Token Evolves into TokenCore, Expanding Its Vision for Cryptographic Identity Assurance at TokenCore.com

When attackers already have your employees' passwords and your MFA codes, TokenCore is the authentication they still can't beat.

ROCHESTER, N.Y.--(BUSINESS WIRE)--Token, the next-generation identity assurance company, today announced the renaming of its technology from Token Ring to TokenCore and the launch of TokenCore.com. Founded in 2014 and backed by Grand Oaks Capital, Token has been innovating for more than a decade, building the identity infrastructure that government and enterprise organizations need today.

Credential compromise remains the leading cause of enterprise breaches. The attack pattern is not sophisticated — passwords are reused, push notifications are approved under pressure, and devices are shared. The arrival of agentic AI has made the problem structurally worse: autonomous agents now operate inside enterprise environments with human-level access but without human-level accountability, creating gaps that traditional MFA and auth apps were never designed to close.

"The rise of AI doesn't just expand the attack surface — it exposes every weakness that was already there," said Kevin Surace, Chief Executive Officer of Token. "The foundation underneath all of it has to be provable, not assumed. TokenCore was built precisely for this moment."

Surace is uniquely suited to lead Token into its next phase of growth. Named Inc. Magazine's Entrepreneur of the Year, a CNBC Top Innovator of the Decade, and a World Economic Forum Tech Pioneer, he holds 95 worldwide patents and is widely recognized as the father of voice AI and inventor of the AI virtual assistant — having pioneered AI-driven interfaces in the 1990s including General Motors OnStar Virtual Advisor while at General Magic. He has delivered more than 400 keynotes on AI, cybersecurity and disruptive innovation, including at TED and the World Economic Forum. Surace is uniquely positioned to understand both what AI makes possible — and what it makes dangerous.

TokenCore steps to the front of the Identity Assurance category with its biometric cryptographic proximity-based solution.

Unlike MFA, which layers factors onto weak credential foundations, TokenCore binds access to a verified, physically present human through on-device biometric authentication enforced on secure hardware. Fingerprints never leave the device. Cryptographic keys are generated on-device and never exported. There is nothing for an attacker to steal, phish, or replay.

The TokenCore product line — including the TokenCore Wearable, TokenCore Portable, and TokenCore Node— integrates with existing IAM, SSO, and PAM infrastructure. It does not replace the identity stack. It completes it.

Token is backed by Grand Oaks Capital, the private equity and venture capital firm founded by Paychex founder and billionaire philanthropist B. Thomas Golisano, whose $1 billion portfolio backs companies with large addressable markets and disruptive technology. TokenCore.com is live effective today. All existing enterprise and government agreements, support relationships, and channel partnerships continue without interruption.

“TokenCore doesn't make stolen credentials harder to use," said Surace. "It makes them permanently useless. Because authentication requires a live fingerprint and physical presence. There is no version of a credential theft attack that defeats that. None."

About Token

Token is next-generation identity assurance for organizations that cannot afford to get identity wrong. Founded in 2014 and backed by Grand Oaks Capital — the firm founded by Paychex founder and billionaire philanthropist B. Thomas Golisano — Token combines wireless biometrics, cryptographic authentication, and physical proximity to make human identity non-transferable and provable. TokenCore integrates with and strengthens the IAM, SSO, and PAM tools organizations already rely on. Learn more at TokenCore.com.