CISO Tribune

Vendor comparison · 2 companies

Token Security vs Zenity

Token Security sells a platform that secures the identities supporting agentic AI deployments. Zenity sells an AI agent security platform built to govern how agents behave, not just what they say or generate. CISO Tribune files both under AI model and agent security and AI governance. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Token Security
  • Zenity
Token Security vs Zenity: Products, Customers and Funding Compared
Token SecurityToken Security sells a platform that secures the identities supporting agentic AI deployments.token.securityZenityZenity sells an AI agent security platform built to govern how agents behave, not just what they say or generate.zenity.io
What it sells
  • MCP Server and AI Agent[1][2][8]A real-time natural language interface that lets security teams interact directly with their environment.
  • AI Observability[5]Builds a live inventory of every agent across an organization's environment and tracks the data those agents access.
  • AI Security Posture Management (AISPM)[7]Evaluates configuration, permissions, and integrations before an agent goes live.
  • Boundaries[4][6][8]Evaluates every agent action in real time against an organization's rules and decides to let it through, block it, or shut the agent down.
  • AI Detection and Response (AIDR)[9]AIDR reads the full sequence of an agent's activity, detecting threats mapped to the OWASP LLM and MITRE ATLAS frameworks.
  • Zenity Security Assessment Hub[13]A set of 10 free, open-source tools built by Zenity Labs to help security teams identify and understand immediate risks.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pages2021[2]
Ownership and funding
Not stated on its pagesPrivately held[3][6][17]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • May 12, 2026Token Security announced its inclusion in the Rising in Cyber 2026 list of promising private cybersecurity startups.[11]
  • September 23, 2026Zenity was named a Market Shaper in Gartner's inaugural Emerging Market Quadrant for AI Application Security.[15]
  • August 3, 2026Zenity announced a $125 million Series C round led by Norwest.[14]
  • June 17, 2026Zenity and Carahsoft announced a partnership under which Carahsoft serves as Zenity's Public Sector distributor.[17]
  • March 17, 2026Zenity announced general availability of runtime security controls for AI agents built on Microsoft Foundry.[16]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetZenity describes a global financial services firm and a global asset manager as organizations that write policy rules for agents. Zenity covers agents embedded in SaaS tools, home-grown agentic platforms in the cloud, and end-user devices. Zenity gives security and platform teams a single place to surface, enforce, and protect MCP usage.
Last verified
November 9, 2026November 9, 2026

Where they overlap

  • Token Security and Zenity are both filed under AI model and agent security and AI governance.

Where they differ, field by field

  • Token Security's primary category is Non-human identity security; Zenity's is AI model and agent security.
  • Token Security lists MCP Server and AI Agent. Zenity lists AI Observability, AI Security Posture Management (AISPM), Boundaries, AI Detection and Response (AIDR) and Zenity Security Assessment Hub.
  • Zenity was founded in 2021.
  • Zenity is privately held.

What it sells: Token Security

What MCP Server and AI Agent does[1][2][8]
The Token MCP Server lets users ask questions from chat applications such as Claude, ChatGPT, and Gemini, or from AI agent-based applications such as Cursor. The Token AI agent is built into the Token Security NHI Security Platform and provides conversational AI capabilities from the Token UI. Token AI delivers organization-specific remediation guidance, including scripts, CLI commands, and fix recommendations.

What it sells: Zenity

What AI Observability does[5]
AI Observability is Zenity's discovery and visibility layer for AI agents. Data Lens surfaces sensitive files and pages that are both frequently accessed and broadly exposed across agents.
What AI Security Posture Management (AISPM) does[7]
AISPM evaluates configuration and permissions for agents embedded in platforms like Microsoft Copilot Studio, ChatGPT Enterprise, and Salesforce Agentforce. AISPM applies stricter enforcement in production and more flexible policy in development or sandbox environments.
What Boundaries does[4][6][8]
Boundaries is Zenity's runtime enforcement engine. A rule written once in Boundaries is enforced on Copilot, ChatGPT Enterprise, Agentforce, Bedrock, coding agents, and homegrown builds. Boundaries includes a built-in AI assistant that turns a plain-language request into a working rule.
What AI Detection and Response (AIDR) does[9]
AI Detection and Response (AIDR) is Zenity's runtime security layer for AI agents. AIDR detects direct and indirect prompt injection and blocks execution before the agent acts on them. AIDR breaks every agent interaction into individual steps and groups them by thread in a single activity table.
What Zenity Security Assessment Hub does[13]
The Zenity Security Assessment Hub is built by Zenity Labs. The tools take a Red-Team approach to visualize threats across Microsoft 365, with a focus on 365 Copilot, Copilot Studio, and Power Platform.

Questions about Token Security and Zenity

What do Token Security and Zenity sell?
Token Security sells MCP Server and AI Agent. Zenity sells AI Observability, AI Security Posture Management (AISPM), Boundaries, AI Detection and Response (AIDR) and Zenity Security Assessment Hub.
Are Token Security and Zenity in the same category?
They share AI model and agent security and AI governance. Token Security's primary category is Non-human identity security and Zenity's is AI model and agent security.
When were Token Security and Zenity founded?
Zenity was founded in 2021.
Who owns Token Security and Zenity?
Zenity is privately held.
Who are Token Security and Zenity sold to?
Zenity describes a global financial services firm and a global asset manager as organizations that write policy rules for agents.
What have Token Security and Zenity announced recently?
May 12, 2026: Token Security announced its inclusion in the Rising in Cyber 2026 list of promising private cybersecurity startups. September 23, 2026: Zenity was named a Market Shaper in Gartner's inaugural Emerging Market Quadrant for AI Application Security.

About Token Security

Token Security sells a platform that secures the identities supporting agentic AI deployments. Token Security presents the AI Agent Security Platform for how AI agents are created, governed, and operated. Token Security says AI agent and non-human identities span on-prem, cloud and AI platforms, outnumbering human identities by 50:1. Token Security says security and IAM teams fear breaking production systems when they lack context on the usage of each AI agent and identity. Token Security says a single compromised agent can trigger cascading damage across every connected system it touches.[1][3][4]

Token Security helps teams manage the full AI agent identity lifecycle. Token Security discovers AI agents and MCP servers automatically. Token Security provides continuous visibility into all AI agents across cloud environments, SaaS platforms, internal tools, and custom frameworks. Token Security's platform creates a dynamic NHI inventory and builds identity graphs that map entitlements, permissions, and dependencies. Token Security connects to a technology stack that includes IaaS, PaaS, SaaS, workloads, on-premises systems, and databases. Token correlates AI agents, humans, secrets, permissions, and data in a unified identity graph.[3][4]

Token Security understands AI agent intent to align access with what an AI agent is meant to do. Token applies intent-aware least-privilege to agents, so that agents have only the permissions needed for their purpose and only for the time required. Token Security's platform capabilities include continuously enforcing least privilege and just-in-time access, and remediating excessive permissions in real time. Token Security's platform capabilities include assigning ownership, rotating credentials, and retiring orphaned agents. Token Security monitors and audits AI agent actions to maintain compliance. Token Security's traceability capability logs every AI agent action across ecosystems for compliance and incident investigation.[3][4]

Token Security continuously evaluates agents against internal policies and external requirements. Token Security allows organizations to define and enforce policies for AI agent creation, intent, access, and operation. Token Security's lifecycle management enforces ownership and decommissions orphaned identities automatically. Token Security's security posture management identifies permissions drift, right-sizes access, and eliminates overexposure. Token automates key rotation and stale account removal, and ties identities to Infrastructure-as-Code (IaC). Token analyzes behavioral signals, privilege misuse, and credential misuse to surface threats targeting machine identities. Token Security monitors access attempts and NHI activities in real-time. Token Security automatically routes alerts, triggers remediation workflows, identifies IaC sources, and generates fixes using AI. Token Security triggers remediation workflows based on dynamic risk thresholds and contextual awareness.[4][5][6][7]

The Token MCP Server and AI Agent deliver a real-time natural language interface that lets security teams interact directly with their environment. The Token MCP Server lets users ask questions from chat applications such as Claude, ChatGPT, and Gemini, or from AI agent-based applications such as Cursor. The Token AI agent is built into the Token Security NHI Security Platform and provides conversational AI capabilities from the Token UI. Token AI translates plain-language queries into Token platform-specific operations, such as querying the inventory, assessing risks, understanding the Identity blast radius, and generating qualified insights. Token AI delivers organization-specific remediation guidance, including scripts, CLI commands, and fix recommendations. Token adheres to the open MCP standard for integration with autonomous AI agents in tools like ChatGPT, Claude, and Cursor.[1][8]

Token Security is built for organizations that need more than discovery. Token Security provides the identity lifecycle and intent-based access management. Token Security has offices in Tel Aviv and New York.[1][3][7][9][10]

Token Security on the record

Sources

Token Security full record

  1. [1]token.securityToken Security · token.security · undated page, accessed October 7, 2026 · Tier A
  2. [2]AI Agent & Non-Human Identity Security Platform | Token SecurityToken Security · undated page, accessed October 31, 2026 · Tier A
  3. [3]NHI Discovery & Visibility | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]Identity Security Platform for Cloud and AI EnvironmentsToken Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]NHI Lifecycle Management | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]NHI Threat Detection & Response | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]NHI Automation & Remediation | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]MCP Server and AI Agent | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]About Token Security | Identity Security for AI Agents & Non-Human Identities (NHIs)Token Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Careers at Token Security | Join the Future of Identity & AI SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Token Security Named to Rising in Cyber 2026 List of Top Cybersecurity StartupsToken Security · published May 12, 2026 · Tier A

Zenity full record

  1. [1]AI Agent Security and Governance | Zenity AI Security PlatformZenity · undated page, accessed September 27, 2026 · Tier A
  2. [2]Zenity announces strategic investment led by m12Zenity · zenity.io · undated page, accessed September 27, 2026 · Tier A
  3. [3]Zenity raises 38m series b funding round to secure agentic aiZenity · zenity.io · published October 29, 2024 · Tier A
  4. [4]AI Agent Security & Governance Platform for the Enterprise | ZenityZenity · undated page, accessed October 30, 2026 · Tier A
  5. [5]AI Observability | Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Agent Security | Model Context Protocol (MCP) | ZenityZenity · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Security Posture Management | Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A
  8. [8]Runtime Boundaries | Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI Detection and Response (AIDRZenity · undated page, accessed November 10, 2026 · Tier A
  10. [10]Agentic Identity & Access Management: Zenity AI Security PlatformZenity · undated page, accessed November 10, 2026 · Tier A
  11. [11]Securing Financial Services AI | Zenity, Microsoft & SlalomZenity · undated page, accessed November 10, 2026 · Tier A
  12. [12]Company | Zenity | Secure AI Agents EverywhereZenity · undated page, accessed November 10, 2026 · Tier A
  13. [13]Zenity Security Assessment Hub | Zenity | Secure AI Agents EverywhereZenity · undated page, accessed November 10, 2026 · Tier A
  14. [14]Zenity Raises $125 Million to Secure the Era of 1 Billion AI AgentsZenity · published August 3, 2026 · Tier A
  15. [15]Zenity Named a Market Shaper in Gartner’s Inaugural Emerging Market Quadrant for AI Application SecurityZenity · published September 23, 2026 · Tier A
  16. [16]Zenity Announces Availability of Inline Agent Runtime Security for Agents Built on Microsoft FoundryZenity · published March 17, 2026 · Tier A
  17. [17]Zenity and Carahsoft Bring AI Agent Security and Governance to Federal, State and Local AgenciesZenity · published June 17, 2026 · Tier A

Spot a factual error? Request a correction.