Pomegra
Infisical's $40M Series B at a $600M valuation, led by Elad Gil, funds its push to keep credentials away from AI agents.
Key Takeaways
- Infisical raised $40M in a Series B at a $600M valuation, announced October 27, 2026.
- Elad Gil led the round, as he did the $16M Series A in 2025.
- The company says it is cash-flow positive and holds more cash than it has raised.
Lead
Infisical, the San Francisco secrets-management startup, raised a $40 million Series B at a $600 million valuation, the company announced on October 27, 2026. Investor Elad Gil led the round. Y Combinator, Gradient, Gallery Ventures, Pace Capital and Dynamic Capital also took part. The money goes toward the company's secrets, certificate and privileged-access products, and toward Agent Vault, a newer tool built to stop AI agents from ever handling real credentials.
What Does Infisical Actually Sell?
Infisical sells software that stores and controls the credentials that let systems talk to each other: API keys, encryption keys, digital certificates and privileged access. It works across cloud, on-premises and AI infrastructure. The core project is open source and has passed 30,000 GitHub stars.
The company says it serves more than 1,300 organizations and 300,000 developers, and handles 10 billion secrets a day. Named customers include Airbus, Volkswagen, Hugging Face, OpenRouter, Wise and First American Financial. It was founded in 2023 and is led by co-founder and CEO Vlad Matsiiako.
It competes with incumbents such as HashiCorp Vault, now owned by IBM, and with the secrets features bundled into larger identity and cloud platforms. The open-source distribution gives it a bottom-up route into engineering teams that those vendors reach through procurement.
How Does Agent Vault Work?
Agent Vault keeps real credentials out of the agent's reach. The agent works with placeholder values, and a proxy layer injects the actual secret when a request goes out. The agent never sees the credential, and every request is logged.
The design targets a specific failure. An agent that holds a live key can leak it through a prompt injection, a log file or a bad tool call. Removing the key from the agent's context removes that path. Whether enterprises accept a proxy in the request path, with its latency and single-point-of-failure questions, is untested at scale.
Why Did Investors Pay $600M for a Cash-Flow-Positive Company?
The price reflects a bet on agents becoming a large new class of non-human identity. The company has said it has been cash-flow positive for a long time. It has also said it holds more money in the bank than it has raised, which is about $60M in total across all rounds, according to SecurityWeek.
That changes how the round reads. This is not a company funding its runway. The Series B is growth capital taken from an investor who had already led the prior round, and Gil reportedly pre-empted this one. A repeat lead with a pre-empt signals conviction, but it also means the price was set by one buyer, not by a competitive process.
The valuation is also a step up from a Series A of just $16M in 2025. The Series A valuation was not disclosed, so the size of the markup is unknown.
What Does the Money Fund?
Infisical plans to hire for more than 100 positions across engineering, sales, marketing, product and design. It will continue investing in secrets, certificate and privileged-access management, and will increase its focus on Agent Vault.
That split matters. The existing products generate the revenue and the customer base. Agent Vault is the new thesis the valuation leans on. If agent adoption stalls inside enterprises, the core business still supports the company. If it accelerates, Infisical has a product positioned for it.
What Comes Next?
Agent security is attracting other startups, including Asymptote Labs and Mave, and larger identity vendors are likely to ship their own agent-credential features. Infisical's advantage is an installed developer base and open-source adoption. Its risk is that a proxy-based approach becomes a feature inside platforms customers already pay for.
Expect the next measurable signals to be Agent Vault customer counts and whether the company discloses revenue. Neither has been published.
Outlook
Infisical has turned a self-sustaining secrets-management business into a $600M bet on AI agent security, backed by the same investor who led its Series A. The round is large relative to its prior funding but modest relative to its cash position, which limits the pressure to spend. The test is whether Agent Vault becomes a standard control or gets absorbed by larger platforms.
