Infisical raises $40M at a $600M valuation to lock down AI agents — without ever handing them the keys

Infisical has raised $40 million in Series B funding at a $600 million valuation, the San Francisco cybersecurity infrastructure company announced on October 27, 2026. The round was led by investor Elad Gil, who previously invested in the company's Series A, with Gradient and Y Combinator among the other investors. The money will go toward expanding the company's bet on a problem that only gets sharper as agents spread through the enterprise: agents that do real work need real access, but handing them the keys is exactly how breaches happen.

That tension is the whole pitch. An AI agent that files tickets, queries databases, or deploys code needs credentials — API keys, passwords, authentication tokens — to touch source code, databases, and cloud infrastructure. Infisical's argument is that agents should never actually hold those credentials at all. "You wouldn't give an employee unrestricted access to every system in your company, and AI agents shouldn't be any different," said Vlad Matsiiako, Infisical's co-founder and CEO. "Agents need access to company systems to do their jobs, but giving them actual passwords and API keys is a major security risk. We let agents get their job done safely without ever having those credentials in their hands."

Agent Vault: access without the credential#

Agent Vault is the product at the center of the raise. Instead of passing a credential to an agent, a company defines the access each agent needs, and the agent works through Infisical's infrastructure. The company says the design means a credential cannot leak in a cyberattack, and cannot be inadvertently sent to a large language model provider or another tool the agent talks to. It sits on top of Infisical's existing platform, which manages secrets, certificates, encryption keys, and privileged access across a company's infrastructure — the unglamorous plumbing that decides who and what can open which door.

The scale behind the raise#

Infisical says it now serves more than 1,300 customers and 300,000 developers, secures 10 billion secrets every day, and has earned more than 30,000 GitHub stars for its open-source project. Its named customers include Airbus, Volkswagen, Hugging Face, OpenRouter, Lucid, First American Financial Corporation, Wise, and Clay. Those are company-reported figures from the announcement, not independently audited numbers — but the customer list is the point the company wants investors to notice: this is not a product looking for its first enterprise user, it is infrastructure already sitting inside companies whose breaches would make news.

A returning lead investor#

Gil's return as lead is the clearest signal in the round. He led Infisical's $16 million Series A in June 2025, according to Dealroom's coverage of the new round, and is now leading again at a substantially higher valuation. Infisical says it will use the new funding to accelerate product development, expand its engineering and go-to-market teams, and build out its security infrastructure for AI agents as enterprise adoption increases. "AI agents are becoming a new class of users inside every enterprise, and securing their access will be one of the biggest cybersecurity challenges of the next decade," Gil said in the announcement.

What to watch#

The announcement gives no revenue figure, and no pricing or general-availability date for Agent Vault beyond its role in the expansion. The test that matters is not the valuation but adoption: whether enterprises treat agent access as a distinct security layer, with its own vaults and permissions, rather than as an extension of the human identity systems they already run. If they do, the company that already holds their secrets is well placed. If they don't — if agent credentials stay an afterthought bolted onto existing secrets managers — then $40 million buys a good product in a market that never quite arrives. The funding says Gil is betting on the first outcome.

Sources: Infisical's announcement, "Infisical Raises $40 Million at $600 Million Valuation to Secure the AI Agent Economy" (October 27, 2026); Dealroom's coverage of the Series B. The editorial illustrations are AI-generated.