enterprises. Its agentless platform continuously discovers these machine identities across cloud, SaaS and AI environments, maps their ownership, permissions and access into a unified identity graph, and enforces least-privilege and lifecycle controls. Founded in 2023 by CEO Itamar Apelblat and CTO Ido Shlomo, the company has raised roughly $27M (Seed plus a $20M Series A led by Notable Capital) and counts customers such as GitLab, Bloomreach, HiBob, Dayforce and BetterHelp.