BusinessNews
Infisical raises $40M to secure AI agent credentials
Infisical closed a $40M Series B at a $600M valuation, led by Elad Gil. The money goes mainly into Agent Vault, which gives AI agents access to systems without ever exposing the real secret.
By: Mikola Máté Patrik · · 2 min read

What happened?
Infisical, the open source secrets management platform, announced a $40M Series B at a $600M valuation (Infisical). Elad Gil led the round, with Y Combinator and Gradient participating. The company says it is already cash-flow positive.
- More than 1,300 customers and over 10 billion secrets served per day.
- About 30,000 GitHub stars.
What is Agent Vault?
The problem is familiar: when a coding or workflow agent gets an API key, it can leak through prompt injection or careless logging. Agent Vault sidesteps this. The agent calls out through a forward proxy (HTTPS_PROXY), and the proxy injects the credential into the request in transit. The agent's code, context and logs never contain the secret.
- Access bundles: predefined permission sets that can be assigned to agents.
- Time-bound sessions, with revocation within 60 seconds according to the company.
- Audit logs for every call, showing what happened on whose behalf.
- Self-hosted deployment or cloud with US or EU regions.
What to keep in mind
There is also an MIT-licensed open source Agent Vault, but the company no longer actively maintains it. New features ship in the paid platform.
Why it matters
As agents touch more production systems, the question is no longer whether they get access but what they can see. Proxy-based credential injection stops key theft, but not prompt injection: an agent can still misuse the access it has. That is why narrow permissions and audit logs are the real point here.
Produced with the help of AI, reviewed by an editor. How we make our articles
Reviewed and edited by the Neural Daily desk. About


