iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Infisical announced on October 27, 2026, that it raised a $40 million Series B at a $600 million valuation, led by Elad Gil, with participation from Gradient Ventures and Y Combinator. The open-source security company says the funding will expand its teams and accelerate tools that let companies use AI agents without placing permanent passwords, API keys or tokens inside an agent’s environment.
The round follows a $16 million Series A announced in June 2025, also led by Elad Gil. Infisical’s central product in this announcement, Agent Vault, brokers an agent’s approved requests while keeping the underlying credential outside the agent and its model context.
Why did Infisical raise $40 million?
Infisical says it will use the new capital to accelerate product development, expand engineering and go-to-market teams, and invest further in security infrastructure for AI agents. The company will continue developing its secrets-management, certificate and privileged-access products alongside Agent Vault.
The financing values Infisical at $600 million for this Series B. That figure should not be treated as a comparison with the 2025 Series A: the reviewed announcement does not disclose a Series A valuation.
Popular on Amazon
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Elad Gil described the broader market rationale this way: “AI agents are becoming a new class of users inside every enterprise, and securing their access will be one of the biggest cybersecurity challenges of the next decade.”
What problem is Infisical trying to solve?
AI agents increasingly need to reach source code, databases, cloud infrastructure and business services. A conventional integration often injects a secret into the agent’s runtime, configuration or tool context. If that environment, log stream or model context is exposed, the credential can be copied and reused elsewhere.
Infisical’s proposition is to separate permission to perform an approved request from possession of the credential used to authenticate it. An agent can be authorized to call a service, while the real password, API key or token remains outside the agent’s environment.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Also popular on Amazon
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
That separation reduces credential-exfiltration risk, but it is not a guarantee against every form of agent misuse. An agent that is authorized to perform an action may still make an unwanted request within that authorization, so organizations must define narrow permissions and monitor activity.
How does Infisical Agent Vault keep API keys away from AI agents?
Agent Vault uses a proxy-based flow. The agent sends a request through the proxy; the proxy applies the real credential at the network boundary and forwards the approved call to the target API. The agent receives the result of the operation rather than the secret itself.
What the documented workflow includes
- Define access. Administrators configure the services and permissions an agent may use.
- Create an access bundle. Related permissions can be grouped for a particular agent or workload.
- Start a time-bound session. Access can be limited to a defined session rather than left permanently available.
- Broker the request. The agent sends its call through the proxy, which attaches the credential outside the agent’s context.
- Review the record. Infisical documents encrypted session logs for observing brokered activity.
This architecture changes where trust is placed: the agent can request an operation, while the vault and proxy control credential handling, session limits and logging.
Also popular on Amazon
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
How is Agent Vault different from conventional secret injection?
Both approaches can enforce access policies, but they expose credentials differently. The following comparison uses capabilities Infisical documents for Agent Vault and the usual behavior of direct secret injection.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute| Security question | Agent Vault | Conventional secret injection |
|---|---|---|
| Does the agent receive the real secret? | No; the proxy applies it at the network boundary. | Usually yes; the secret is placed in the agent’s runtime, environment or tool configuration. |
| Can access be scoped and time-limited? | Access bundles and time-bound sessions are documented features. | Depends on the injection system and its policy support; not established for a generic implementation. |
| Are requests recorded? | Infisical documents encrypted session logs. | Logging varies by implementation; not stated for a generic implementation. |
| Where can it run? | Infisical offers cloud and self-hosted deployment options. | Depends on the chosen secrets platform and deployment. |
What does Infisical offer beyond Agent Vault?
Infisical describes itself as an open-source security infrastructure platform covering secrets, certificates, cryptographic keys, privileged access and AI-agent access. Its cloud and self-hosted options are intended to support organizations that need different control, hosting or compliance models.
The company’s existing identity and machine-access controls include documented support for SSO, LDAP, SCIM and machine authentication. Those controls can sit alongside the agent-specific proxy model, although the announcement does not identify a particular hardware security-key integration.
Also popular on Amazon
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
How much traction does Infisical report?
Infisical reported these figures in 2026; each is a company-provided metric that can change over time:
- More than 1,300 customers.
- 300,000 developers.
- 10 billion secrets secured every day.
- More than 30,000 GitHub stars for its open-source project.
The announcement names Airbus, Volkswagen, Hugging Face, OpenRouter, Lucid, First American Financial Corporation, Wise and Clay as customers. These names indicate adoption across automotive, financial, software and infrastructure businesses, but the announcement does not provide independent usage or performance measurements for each customer.
What should companies evaluate before adopting an agent-credential broker?
Organizations should treat credential isolation as one layer of an agent security program, not as a substitute for authorization design. Before deployment, verify:
Also popular on Amazon
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- Which APIs and operations each agent truly needs, and whether read and write permissions can be separated.
- How quickly sessions expire and how administrators revoke access during an incident.
- Whether encrypted session logs meet the organization’s retention, access and audit requirements.
- How the proxy behaves when it is unavailable, including fail-closed behavior and recovery procedures.
- Whether cloud or self-hosted deployment fits data-residency, network and operational requirements.
- How output data is sanitized so an agent cannot turn sensitive API responses into a new leakage path.
As Infisical co-founder and CEO Vlad Matsiiako put it, “You wouldn’t give an employee unrestricted access to every system in your company, and AI agents shouldn’t be any different.” The practical implication is least privilege: constrain the actions, duration and systems available to each agent, then review what it actually does.
Frequently Asked Questions
Does Agent Vault prevent an AI agent from taking a harmful action?
No. It is designed to keep credentials out of the agent and enforce the permissions attached to a session. If an agent is allowed to perform a particular operation, it may still misuse that allowed capability, so separate policy checks and human approvals may be necessary for high-impact actions.
Can Infisical be deployed without using its cloud service?
Yes. Infisical describes both cloud and self-hosted deployment options. The appropriate choice depends on network architecture, data-residency rules, internal operations capacity and the organization’s requirements for control over the security infrastructure.
Are the customer and usage numbers independently audited?
The figures in the financing announcement—customers, developers, daily secrets and GitHub stars—are company-reported metrics dated to 2026. The announcement does not provide an independent audit of those counts.
What happens if the Agent Vault proxy is unavailable?
The announcement does not specify a universal outage or failover policy. Prospective users should obtain the product’s current availability, fallback and incident-recovery details and decide whether their agents should fail closed when credential brokering is unreachable.
