Token Security named RSAC 2026 Innovation Sandbox finalist

Token Security has been named one of the Top 10 finalists in the RSAC 2026 Innovation Sandbox contest, a startup showcase within the RSA Conference programme. It was recognised for its focus on identity security and governance for autonomous AI agents used in corporate environments.

The firm will present its product to a panel of judges and an in-person audience at RSAC 2026 in San Francisco. The Innovation Sandbox session takes place on the first day of the conference, with winners announced later that day.

Agent identities

Security teams have spent years building controls around user accounts, service accounts, application credentials, and machine identities. Autonomous AI agents add a new category of actor inside corporate systems, able to write code, trigger automated workflows, and take actions across software and cloud services at high speed.

Their growth is creating large numbers of non-human identities, many of which do not fit neatly into existing identity and access management tools designed for more static accounts and predictable access patterns.

Token Security positions its platform around discovering and governing agent identities. It ties access to "declared intent," applies least-privilege controls, and records agent actions for audit purposes as agents operate across enterprise environments.

What the platform does

The product, the AI Agent Identity Security Platform, is described as providing continuous discovery, lifecycle governance, and intent-based access controls for AI agents.

In practice, it applies familiar identity controls-creating and retiring identities, adjusting permissions over time, and tracking actions taken under an identity-to autonomous agents and other non-human identities.

Token Security distinguishes its approach from traditional tools focused on service accounts and API keys. AI agents can change behaviour as they operate, making decisions and triggering actions without a person initiating each step.

The platform integrates with AI, cloud, and identity providers, and is positioned as a way to keep agent adoption aligned with Zero Trust security models.

Industry signal

The Innovation Sandbox contest is widely seen as a marker of early-stage cybersecurity trends. Past finalists have later raised substantial funding and been acquired, according to figures published by the event organisers.

For Token Security, the selection signals growing interest in security challenges created by autonomous software agents. It also reflects a broader shift towards identity as a control point. Identity products have expanded beyond employee logins to devices, workloads, and machine-to-machine interactions. Agentic AI adds another area where organisations want to manage who-or what-can take action in critical systems.

The judging panel includes security and technology leaders from Morgan Stanley, JPMorganChase, Verizon, Capitol Meridian Partners, and independent cybersecurity research.

Token Security was selected for its approach to agent identity controls and governance. The company is backed by Notable Capital, TLV Partners, SNR, and industry figures including Kevin Mahaffey, founder of Lookout, and Shlomo Kramer, co-founder and CEO of Cato Networks.

Itamar Apelblat, co-founder and CEO of Token Security, said the company sees agent identities as an operational issue today, not a future concern.

"It's an honor to be named a finalist for the RSAC Innovation Sandbox contest," said Apelblat.

He described the challenge as one of visibility and control in environments where agents can operate with elevated access.

"AI agents are already acting as privileged operators inside enterprise environments, but most organizations lack visibility, ownership, and control over these identities. This recognition underscores the urgency of securing agentic AI using identity and agent intent, and validates Token Security's leadership role in this fast-growing market," Apelblat said.

Token Security will make its pitch during the Innovation Sandbox session at RSAC 2026, where finalists will compete for the top award in front of the judges and conference audience.