# Infisical raises a $40 million Series B to build secrets and credential access for AI agents

Source: https://startwithidentity.com/blog/2026-10-27-infisical-raises-40-million-series-b-for-secrets-and-ai-agent-credentials/
Last updated: 2026-10-27
License: content by Start with Identity. Cite the source URL.

---

[Infisical](https://startwithidentity.com/vendors/secrets/infisical/), the open-source secrets management company, announced a $40 million Series B on October 27 at a $600 million valuation. Elad Gil, who led its Series A, led the round, with Y Combinator and Gradient Ventures increasing their stakes and Gallery Ventures, Pace Capital and Dynamic Capital among other participants. Infisical says more than 1,300 organizations use it, that its core open-source project has passed 30,000 GitHub stars, and that it has been cash-flow positive for a long time. It plans to put the money into secrets management, certificate management and privileged access management, and to increase its focus on Agent Vault, a broker that lets AI agents make authenticated requests to sensitive systems without holding the underlying credentials. The company also says it is hiring for more than 100 roles.

## Why it matters

The funding lands in a week where AI provider keys and CI secrets were the target of nearly every platform breach we covered, from [Railway](https://startwithidentity.com/blog/2026-10-22-railway-says-attacker-decrypted-environment-variables-in-up-to-100000-workspaces/) to the [LiteLLM release](https://startwithidentity.com/blog/2026-10-23-litellm-traces-poisoned-release-to-an-admin-key-leaked-in-may-and-never-revoked/). Credential brokering is the design answer: an agent that never sees a key cannot leak it through logs, prompts or a poisoned dependency.

Whatever tool you use, the pattern is worth adopting. Keep long-lived keys in a vault, issue agents short-lived scoped access through a broker or [token exchange](https://startwithidentity.com/glossary/token-exchange/), and log every request the broker makes on an agent's behalf. Our guide to [securing AI agent identities](https://startwithidentity.com/guides/machine-identity/securing-ai-agent-identities/) covers the controls, and the [secrets management](https://startwithidentity.com/guides/fundamentals/what-is-secrets-management/) fundamentals explain where a broker fits.

Source: [Infisical](https://infisical.com/blog/series-b)