CISO Tribune

Vendor comparison · 2 companies

Token Security vs Veza

Token Security sells a platform that secures the identities supporting agentic AI deployments. Veza provides a unified Access Platform that brings together identities across systems for access search, actionable intelligence, automated access reviews and identity lifecycle management. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Token Security
  • Veza
Token Security vs Veza: Products, Customers and Funding Compared
Token SecurityToken Security sells a platform that secures the identities supporting agentic AI deployments.token.securityVezaVeza provides a unified Access Platform that brings together identities across systems for access search, actionable intelligence, automated access reviews and identity lifecycle management.veza.com
What it sells
  • MCP Server and AI Agent[1][2][8]A real-time natural language interface that lets security teams interact directly with their environment.
  • Access AI[4][7]Provides visibility into enterprise-wide access.
Categories
Headquarters
Not stated on its pagesLos Gatos, United States[2]
Founded
Not stated on its pages2020[2]
Ownership and funding
Not stated on its pagesOwned by ServiceNow since 2026[3][4][6]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • May 12, 2026Token Security announced its inclusion in the Rising in Cyber 2026 list of promising private cybersecurity startups.[11]
  • February 25, 2026Veza introduced Veza Access Agents, a set of AI agents for identity and access governance tasks, as an expansion of the Veza Platform.[5]
  • December 4, 2025Fortune reports ServiceNow's president saying the company's acquisition of Veza should give customers more confidence about deploying AI agents.[6]
  • December 2, 2025ServiceNow announced its intent to acquire Veza, an identity security company, as stated in a release dated December 2, 2025.[15]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetVeza states that its customers include organizations of all sizes. Veza addresses data teams that protect sensitive information and enforce least privilege across structured and unstructured data. Veza addresses platform owners of apps, data and infra who manage which users have access to their systems. Veza describes audit-ready access reports and demonstrable controls for compliance with industry regulations and internal cyber controls.
Last verified
November 9, 2026September 27, 2026

Where they overlap

  • Token Security and Veza are both filed under Non-human identity security.

Where they differ, field by field

  • Token Security's primary category is Non-human identity security; Veza's is Identity governance and administration.
  • Token Security is also filed under AI model and agent security and AI governance. Veza is also filed under Cloud identity entitlements (CIEM).
  • Token Security lists MCP Server and AI Agent. Veza lists Access AI.
  • Veza is headquartered in Los Gatos, United States.
  • Veza was founded in 2020.
  • Veza is owned by ServiceNow, since 2026.

What it sells: Token Security

What MCP Server and AI Agent does[1][2][8]
The Token MCP Server lets users ask questions from chat applications such as Claude, ChatGPT, and Gemini, or from AI agent-based applications such as Cursor. The Token AI agent is built into the Token Security NHI Security Platform and provides conversational AI capabilities from the Token UI. Token AI delivers organization-specific remediation guidance, including scripts, CLI commands, and fix recommendations.

Questions about Token Security and Veza

What do Token Security and Veza sell?
Token Security sells MCP Server and AI Agent. Veza sells Access AI.
Are Token Security and Veza in the same category?
They share Non-human identity security. Token Security's primary category is Non-human identity security and Veza's is Identity governance and administration.
Where are Token Security and Veza headquartered?
Veza is headquartered in Los Gatos, United States.
When were Token Security and Veza founded?
Veza was founded in 2020.
Who owns Token Security and Veza?
Veza is owned by ServiceNow, since 2026.
Who are Token Security and Veza sold to?
Veza states that its customers include organizations of all sizes.
What have Token Security and Veza announced recently?
May 12, 2026: Token Security announced its inclusion in the Rising in Cyber 2026 list of promising private cybersecurity startups. February 25, 2026: Veza introduced Veza Access Agents, a set of AI agents for identity and access governance tasks, as an expansion of the Veza Platform.

About Token Security

Token Security sells a platform that secures the identities supporting agentic AI deployments. Token Security presents the AI Agent Security Platform for how AI agents are created, governed, and operated. Token Security says AI agent and non-human identities span on-prem, cloud and AI platforms, outnumbering human identities by 50:1. Token Security says security and IAM teams fear breaking production systems when they lack context on the usage of each AI agent and identity. Token Security says a single compromised agent can trigger cascading damage across every connected system it touches.[1][3][4]

Token Security helps teams manage the full AI agent identity lifecycle. Token Security discovers AI agents and MCP servers automatically. Token Security provides continuous visibility into all AI agents across cloud environments, SaaS platforms, internal tools, and custom frameworks. Token Security's platform creates a dynamic NHI inventory and builds identity graphs that map entitlements, permissions, and dependencies. Token Security connects to a technology stack that includes IaaS, PaaS, SaaS, workloads, on-premises systems, and databases. Token correlates AI agents, humans, secrets, permissions, and data in a unified identity graph.[3][4]

Token Security understands AI agent intent to align access with what an AI agent is meant to do. Token applies intent-aware least-privilege to agents, so that agents have only the permissions needed for their purpose and only for the time required. Token Security's platform capabilities include continuously enforcing least privilege and just-in-time access, and remediating excessive permissions in real time. Token Security's platform capabilities include assigning ownership, rotating credentials, and retiring orphaned agents. Token Security monitors and audits AI agent actions to maintain compliance. Token Security's traceability capability logs every AI agent action across ecosystems for compliance and incident investigation.[3][4]

Token Security continuously evaluates agents against internal policies and external requirements. Token Security allows organizations to define and enforce policies for AI agent creation, intent, access, and operation. Token Security's lifecycle management enforces ownership and decommissions orphaned identities automatically. Token Security's security posture management identifies permissions drift, right-sizes access, and eliminates overexposure. Token automates key rotation and stale account removal, and ties identities to Infrastructure-as-Code (IaC). Token analyzes behavioral signals, privilege misuse, and credential misuse to surface threats targeting machine identities. Token Security monitors access attempts and NHI activities in real-time. Token Security automatically routes alerts, triggers remediation workflows, identifies IaC sources, and generates fixes using AI. Token Security triggers remediation workflows based on dynamic risk thresholds and contextual awareness.[4][5][6][7]

The Token MCP Server and AI Agent deliver a real-time natural language interface that lets security teams interact directly with their environment. The Token MCP Server lets users ask questions from chat applications such as Claude, ChatGPT, and Gemini, or from AI agent-based applications such as Cursor. The Token AI agent is built into the Token Security NHI Security Platform and provides conversational AI capabilities from the Token UI. Token AI translates plain-language queries into Token platform-specific operations, such as querying the inventory, assessing risks, understanding the Identity blast radius, and generating qualified insights. Token AI delivers organization-specific remediation guidance, including scripts, CLI commands, and fix recommendations. Token adheres to the open MCP standard for integration with autonomous AI agents in tools like ChatGPT, Claude, and Cursor.[1][8]

Token Security is built for organizations that need more than discovery. Token Security provides the identity lifecycle and intent-based access management. Token Security has offices in Tel Aviv and New York.[1][3][7][9][10]

Token Security on the record

Sources

Token Security full record

  1. [1]token.securityToken Security · token.security · undated page, accessed October 7, 2026 · Tier A
  2. [2]AI Agent & Non-Human Identity Security Platform | Token SecurityToken Security · undated page, accessed October 31, 2026 · Tier A
  3. [3]NHI Discovery & Visibility | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]Identity Security Platform for Cloud and AI EnvironmentsToken Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]NHI Lifecycle Management | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]NHI Threat Detection & Response | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]NHI Automation & Remediation | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]MCP Server and AI Agent | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]About Token Security | Identity Security for AI Agents & Non-Human Identities (NHIs)Token Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Careers at Token Security | Join the Future of Identity & AI SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Token Security Named to Rising in Cyber 2026 List of Top Cybersecurity StartupsToken Security · published May 12, 2026 · Tier A

Veza full record

  1. [1]veza.comVeza · veza.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Veza strategic announcement servicenow capitaloneVeza · veza.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Veza servicenow the enterprise agent identity control planeVeza · veza.com · published March 2, 2026 · Tier A
  4. [4]Veza - The Identity Security PlatformVeza · undated page, accessed October 30, 2026 · Tier A
  5. [5]Veza Introduces Native Access Agents to Secure the Modern AI-Driven Enterprise with Enterprise Agent Identity Control PlaneBusiness Wire · published February 25, 2026 · Tier A
  6. [6]ServiceNow's purchase of identity management platform Veza explainedFortune · published December 4, 2025 · Tier B
  7. [7]Veza - The Identity Security PlatformVeza · undated page, accessed November 10, 2026 · Tier A
  8. [8]Demo: Veza for SaaS access security & governance - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  9. [9]Solution Brief - Veza for Azure - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  10. [10]Demo - Veza for data lake security - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  11. [11]Breaking down Veza, The Authorization Platform for Data, in 4 minutes - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  12. [12]Case Study: How Las Vegas secures data in a hybrid, multi-cloud environment - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  13. [13]Video - Google Ventures | Veza - why authorization matters, why now - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  14. [14]Trust and Security - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  15. [15]ServiceNow to expand Security portfolio with acquisition of Veza’s leadingAI-native identity security platform - VezaVeza · published December 2, 2025 · Tier A

Spot a factual error? Request a correction.