Skip to content

← DirectoryCompare →

Token

token.security

Poor
Top 79%of 296 ai vendor vendors measured
ai vendor⚠ Unverified — automated scan only, no vendor confirmationScanned 9/6/2026Added 9/3/2026

Score breakdown

Verification bonus+0/5 bonus pts

Claimed profile

Domain ownership verified by claiming the profile0/5
AI safetypending

Signals planned: model card presence, training data disclosure, published red-team results. Some checks will be partially automated via website scanning; others require vendor submission.

Governance+0/31 bonus pts

Board-level oversight

Requires vendor submission — not yet collected.

SOC 2 Type I

Not found0

HIPAA

Not found0

ISO 42001

Not found0

SOC 2 Type II

Not found0

ISO 27001

Not found0
Incident historypending

Signals planned: breach-history lookup, incident response quality assessment. This category is coming soon.

Security hygiene & transparency10/28 pts

HTTPS + HSTS

HTTP redirects to HTTPS+3
HSTS header enforced+2

Source: response headers from token.security · Scanned 9/6/2026

security.txt

security.txt file foundFail
Contact field present0/2
Expires field present0/2
Encryption field present0/1

Disclosure policy

Security disclosure page found0/3
Page references vulnerability reporting0/2

Trust page

Public trust/security page found0/5

Security headers

Content-Security-Policy header+3
X-Frame-Options header+2
X-Content-Type-Options: nosniff0/2
Referrer-Policy header0/1

Source: response headers from token.security · Scanned 9/6/2026

Rubric v1.3.0 · 10/28 implemented pts · click a category to see details

Current:Poor
With verification:Fair(+5pts)
Claim this profile to improve your grade →

Score history (4 updates)

↑ improving
D- · 10/38pts · v1D- · 10/38pts · v2D · 10/28pts · v3D · 10/28pts · v4
v1D- → D- → D → Dv4

Score history

v3

Grade improved: D- → D

9/6/2026

Scanned 3d ago

Certifications & disclosures

Something look wrong? Signed-in users can flag a certification below — an Entropy admin reviews every report.

AI models used

Self-disclosed · unconfirmedClaude (Anthropic)ChatGPT (OpenAI)

Found in token.security’s llms.txt, captured by Entropy on 9/6/2026. Not vendor-confirmed — the vendor can confirm or correct this from their dashboard.

Show what we found
  • Claude (Anthropic) — “- [Claude Code Identity Security](https://www.token.security/blog/a-year-of-protecting-claude-code-the-identity-problem-no-one-was-ready-for)” (llms.txt)
  • ChatGPT (OpenAI) — “- [ChatGPT to GitHub Attack Path](https://www.token.security/blog/from-a-chatgpt-slip-to-full-github-access-the-attack-path-no-one-detects)” (llms.txt)

View the full llms.txt snapshot Entropy captured →