CISO Tribune

Vendor comparison · 2 companies

Secret Double Octopus vs Token

Secret Double Octopus uses patented ZeroPassword™ technology and is FIDO Alliance certified. Token sells four products in more than a dozen form factors that deliver identity assurance, and every Token product binds access to the verified individual using biometric technology and cryptographic verification. CISO Tribune files both under Passwordless authentication and authenticators and Workforce IAM and SSO. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Secret Double Octopus
  • Token
Secret Double Octopus vs Token: Products, Customers and Funding Compared
Secret Double OctopusSecret Double Octopus uses patented ZeroPassword™ technology and is FIDO Alliance certified.doubleoctopus.comTokenToken sells four products in more than a dozen form factors that deliver identity assurance, and every Token product binds access to the verified individual using biometric technology and cryptographic verification.tokencore.com
What it sells
  • Octopus Authentication Platform[4]Octopus Authentication Platform delivers phishing-resistant, passwordless MFA across legacy, on-prem, cloud, and air-gapped systems.
  • Octopus Starter[8]Octopus Starter is traditional MFA with passwords that is ready to go passwordless.
  • Octopus Pro[4][8][13]Octopus Pro adds desktop MFA, including phishing-resistant FIDO2 key authentication to Windows, MAC, and corporate applications.
  • Octopus Enterprise[8]Octopus Enterprise is full passwordless MFA for an entire workforce.
  • Octopus Cloud[8]Octopus Cloud is SOC2 certified and delivered as a service.
  • Octopus SSO Authentication Platform[10]The Octopus SSO Authentication Platform is built around a patented Invisible Secret Rotation technology.
  • Workforce passwordless MFA[4][9]Workforce passwordless MFA is multi-factor authentication that lets employees log in to every corporate resource without a password.
  • TokenCore™ Node[4][5][9]TokenCore™ Node is a Bluetooth-proximity biometric authenticator.
  • TokenCore™ Wearable[6][9]TokenCore™ Wearable is a biometric, passwordless authenticator that is FIDO 2 certified.
  • TokenCore™ Portable+[7][9]TokenCore™ Portable+ authenticates over three connection paths: Bluetooth, NFC, and USB.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Privately held[6][8]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • March 26, 2026Token announced the TokenCore Node, a compact biometric authenticator for air-gapped and locally processed environments, at RSA Conference 2026.[13]
  • March 4, 2026Token renamed its technology from Token Ring to TokenCore and launched the TokenCore.com website.[12]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[6]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Secret Double Octopus names international aerospace and defense manufacturers as users of passwordless MFA. Secret Double Octopus addresses organizations with M&A identity silos and legacy financial systems. Octopus Cloud, delivered as a service, offers companies of all sizes the full suite of Octopus Enterprise, Pro, and Starter.Environments it names include financial services, healthcare, aerospace and defense, and critical infrastructure. The company describes administrators responding to incidents at home, engineers working remotely on sensitive systems, clinicians moving between workstations, and executives travelling across networks. Its hardware is added to existing SSO where identity requires higher assurance. TokenCore™ hardware is sold directly from a store for smaller orders and through volume pricing for larger deployments.
Last verified
November 9, 2026November 5, 2026

Where they overlap

  • Passwordless authentication and authenticators is the primary category of both Secret Double Octopus and Token; both are also filed under Workforce IAM and SSO.

Where they differ, field by field

  • Secret Double Octopus lists Octopus Authentication Platform, Octopus Starter, Octopus Pro, Octopus Enterprise, Octopus Cloud and 2 more. Token lists TokenCore™ Node, TokenCore™ Wearable and TokenCore™ Portable+.
  • Secret Double Octopus is privately held.

How they differ

CISO Tribune files both Secret Double Octopus and Token under Passwordless authentication and authenticators, with Workforce IAM and SSO as a second category for each. Secret Double Octopus sells software tiers called Octopus Starter, Octopus Pro, Octopus Enterprise and Octopus Cloud, plus the Octopus SSO Authentication Platform. Octopus is available as a self-managed virtual appliance for on-premises and private cloud environments, and Octopus Cloud is SOC2 certified and delivered as a service. Token sells hardware authenticators: TokenCore™ Node, TokenCore™ Wearable, TokenCore™ Portable+ and a Portable model. The Wearable is worn on the finger as a ring, and the Portable+ authenticates over Bluetooth, NFC, and USB.

Token's devices verify a fingerprint on the device inside a secure element. Secret Double Octopus says users authenticate on their desktop with methods like FIDO, smartcard, or Octopus mobile push with proximity sensing.

Secret Double Octopus is privately held. Token names financial services, healthcare, aerospace and defense, and critical infrastructure as environments it addresses. On March 4, 2026, Token renamed its technology from Token Ring to TokenCore. On March 26, 2026, Token announced the TokenCore Node at RSA Conference 2026, aimed at air-gapped and locally processed environments.

What it sells: Secret Double Octopus

What Octopus Authentication Platform does[4]
Octopus works with modern FIDO2 and SAML apps, and with applications, services, and infrastructure that requires a password. Octopus is available as a self-managed virtual appliance for on-premises and private cloud environments.
What Octopus Starter does[8]
Octopus Starter covers cloud/web applications, VPN, and VDI. Octopus Cloud carries the full suite of Octopus Enterprise, Pro, and Starter.
What Octopus Pro does[4][8][13]
Octopus Pro enables MFA with passwords while preparing a business to go passwordless MFA. Octopus Cloud carries the full suite of Octopus Enterprise, Pro, and Starter.
What Octopus Enterprise does[8]
Octopus Cloud carries the full suite of Octopus Enterprise, Pro, and Starter. Octopus Cloud is SOC2 certified and delivered as a service.
What Octopus Cloud does[8]
Octopus Cloud carries the full suite of Octopus Enterprise, Pro, and Starter for companies of all sizes. Octopus is available as a self-managed virtual appliance for on-premises and private cloud environments.
What Octopus SSO Authentication Platform does[10]
An Octopus administrator adds SaaS and password-based apps to the Octopus SSO-managed applications console. Users authenticate to Octopus on their desktop using strong passwordless methods like FIDO, smartcard, or Octopus mobile push with proximity sensing.

What it sells: Token

What TokenCore™ Node does[4][5][9]
TokenCore™ Node confirms presence by Bluetooth proximity, verifies a fingerprint on the device, and signs a domain-bound credential inside an EAL5+ secure element. TokenCore™ Node carries FIDO2 and WebAuthn certification and SOC 2 certification. Battery life for TokenCore™ Node runs 6 to 9 days on a charge, with a 120-minute full charge and a 5-minute recovery charge.
What TokenCore™ Wearable does[6][9]
TokenCore™ Wearable is worn on the finger. TokenCore™ Wearable is supplied as a ring with a proprietary charging cable. The wearable ring's battery life runs five to seven days, and a full charge takes 90 minutes. Credentials on the wearable ring live in an EAL5+ certified secure element.
What TokenCore™ Portable+ does[7][9]
TokenCore™ Portable+ is a biometric, passwordless authenticator that is FIDO2 certified and built for individuals and enterprises. The Portable model connects over USB, while the Portable+ adds Bluetooth and NFC for wireless authentication across mobile and desktop environments. On the security key, fingerprint verification happens on the device, inside a certified secure element.

Questions about Secret Double Octopus and Token

What do Secret Double Octopus and Token sell?
Secret Double Octopus sells Octopus Authentication Platform, Octopus Starter, Octopus Pro, Octopus Enterprise, Octopus Cloud and 2 more. Token sells TokenCore™ Node, TokenCore™ Wearable and TokenCore™ Portable+.
Are Secret Double Octopus and Token in the same category?
Yes. Passwordless authentication and authenticators is the primary category of both on CISO Tribune.
Who owns Secret Double Octopus and Token?
Secret Double Octopus is privately held.
Who are Secret Double Octopus and Token sold to?
Secret Double Octopus names international aerospace and defense manufacturers as users of passwordless MFA. Environments it names include financial services, healthcare, aerospace and defense, and critical infrastructure.
What have Secret Double Octopus and Token announced recently?
March 26, 2026: Token announced the TokenCore Node, a compact biometric authenticator for air-gapped and locally processed environments, at RSA Conference 2026.

About Secret Double Octopus

Secret Double Octopus uses patented ZeroPassword™ technology and is FIDO Alliance certified. For non-SAML apps, Octopus replaces passwords on the backend with ephemeral tokens, and directories and legacy apps stay intact. Secret Double Octopus describes eliminating user-managed passwords across Windows & macOS, legacy and on-prem applications, remote access, shared accounts, and hybrid identity environments.[3][4]

Secret Double Octopus provides passwordless MFA for web single sign-on apps, such as SAML and OIDC. Secret Double Octopus provides desktop MFA at Windows login, online or offline. Secret Double Octopus provides phishing-resistant MFA for RADIUS and SSL VPN remote access. Secret Double Octopus provides passwordless SSH access to Linux and Unix servers. Secret Double Octopus covers apps with local or database user stores outside Active Directory. Secret Double Octopus provides named accountability on shared workstations and admin accounts. SDO supports admins in their full lifecycle and protects shared accounts, server accounts, advanced endpoint use cases, and passwordless MFA desktop login.[4][7]

Octopus Starter is traditional MFA with passwords that is ready to go passwordless, with covered use cases that include cloud/web applications, VPN, and VDI. Octopus Pro adds desktop MFA, including phishing-resistant FIDO2 key authentication to Windows, MAC, and corporate applications. Octopus Enterprise is full passwordless MFA for an entire workforce. Octopus Cloud is SOC2 certified and delivered as a service. Octopus Cloud carries the full suite of Octopus Enterprise, Pro, and Starter for companies of all sizes. Octopus is available as a self-managed virtual appliance for on-premises and private cloud environments. Octopus works with modern FIDO2 and SAML apps, and with applications, services, and infrastructure that requires a password. Octopus protects corporate apps, including VPN, privileged accesses, and custom business services.[1][4]

The Octopus SSO Authentication Platform is built around a patented Invisible Secret Rotation technology. An Octopus administrator adds SaaS and password-based apps to the Octopus SSO-managed applications console. Users authenticate to Octopus on their desktop using strong passwordless methods like FIDO, smartcard, or Octopus mobile push with proximity sensing. Octopus monitors the user session for policy violations to force re-authentication, steps up MFA, or for lockdown when the user starts an Octopus-managed app. Workforce passwordless MFA is multi-factor authentication that lets employees log in to every corporate resource without a password.[4][9][10]

Octopus supports all remote access protocols, including LDAP, Radius, SAML, and Kerberos. Octopus is built on cryptographic protocols that resist impersonation, push bombing, and man-in-the-middle attacks against web and corporate apps. Desktop-to-Apps Pinning stops advanced MITM phishing attacks without adding hardware smartcards or FIDO2 keys or changing the identity infrastructure. SDO includes CTAP2 and certified Server to protect Mac, Windows, and Linux desktops, web apps, and corporate apps. Octopus adaptive MFA capabilities include verified push, geolocation, and anomalous retry lockout. SDO replaces passwords on the backend of legacy and directory-based systems with machine-generated ephemeral tokens, so there is no static credential to phish.[5][11]

Octopus synchronizes with directory groups for automated MFA lifecycle management for dynamic student populations. Octopus gives remote and on-campus users a single passwordless MFA workflow for university-issued laptops and shared lab terminals. Octopus reaches beyond Windows PCs with Azure directories to protect Macs and Linux machines joined to on-prem AD or cloud directories. Octopus provides audit trails that document local and remote access to workstations, web, and core on-prem legacy apps. Secret Double Octopus describes secure access to every resource, including M&A identity silos and legacy financial systems, without changing apps or directory infrastructures. Octopus adds passwordless MFA access to shared accounts with an audit trail of which worker did what and when. Octopus passwordless MFA works across industrial infrastructures from corporate offices through production plants. International aerospace and defense manufacturers use passwordless MFA to protect sensitive data.[1][2][4][5][9][10][12][13][14][15][16]

Secret Double Octopus on the record

Sources

Secret Double Octopus full record

  1. [1]Standard chartered bank invests in secret double octopusSecret Double Octopus · doubleoctopus.com · undated page, accessed October 7, 2026 · Tier A
  2. [2]Press releasesSecret Double Octopus · doubleoctopus.com · undated page, accessed October 7, 2026 · Tier A
  3. [3]doubleoctopus.comSecret Double Octopus · doubleoctopus.com · undated page, accessed October 7, 2026 · Tier A
  4. [4]Leaders in Workforce Passwordless MFA - Secret Double OctopusSecret Double Octopus · undated page, accessed October 31, 2026 · Tier A
  5. [5]VPN MFA for the Remote Workforce | Secret Double OctopusSecret Double Octopus · undated page, accessed October 31, 2026 · Tier A
  6. [6]Secret Double Octopus Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 31, 2026 · Tier C
  7. [7]Desktop MFA Solutions | Secret Double OctopusSecret Double Octopus · undated page, accessed November 10, 2026 · Tier A
  8. [8]Passwordless Authentication Platform | Secret Double OctopusSecret Double Octopus · undated page, accessed November 10, 2026 · Tier A
  9. [9]Passwordless MFA Solution For WorkforcesSecret Double Octopus · undated page, accessed November 10, 2026 · Tier A
  10. [10]Single Sign-onSecret Double Octopus · undated page, accessed November 10, 2026 · Tier A
  11. [11]Phishing Resistant MFA - Secret Double OctopusSecret Double Octopus · undated page, accessed November 10, 2026 · Tier A
  12. [12]Secure Access for Higher Education - Secret Double OctopusSecret Double Octopus · undated page, accessed November 10, 2026 · Tier A
  13. [13]Highest Assurance MFA for Financial Services SecuritySecret Double Octopus · undated page, accessed November 10, 2026 · Tier A
  14. [14]Law Firms Require Better Authentication - Secret Double OctopusSecret Double Octopus · undated page, accessed November 10, 2026 · Tier A
  15. [15]Defense & Aerospace - Secret Double OctopusSecret Double Octopus · undated page, accessed November 10, 2026 · Tier A
  16. [16]Remote Access for Critical InfrastructureSecret Double Octopus · undated page, accessed November 10, 2026 · Tier A

Token full record

  1. [1]tokencore.comToken · tokencore.com · undated page, accessed November 5, 2026 · Tier A
  2. [2]Biometric Authentication Products | TokenCore™Token · undated page, accessed November 10, 2026 · Tier A
  3. [3]Token | About | Leaders in Identity Assurance and Biometric TechnologyToken · undated page, accessed November 10, 2026 · Tier A
  4. [4]Product Briefs | TokenToken · undated page, accessed November 10, 2026 · Tier A
  5. [5]TokenCore™ Node Product Brief | Biometric AuthenticatorToken · undated page, accessed November 10, 2026 · Tier A
  6. [6]Buy FIDO2 Biometric Ring | TokenCore™ Wearable – Token StoreToken · undated page, accessed November 10, 2026 · Tier A
  7. [7]Buy FIDO2 Security Key: TokenCore™ Portable+ | Passwordless MFA – Token StoreToken · undated page, accessed November 10, 2026 · Tier A
  8. [8]Token: Biometric Authentication for Enterprise SecurityToken · undated page, accessed November 10, 2026 · Tier A
  9. [9]Volume Pricing for TokenCore™ Security Keys | TokenToken · undated page, accessed November 10, 2026 · Tier A
  10. [10]Compliancy Standards | TokenCoreToken · undated page, accessed November 10, 2026 · Tier A
  11. [11]TokenCore™ Wearable Product Brief | Biometric MFA RingToken · undated page, accessed November 10, 2026 · Tier A
  12. [12]Token Evolves into TokenCore, Expanding Its Vision for Cryptographic Identity Assurance at TokenCore.comBusiness Wire · published March 4, 2026 · Tier A
  13. [13]Token Launches TokenCore Node: Setting a New Standard for Biometric Identity AssuranceBusiness Wire · published March 26, 2026 · Tier A

Spot a factual error? Request a correction.