Infisical raises a $40 million Series B to build secrets and credential access for AI agents
Infisical announced a $40 million Series B on October 27 at a $600 million valuation, led by Elad Gil. The open-source secrets company says it will invest in secrets, certificate and privileged access management and in Agent Vault, which brokers AI agent access without exposing credentials.
Infisical, the open-source secrets management company, announced a $40 million Series B on October 27 at a $600 million valuation. Elad Gil, who led its Series A, led the round, with Y Combinator and Gradient Ventures increasing their stakes and Gallery Ventures, Pace Capital and Dynamic Capital among other participants. Infisical says more than 1,300 organizations use it, that its core open-source project has passed 30,000 GitHub stars, and that it has been cash-flow positive for a long time. It plans to put the money into secrets management, certificate management and privileged access management, and to increase its focus on Agent Vault, a broker that lets AI agents make authenticated requests to sensitive systems without holding the underlying credentials. The company also says it is hiring for more than 100 roles.
Why it matters
The funding lands in a week where AI provider keys and CI secrets were the target of nearly every platform breach we covered, from Railway to the LiteLLM release. Credential brokering is the design answer: an agent that never sees a key cannot leak it through logs, prompts or a poisoned dependency.
Whatever tool you use, the pattern is worth adopting. Keep long-lived keys in a vault, issue agents short-lived scoped access through a broker or token exchange, and log every request the broker makes on an agent's behalf. Our guide to securing AI agent identities covers the controls, and the secrets management fundamentals explain where a broker fits.
Source: Infisical
Related on Start with Identity
- BlogIBM makes Agent Identity and HashiCorp Vault 2.2 generally available to govern AI agents
At TechXchange 2026 on October 27, IBM made Agent Identity and HashiCorp Vault 2.2 generally available. Agent Identity records each AI agent's owner, lifecycle
- BlogGoogle: LLMjacking starts with stolen cloud identities and has cost some companies $1 million
Google Threat Intelligence Group and Mandiant say LLMjacking intrusions ran up more than $100,000 in fraudulent AI charges in a day and $1 million in total at s
- BlogPoisoned LiteLLM 1.107.0 shipped a credential stealer to PyPI and Docker for under three hours
LiteLLM said on October 21 that attackers published a malicious litellm 1.107.0 to PyPI, Docker Hub and GHCR, built from a lookalike Berri-AI/litellm repository
- CVEtj-actions/changed-files tags repointed to dump CI secrets into logs
An attacker repointed tj-actions/changed-files version tags to a commit that read the GitHub Actions runner's memory and printed its secrets into workflow logs.
- CVETrivy release and GitHub Action tags hijacked to steal CI secrets
With credentials left valid by a non-atomic rotation, an attacker shipped a malicious Trivy v0.69.4 and repointed 76 of 77 trivy-action tags to code that dumped
- CVECommvault Web Server zero-day that exposed Metallic Microsoft 365 app secrets
An authenticated webshell flaw in Commvault Web Server, used as a zero-day in Commvault's Azure environment, where the actor may have reached client secrets cus