IA en un minutoNewsBusiness and products
Infisical raises $40 million so AI agents never see the passwords
IA en un minuto newsroom · Editor: Jon Elgezabal
In 30 seconds
Infisical has closed a round of $40 million in fresh money at a $600 million valuation, with Elad Gil in the lead. Its product Agent Vault lets an AI agent act on delicate systems without ever seeing the passwords: the agent uses placeholders and a proxy supplies the real secrets. The company will strengthen it and hire more than 100 people.
Infisical, a secrets management company (the passwords and keys that systems use) based in San Francisco, according to SecurityWeek, has closed a $40 million Series B round that values it at $600 million. It announced the round on October 27 on its blog. Elad Gil, who had already invested in the Series A, leads it, alongside Y Combinator and Gradient Ventures, plus Gallery Ventures, Pace Capital and Dynamic Capital, among others. With it, according to SecurityWeek, total funding comes to nearly $60 million.
Its bet is Agent Vault, a product that lets AI agents reach sensitive systems without ever being handed the underlying credentials. According to SecurityWeek, the agent works with placeholders and the real secrets are injected into a proxy that all of its requests pass through, and which also logs them; that way the secrets never reach the agent. Vlad Matsiiako, co-founder and chief executive, sums it up by saying that agents do their work "without ever having those credentials in their hands."
Infisical also offers tools to manage secrets, encryption keys and digital certificates, and privileged access, across cloud, on-premises and AI infrastructure. The company says more than 1,300 organizations use it, among them LG, First American Financial, OpenRouter, Wise and the US government; SecurityWeek also mentions Airbus, Volkswagen and Hugging Face. It says it has had positive cash flow for a long time and that its open-source project has passed 30,000 stars on GitHub.
The money will go toward strengthening Agent Vault, continuing with secrets, certificate and privileged access management, and hiring more than 100 people across engineering, sales, marketing, product and design, among other areas.
Why it matters · analysis and opinion
Giving an agent a password is giving it the key to everything that password opens, and the agent can make mistakes or be tricked. Infisical's idea, that the agent never sees the secret and everything passes through a point that logs it, carries over to AI a classic security principle: grant the minimum access and leave a trail. For a small business already testing agents with access to email, invoicing or the cloud, the useful question is where those keys sit today. If they are pasted into a file or into the message to the agent, it is better to move them into a manager and limit what each one can do. It remains to be seen how this approach fits each company's real integrations and at what price.
Official source: Infisical · Written with the help of AI: how we make the news
