Token makes biometric authentication hardware for organisations that cannot afford a breach, data loss or ransomware. Its devices replace passwords and phishable MFA with a fingerprint check tied to one enrolled person, so a stolen credential is useless without that person present.
The same idea now extends to AI. As agents start to move money and change systems, Token uses its hardware to make sure a named, physically present person stands behind the actions that matter.
At A Glance
| Vendor | Token |
|---|---|
| Category | Passwordless, phishing-resistant biometric MFA hardware |
| Identities covered | Workforce users, approvers of AI agent actions |
| Deployment | FIDO2/WebAuthn hardware authenticators working with existing SSO |
| Agentic AI | Token for Agents and Gateways (TAG) |
| Certifications | SOC 2, FIDO2 |
| Founded | 2014, Rochester, New York |
| Market classification | MFA & Passwordless; also Agentic AI Identity, Identity Governance & Administration |
What Token Does
Most identity attacks succeed because a password, a one-time code or a push approval can be stolen, phished or tricked out of a user. Token’s answer is identity assurance that depends on the person, not on a secret. Each authenticator is bound to a single enrolled user, matches the fingerprint on the device and checks physical presence over Bluetooth or NFC before it signs in. The hardware works with the organisation’s existing SSO from the first day, and the organisation keeps control of enrolment, authentication policy and recovery.
Products
TokenCore Node
Node is a compact biometric authenticator for organisations that need cryptographic processing to happen locally. It can be carried on a lanyard, wrist strap, key fob or phone holder and connects over Bluetooth 5.4.
TokenCore Wearable
The Wearable is a smart ring with a fingerprint sensor built in, suited to staff who need hands-free sign-in throughout the day. It supports Bluetooth 5.4 and NFC, and uses NFC to confirm that the wearer is close to the device being unlocked.
TokenCore Portable+
Portable+ is a USB-C security key with a capacitive fingerprint sensor, so only the registered user can use it even if it is lost or stolen. Its firmware can be upgraded in the field.
TokenCore Card
The Card puts a fingerprint sensor into a metal keycard for users who prefer the badge format. It supports Bluetooth 5.4, NFC and FIDO2/WebAuthn.
How It Works
| Component | What it does |
|---|---|
| Authenticators | Fingerprint matching happens on the device, and each device speaks FIDO2/WebAuthn to Windows, Mac, iOS and Android systems. |
| Secure element | Keys sit in an EAL5+ certified secure element. A successful fingerprint match is what allows the hardware-bound key to sign. |
| Firmware | The hardware updates over the air, with no device recall and no extra help desk work. |
| Identity provider link | Sign-in runs through the organisation’s existing SSO and identity providers, with each device enrolled to one verified person. |
| Management | Administrators use the Token Authenticator Console to assign hardware to users, set security options and handle provisioning and deprovisioning. |
Identities And Systems Covered
| Human users | Workforce sign-in with passwordless, phishing-resistant MFA bound to one person |
|---|---|
| AI agent actions | Escalated agent actions that need a human approval through TAG |
| Operating systems | Windows, Mac, iOS and Android, plus Red Hat Enterprise Linux |
| Applications | Salesforce, and SaaS apps reached through SSO such as Box, Slack, Workday and Zendesk |
Agentic AI Capabilities
Token For Agents And Gateways
TAG sits behind the customer’s AI gateway. The gateway decides whether to allow, block or escalate each agent action, and TAG handles the escalations by getting a fingerprint-verified approval on Token hardware. In Token’s example, “An AI agent can prepare the $250,000 transfer”, but the money moves only after the right person approves it. The hardware becomes “the deterministic human-in-the-loop”.
Approval Flow
- The gateway pauses a flagged action and calls TAG through the API or an MCP tool
- TAG sends the request to the approver named in policy, showing details from the organisation’s own systems rather than the agent’s summary
- The approver confirms with a fingerprint, and TAG checks the signature, the device attestation and that the signed action matches the request
- A signed record goes to the SIEM, and without a verified approval TAG fails closed
- Approvers sign in over OIDC/CIBA through Okta, Entra or Ping
Integrations
| Area | Integrations |
|---|---|
| Identity providers | Microsoft Entra, Okta, PingIdentity, Cisco Duo, Auth0, OneLogin, Google Workspace, AWS IAM Identity Center, JumpCloud, IBM Security Verify, ForgeRock |
| Privileged access | CyberArk, Delinea, Teleport |
| Password managers | 1Password, Bitwarden, Keeper |
| Remote access | Citrix, VMware Horizon, Zscaler ZCC, Check Point Remote Access VPN |
| Security and IT tools | Splunk, NinjaOne |
Company Background
| Founded | 2014 |
|---|---|
| Headquarters | Rochester, New York |
| Founders | Melanie Shapiro and Steve Shapiro |
| Leadership | Rob Osterwise (CTO) |
| Funding | A reported $53 million raised in total, including $30 million from Grand Oaks Capital as a $20M secured note and a $10M convertible note |
| Recognition | Award recipient in the Identity Access Management category of the 2026 Cybersecurity Excellence Awards |
| Compliance mapping | Products mapped to PCI DSS v4.0.1, NYDFS Part 500, CISA CPG 2.0, the HIPAA Security Rule and CMMC Phase 1 |
Note: This overview is compiled from Token’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.