# Token Security

> Token Security is a New York- and Tel Aviv-based cybersecurity company that secures non-human identities (NHIs) - the service accounts, API tokens, workloads and, increasingly, autonomous AI agents that now vastly outnumber human users inside enterprises. Its agentless platform continuously discovers these machine identities across cloud, SaaS and AI environments, maps their ownership, permissions and access into a unified identity graph, and enforces least-privilege and lifecycle controls. Founded in 2023 by CEO Itamar Apelblat and CTO Ido Shlomo, the company has raised roughly $27M (Seed plus a $20M Series A led by Notable Capital) and counts customers such as GitLab, Bloomreach, HiBob, Dayforce and BetterHelp.

- **Founded:** 2023
- **Headquarters:** New York, United States (with R&D in Tel Aviv, Israel)
- **Founders:** Itamar Apelblat (Co-Founder & CEO), Ido Shlomo (Co-Founder & CTO)
- **Team size:** Approximately 53 employees (2026)
- **Products:** Non-Human Identity Security Platform, AI Agent & Agentic AI Security, AI Agent Identity Lifecycle Management, Token MCP Server & AI Agent, Enzo
- **Notable:** Raised $20M Series A led by Notable Capital in January 2025 (total funding ~$27M), Named to The Information's '50 Most Promising Startups of 2025', Finalist in the 2024 Cyber Defense Awards Top InfoSec Innovators

## Products & services

- **Non-Human Identity Security Platform** — An agentless platform that continuously discovers non-human identities (service accounts, API tokens, secrets, workloads) across cloud, SaaS and on-prem, correlates them into a unified identity graph with ownership and permissions, and enforces least-privilege, lifecycle and remediation controls.
- **AI Agent & Agentic AI Security** — Discovery, ownership attribution, access rightsizing, and intent-based controls for autonomous AI agents, copilots, custom GPTs and MCP servers - including shadow AI detection and multi-agent traceability.
- **AI Agent Identity Lifecycle Management** — Extends identity governance to autonomous AI with least-privilege enforcement and full lifecycle control from creation to decommissioning of AI agents.
- **Token MCP Server & AI Agent** — A real-time natural-language interface and built-in conversational AI agent that let security teams query and act on their identity environment from chat applications.
- **Enzo** — An AI-native application builder that lets security teams create identity-security apps and workflows using natural language, built on Token's live identity data.

## Achievements

- Raised $20M Series A led by Notable Capital in January 2025 (total funding ~$27M)
- Named to The Information's '50 Most Promising Startups of 2025'
- Finalist in the 2024 Cyber Defense Awards Top InfoSec Innovators
- Recognized on the 2026 MES Midmarket 100 List
- Reported triple-digit revenue growth in 2025
- Launched AI Agent Identity Lifecycle Management and intent-based AI agent security

## Latest updates

- **2026-06** — Launched Enzo, an AI-native application builder that lets teams create identity-security apps using natural language.
- **2026-03** — Introduced intent-based controls for AI agents, tying an agent's access to its intended purpose.
- **2026-01** — Reported triple-digit growth in 2025 as enterprises confront agentic AI security and compliance risk.
- **2025-01** — Closed a $20M Series A led by Notable Capital, bringing total funding to about $27M.
- **2024-05** — Emerged from stealth with $7M in seed funding, introducing a 'machine-first' era in identity security.

## Links

- Website: https://www.token.security/
- LinkedIn: https://www.linkedin.com/company/token-security/
- Twitter/X: https://x.com/TheTokenSec
- GitHub: https://github.com/tokensec
- YouTube: https://www.youtube.com/@TheTokenSecurity

---

Profile page: https://yespress.io/token-security
Published by YesPress — https://yespress.io
Last updated: 2026-07-17