ColorTokens, Inc. — 2 prefixes (MA-L)

A MAC address beginning 38:20:A8 or 68:54:C1 identifies hardware registered to ColorTokens, Inc., a Santa Clara, California cybersecurity vendor — most plausibly its Xshield Gatekeeper Appliance, the one ColorTokens product sold as physical network hardware, though no source ties either prefix to that device by name.

ColorTokens builds Xshield, an enterprise microsegmentation and Zero Trust platform that maps traffic between workloads, devices, and users and enforces micro-perimeters to contain ransomware and malware lateral movement. The Gatekeeper Appliance component provides agentless visibility and can run either as a virtual machine in a data center or as a standalone hardware unit on OT/industrial shop floors.

Both IEEE assignments are MA-L (24-bit) blocks registered to the same Santa Clara address, and neither is a sub-allocation of a shared IEEE base — each is ColorTokens' own dedicated /24. No corresponding MA-M or MA-S entries were found for the company, so the cached IEEE footprint is exactly these two blocks.

IEEE's own registry data carries no assignment or registration date for either prefix. Third-party scraper maclookup.app displays "registered on 23 July 2017" for 38:20:A8; that is a database artifact of the scraper, not an IEEE fact, and a second scraper (cleancss.com) shows no date at all for 68:54:C1 — underscoring the inconsistency of such third-party values.

IEEE assignment

2 prefixes → ColorTokens, Inc., registered Santa Clara, CA, US [Confirmed] — the IEEE MA-L registry 3820A8, the IEEE MA-L registry 6854C1

Registry / block size

MA-L (24-bit OUI) x2; no MA-M or MA-S holdings found for this vendor [Confirmed] — the IEEE MA-M registry (no match), the IEEE MA-S registry (no match)

HQ / country

2101 Tasman Dr. Suite 200A, Santa Clara, CA 95054, US [Confirmed] — the IEEE MA-L registry 3820A8

Company status

Likely active — no explicit IEEE status field; corroborated by live AWS Marketplace and CrowdStrike Marketplace listings and 2024 press coverage [Likely] — https://aws.amazon.com/marketplace/pp/prodview-dd4ze4gewomem, https://www.prnewswire.com/news-releases/colortokens-recognized-as-an-industry-leader-in-microsegmentation-amid-ongoing-company-growth-302134125.html

Device types

Xshield Gatekeeper Appliance, deployable as VM or standalone hardware [Likely — inferred from product line, not tied to a specific prefix] — https://colortokens.com/products/xshield-microsegmentation-platform/

Notable products

Xshield microsegmentation platform, Xshield Gatekeeper Appliance [Confirmed] — https://colortokens.com/products/xshield-microsegmentation-platform/

Verified sample prefixes

38:20:A8, 68:54:C1 [Confirmed] — the IEEE MA-L registry 3820A8, the IEEE MA-L registry 6854C1

Founding year

Unknown — commonly cited as 2015 by third-party aggregators, but colortokens.com/about-us returned HTTP 403 on fetch and no citable first-party confirmation was retained [Unknown] — no source retained

Registration date

Unknown — IEEE publishes no OUI assignment/registration date [Unknown] — the IEEE MA-L registry (no date column)

Third-party date artifact

maclookup.app shows "registered on 23 July 2017" for 38:20:A8; this is a scraper database artifact, not an IEEE fact [Confirmed as artifact, not as an IEEE date] — https://maclookup.app/search/result?mac=3820A8

Security/CVE context

No CVE recorded against ColorTokens Xshield as of an August 2026 web search; the only CVE-adjacent hit is a ColorTokens blog post discussing third-party OpenSSL CVEs, not a vulnerability in ColorTokens' own product [Confirmed] — https://colortokens.com/blogs/update-on-openssl-vulnerability/

Technology integration partners

CrowdStrike Falcon, SentinelOne Singularity, Microsoft Defender for Endpoint, Nozomi Networks, Claroty [Confirmed] — https://marketplace.crowdstrike.com/content/crowdstrike-marketplace/locale-sites/us/en-us/listings/colortokens-xshield-enterprise-microsegmentation-platform1.html, https://www.nozominetworks.com/integrations/colortokens, https://claroty.com/resources/integration-briefs/claroty-colortokens

Analyst note

These are two dedicated, non-shared MA-L blocks; treat the Xshield Gatekeeper Appliance link as a probable device-class inference from ColorTokens' product line, not a confirmed prefix-to-device match [Likely] — https://colortokens.com/products/xshield-microsegmentation-platform/