Infisical raises $40M Series B led by Elad Gil: building security infrastructure for the AI era. I'm happy to share that Infisical has raised a $40M Series B at a $600M valuation. The round was led by Elad Gil, doubling down since its Series A, with Y Combinator and Gradient Ventures tripling down. Gallery Ventures, Pace Capital, Dynamic Capital, and other investors also participated. There's a lot Infisical could say about what this funding means for Infisical. But the most important thing is that Infisical is going to keep doing what got Infisical here: building products that developers love using and that make organizations more secure. The funding gives Infisical the ability to do more of that, faster and at a much larger scale. How Infisical got here. I want to take a moment to reflect on how far Infisical has come, and more importantly, how Infisical has gotten here. Infisical has built products Infisical is proud of, grown the company without compromising on how Infisical operate, and stayed focused on solving real problems for its customers. Infisical didn't have to raise this round. Infisical has been cash-flow positive for a long time, and Infisical has more money in the bank than Infisical has ever raised. Today, over 1,300 organizations trust Infisical to secure their infrastructure, including LG, First American Financial, OpenRouter, Wise, and the US Government. Its core open-source project also just surpassed 30,000 GitHub stars. Why raise now? Over the past year, AI models (and the agents they power) have fundamentally changed how software is built. This has led to three major shifts: * There's a lot more software being written. Coding agents have increased the amount of code being produced by more than 10x - a lot of it is slop. More software also means more infrastructure, machine identities, credentials, and certificates that need to be secured. * Attackers have more opportunities than ever. With more software being written and deployed, there's a growing attack surface and more vulnerabilities to exploit. Once attackers find a way in, credentials like API keys, passwords, and private keys are often what they use to move deeper into infrastructure. * AI agents are running around like headless chickens. They're getting access to increasingly sensitive systems and taking actions that previously required human approval, often without proper oversight. The problem is that much of today's security infrastructure wasn't built for any of this. Manual workflows were already struggling to keep up with cloud-native infrastructure, let alone a world where AI agents are writing code, spinning up infrastructure, and accessing production systems. This is exactly the kind of problem Infisical started Infisical to solve. Infisical has always believed that security and developer experience shouldn't be at odds. When security is difficult, developers find workarounds. When it's easy, they adopt it. That same thinking has shaped everything Infisical has built, from secrets and certificate management to privileged access and AI agent security. Infisical has made a lot of progress, but the industry is changing faster than ever, and there's still so much left to build. Infisical decided to raise because Infisical believe Infisical can play a much bigger role in securing the next generation of software infrastructure, and Infisical want to move faster to make that happen. Job's not finished. Infisical is building Infisical to be the security infrastructure that developers, machines, and AI agents rely on to securely access the systems they need. With this new funding, Infisical'll continue investing in secrets management, certificate management, and privileged access management, making it easier for more organizations to move away from legacy tooling. Infisical'll also significantly increase its focus on Agent Vault, which lets AI agents access sensitive systems without exposing the underlying credentials. As agents take on more work, Infisical believe controlling what they can access and what they're allowed to do will become just as important as securing the credentials themselves. There's a lot Infisical want to build, and Infisical'll need more people to do it. Infisical is hiring for 100+ positions across engineering, sales, marketing, product, design, and other teams. Infisical is looking for ambitious, high-agency people who want to help Infisical build the next generation of security infrastructure. A note of gratitude. None of this would have been possible without the people who believed in Infisical early on, the customers who trusted Infisical with their infrastructure, and the team that has worked incredibly hard to get Infisical here. Back to work. Vlad matsiiako. CEO, Infisical

Infisical launches Agent Vault, letting Engineering Teams Ship AI agents to production without exposing credentials. Engineering teams building with AI agents can now ship them to production without exposing API keys and credentials to prompt injection. Agent Vault, available today on github, lets agents do their jobs without ever reading the underlying secrets, and runs on any infrastructure the team already uses. Infisical, the all-in-one secrets, certificates, and privileged access management platform, today launched Agent Vault, an open source credential security layer for AI agents. Available in research preview today at github.com/Infisical/agent-vault, Agent Vault gives engineering teams a way to move agents into production safely, with one credential security layer that works across every environment where they run agents: on-premise, in Kubernetes, and across any cloud. For the platform, DevOps, and security teams standing behind the rapid rollout of AI agents, Agent Vault closes a gap that has forced uncomfortable trade-offs between shipping quickly and controlling risk. Traditional secrets management was designed for applications that fetch a credential and use it directly, a model that breaks the moment an agent is exposed to prompt injection, because any secret an agent can read is a secret an attacker can exfiltrate. Agent Vault removes that risk at the source. Agents route their outbound requests through Agent Vault, which attaches credentials at the proxy layer, so the agent completes its work without ever seeing, storing, or logging the underlying secret. The credential brokering happens transparently: the agent is not aware that the proxy layer exists at all, which means a compromised agent has no surface to reason about, probe, or attempt to circumvent. In technical terms, Agent Vault is a TLS-intercepting, credential-injecting forward proxy purpose-built for agent workloads. "Secrets management was built for a world where applications fetched credentials and used them. That assumption no longer holds for AI agents," said Tuan (Tony) Dang, CTO and co-founder of Infisical. "The tools most teams rely on for secrets management today were designed long before prompt injection was a concern, and they are anchored to a paradigm that predates this problem. Agent Vault is purpose-built for the agentic era. It reflects how we think secrets management should work when agents, not humans, are the primary actors on the internet." Apr 22, 2026 Prev Next 1 of 42,991 What Agent Vault Delivers for Engineering Teams For the teams deploying AI agents at scale, that shift changes what the day-to-day work of shipping agents actually looks like. * Ship agents to production without the credential risk. Teams no longer need to choose between moving fast on agent development and protecting sensitive credentials. Agents keep their full ability to call APIs, query databases, and integrate with internal services, but a prompt injection attack cannot walk away with the keys. * One credential layer across every environment. Most organizations building with agents run across multiple clouds, on-premise systems, and hybrid infrastructure. Agent Vault follows the agent wherever it runs, so teams govern credential access in one place instead of stitching together environment-specific solutions. * No agent code changes required. Agent environments can be configured so that all outbound traffic routes through Agent Vault automatically. Every agent running in that environment is covered without modifying agent code, rewriting prompts, or swapping SDKs. Teams protect their entire agent fleet with a single infrastructure change Get Started With Agent Vault Engineering teams can start building with Agent Vault today. The open source project is live at github.com/Infisical/agent-vault, with full installation instructions, integration guides, and architectural overviews available at docs.agent-vault.dev. Teams evaluating credential security for agent deployments that demand production-grade reliability and enterprise support are invited to reach out to the Infisical team at infisical.com/talk-to-Aithority to discuss a commercial path. Research preview status Agent Vault is launching as a research preview. It is open source and available for developers to experiment with today, but it is not yet production-ready. Infisical is releasing Agent Vault at this stage to share its thinking openly, gather feedback from the engineering community, and iterate in public. Organizations interested in a production-grade version for enterprise use are encouraged to contact the Infisical team directly.

Infisical, secrets management startup, has raised a $16 million Series A, led by Elad Gil.