Infisical raises a $40 million Series B to build secrets and credential access for AI agents

Infisical, the open-source secrets management company, announced a $40 million Series B on October 27 at a $600 million valuation. Elad Gil, who led its Series A, led the round, with Y Combinator and Gradient Ventures increasing their stakes and Gallery Ventures, Pace Capital and Dynamic Capital among other participants. Infisical says more than 1,300 organizations use it, that its core open-source project has passed 30,000 GitHub stars, and that it has been cash-flow positive for a long time. It plans to put the money into secrets management, certificate management and privileged access management, and to increase its focus on Agent Vault, a broker that lets AI agents make authenticated requests to sensitive systems without holding the underlying credentials. The company also says it is hiring for more than 100 roles.

Why it matters

The funding lands in a week where AI provider keys and CI secrets were the target of nearly every platform breach we covered, from Railway to the LiteLLM release. Credential brokering is the design answer: an agent that never sees a key cannot leak it through logs, prompts or a poisoned dependency.

Whatever tool you use, the pattern is worth adopting. Keep long-lived keys in a vault, issue agents short-lived scoped access through a broker or token exchange, and log every request the broker makes on an agent's behalf. Our guide to securing AI agent identities covers the controls, and the secrets management fundamentals explain where a broker fits.

Source: Infisical