San Francisco-based Infisical has raised $40 million in Series B funding at a $600 million valuation as it expands its cybersecurity platform from secrets management into infrastructure security for autonomous AI agents.
The round was led by investor Elad Gil, with participation from Y Combinator, Gradient Ventures, Gallery Ventures, Pace Capital and Dynamic Capital.
Unlike many venture-backed infrastructure startups, Infisical says it was already cash-flow positive before raising the new capital.
The company reports more than 1,300 customer organizations, including LG, Wise, OpenRouter and First American Financial, alongside US government users.
What Is Infisical?
Infisical builds software for managing credentials and access to sensitive computing systems.
Modern applications rely on thousands of digital secrets, including database passwords, API keys, encryption credentials and authentication tokens.
These secrets are used by developers, servers, automated deployment pipelines and cloud applications.
Storing them inside source-code repositories or distributing them manually introduces security risks.
Infisical centralizes credential management and allows authorized systems to retrieve the information they need without exposing secrets unnecessarily.
Its platform supports secret versioning, access controls, auditing, credential rotation and integration with development workflows.
The company has expanded into digital certificate management and privileged access management, allowing organizations to manage broader categories of machine and user access.
Its core technology is available through an open-source project.
Infisical reports that the project has surpassed 30,000 GitHub stars, an indication of developer interest rather than a direct measure of paying enterprise customers.
Why AI Agents Change the Security Problem
Autonomous AI agents are increasingly able to write software, access databases, interact with business systems and execute operational tasks.
That creates a new class of security problems.
An agent may require access to a production database to complete an authorized task, but giving it unrestricted credentials could also allow it to retrieve information or make changes beyond the intended scope.
The difficulty is particularly significant when agents perform long sequences of actions with limited human supervision.
Infisical is developing Agent Vault to address this issue.
Rather than handing an agent a reusable password or API key, the platform is designed to mediate access to sensitive systems while retaining control over the underlying credentials.
This creates a separation between what an agent is permitted to accomplish and the secrets required to perform the operation.
That separation could become increasingly valuable as companies deploy larger numbers of agents across different departments and applications.
The Founding Team and Commercial Traction
Infisical was founded by Vlad Matsiiako, Tony Dang and Maidul Islam and participated in Y Combinator's Winter 2023 batch.
Matsiiako, the company's CEO, has emphasized developer experience as a core part of the product's strategy.
Security systems are often bypassed when they introduce excessive friction. Infisical aims to integrate protection directly into the tools developers already use.
The company says its revenue and cash position allowed it to operate without immediately requiring another financing round.
Its latest investment is therefore intended to accelerate expansion rather than resolve an announced liquidity problem.
Infisical plans to recruit across engineering, sales, marketing and other functions, with more than 100 open positions targeted.
The company has not disclosed absolute annual recurring revenue or detailed profitability figures.
Competition With Established Security Providers
Infisical competes with established infrastructure security products, including HashiCorp Vault, and specialized secrets management services such as Doppler and Akeyless.
It also overlaps with privileged access management providers such as CyberArk.
Its differentiation comes from combining an open-source developer-oriented product with commercial capabilities spanning secrets, certificates, access and AI agent security.
That breadth may help enterprises reduce the number of separate systems used to manage credentials.
However, incumbent providers benefit from established customer relationships, mature compliance capabilities and integrations with major cloud platforms.
Infisical must show that its security controls remain dependable as deployments grow from individual developer teams to large regulated organizations.
What Will Determine Infisical's Success?
The expansion into AI agents creates an opportunity, but also introduces additional engineering challenges.
Credentials may need to be issued for individual tasks, restricted dynamically and revoked immediately when authorization changes.
Security policies must remain effective even when agents behave unpredictably or attempt actions outside their intended permissions.
Auditability also becomes important when businesses need to investigate precisely what an agent accessed or changed.
Infisical's next challenge is demonstrating that its integrated approach improves security without increasing operational complexity.
The $600 million valuation reflects expectations that machine identities and autonomous agents will become a major cybersecurity market. Infisical must convert its developer adoption into lasting enterprise infrastructure relationships.