Infisical 完成 4000 万美元 B 轮融资，估值 6 亿美元，用于保障 AI 智能体访问安全

Infisical has raised $40 million in Series B funding at a $600 million valuation, bringing fresh capital to a security problem emerging alongside enterprise AI adoption: how to let software agents work inside critical systems without giving them the credentials that unlock those systems.

The round was led by Elad Gil, who also invested in the company’s Series A. Other investors include Gradient and Y Combinator. Infisical plans to use the funding to accelerate product development, expand its engineering and go-to-market teams, and build out security infrastructure for AI agents.

The San Francisco company already provides infrastructure for managing secrets, certificates, encryption keys, and privileged access. Its Agent Vault applies that security focus to agents that need to interact with APIs and enterprise services while keeping the underlying passwords and API keys outside the agent’s reach.

Agents that investigate an incident, review code, or automate an operational workflow may need access to repositories, cloud services, and business applications. Placing credentials directly in their environment creates another route for sensitive information to reach logs, model providers, or an attacker who manipulates the agent through prompt injection.

Infisical’s Agent Vault, currently labeled as a preview on its product page, brokers that access through a forward proxy. The agent sends a request toward an approved service, and the proxy applies the actual credential on the way out. Depending on the service configuration, it can attach or replace an authorization header or substitute a credential for a placeholder. The company says the underlying secret stays out of the agent’s environment, filesystem, and model context.

In practical terms, this changes where trust sits. An agent can ask an authorized service to perform work without reading the API key used to authenticate the request. Infisical documents compatibility with HTTP clients that honor the standard HTTPS_PROXY configuration, allowing the approach to fit into existing agent runtimes.

“You wouldn’t give an employee unrestricted access to every system in your company, and AI agents shouldn’t be any different,” said Vlad Matsiiako, co-founder and CEO of Infisical. “Agents need access to company systems to do their jobs, but giving them actual passwords and API keys is a major security risk. We let agents get their job done safely without ever having those credentials in their hands.”

Infisical’s documentation describes access bundles as lists of services an agent can use during a session, including APIs and MCP servers. Sessions provide time-bound access, while proxies intercept outbound requests and attach the real credentials. Session logs provide an encrypted record of requests.

That separation is useful, but credential isolation alone does not make an agent’s decisions safe. An agent with permission to modify a system can still make an unwanted modification using that permitted access. Teams therefore need to define the services and actions a job actually requires, alongside the credential controls. The relevant question becomes both whether an agent can obtain a secret and what it can accomplish without ever seeing one.

The broader enterprise shift is already visible in new identity and credential controls for AI agents. As agents take on work across business systems, security teams need a way to connect delegated authority with observable actions and revoke access when that authority ends.

Building on an Existing Security Business

Infisical says it serves more than 1,300 customers and 300,000 developers, secures 10 billion secrets daily, and has earned more than 30,000 GitHub stars for its core open-source project. Customers named in the announcement include Airbus, Volkswagen, Hugging Face, OpenRouter, Lucid, First American Financial Corporation, Wise, and Clay.

These figures describe the company’s wider platform, rather than a disclosed customer count for Agent Vault. That distinction matters: the financing supports both an established secrets-management business and its expansion into agent access infrastructure.

In his funding announcement, Matsiiako said Infisical would continue investing in secrets management, certificate management, and privileged access management while increasing its focus on Agent Vault. He also said the company is hiring for more than 100 positions across engineering, sales, marketing, product, design, and other teams.

“AI agents are becoming a new class of users inside every enterprise, and securing their access will be one of the biggest cybersecurity challenges of the next decade,” said Elad Gil. “Vlad and co-founders Maidul and Tony recognized early that AI agents would create an entirely new set of security challenges, and they’ve built Infisical into a platform that I believe can become essential infrastructure for the AI era.”

The Series B gives Infisical more resources to pursue that opportunity. Its central proposition is concrete: enterprises should be able to delegate work to agents while keeping credentials under the control of security infrastructure built to manage them.