Token Security

Token Security operates in the cybersecurity sector, specifically focusing on non-human identity (NHI) security. The company was established in 2023 by CEO Itamar Apelblat and CTO Ido Shlomo, both veterans of the Israeli Intelligence Corps Unit 8200. Their collective experience, with Apelblat on the defensive side and Shlomo on the offensive, provided them with a comprehensive understanding of identity-based threats, which form the foundation of the company.

The firm addresses the security risks associated with the proliferation of machine identities—such as API keys, service accounts, and cloud credentials—in modern IT environments. As companies increasingly adopt cloud and microservice architectures, the number of these non-human identities has grown exponentially, creating a significant attack surface that traditional, human-centric security solutions often overlook. Token Security's business model is centered on providing a software-as-a-service (SaaS) platform to enterprises, with clients including major corporations like HPE and Hibob. The company generates revenue through this platform, which is priced based on the number of non-human identities managed. Since its inception, the company has secured $27 million in funding through Seed and Series A rounds, with investors including Notable Capital, TLV Partners, and prominent executives from the cybersecurity industry.

The core of Token Security's offering is its machine-first identity security platform, which provides comprehensive discovery, visibility, and management of all non-human identities across an organization's entire technology stack, including cloud, SaaS, and on-premises systems. The platform integrates with a company's existing infrastructure, such as identity providers and source code repositories, to map all machine credentials and automatically identify their human owners and dependencies. This allows security teams to understand who is accessing what, evaluate and prioritize risks, and remediate vulnerabilities without disrupting developer workflows or business operations. An AI-based engine provides critical insights into identity ownership, usage patterns, and potential malicious behavior, enabling teams to manage lifecycles, enforce least privilege, and strengthen their overall security posture from a centralized dashboard.

Keywords: non-human identity security, machine identity management, cloud security, API security, service account security, cybersecurity, identity and access management (IAM), threat detection, vulnerability management, risk remediation, DevSecOps, cloud-native security, identity governance, access control, security automation, secrets management, cyber risk, compliance, infrastructure security, application security