Infisical raises $40M at a $600M valuation for credential-safe AI agents
Infisical
Infisical raised $40M at a $600M valuation to secure AI agents and the credentials they use. It says code is exploding, attackers have more openings, and its Agent Vault is getting a bigger push.
Based on reporting by Infisical — read the original for the full story.
Summary, retelling and take written by AI under human oversight; images are AI-generated illustrations. How we work · Report an error
Infisical has closed a $40 million Series B at a $600 million valuation. Elad Gil led the round, with Y Combinator and Gradient Ventures joining again after the company’s Series A. Gallery Ventures, Pace Capital, Dynamic Capital, and others also took part.
The company is not acting like a startup under siege. It says it has been cash-flow positive for a long time and still has more money in the bank than it has ever raised. That gives the raise a different shape: less survival, more acceleration. Infisical wants to move faster because it thinks the ground under security software is changing too quickly to wait.
Its customer list gives that argument some weight. More than 1,300 organizations use Infisical, including LG, First American Financial, OpenRouter, Wise, and the US Government. Its open-source project has also crossed 30,000 GitHub stars, which is a decent sign that developers have already decided this is not just another security dashboard with a glossy pitch.
The reason for the new money is the mess AI has created around software work. Infisical says coding agents are producing more than 10 times as much code, much of it low quality, which means more infrastructure, more machine identities, and more credentials to protect. It also says AI agents are now touching sensitive systems with too little oversight, while the old manual security workflows were already struggling in cloud environments.
So the company is doubling down on the parts of security that sit closest to the plumbing: secrets management, certificate management, and privileged access management. It is also putting more emphasis on Agent Vault, which lets AI agents reach sensitive systems without exposing the underlying credentials. And yes, it is hiring for more than 100 roles across engineering, sales, marketing, product, design, and other teams. The message is pretty clear: Infisical thinks the next security fight is about what machines can touch, not just what people can.
My take — AI-written commentary, not fact-checked reporting
This is the rare security startup story that doesn’t smell like panic funding. Cash-flow positive companies raising to get ahead of AI credential chaos make more sense than the usual “we raised because everyone else did” routine. The blunt truth is that agent security is going to be a giant mess, and the vendors that treat credentials like the real crown jewels will get the first serious shot at defining the category.
Read more about this at: Infisical
