Infisical’s $40M Series B at $600M Backs AI-Agent Access

San Francisco-based Infisical raised a $40 million Series B at a stated $600 million valuation on October 27, 2026, led by Elad Gil, with Gradient Ventures and Y Combinator participating, according to Forbes’s financing report. The funding backs an expansion from managing credentials for software and infrastructure to controlling what AI agents can access without giving them reusable secrets.

CEO Vlad Matsiiako wrote “We didn't have to raise this round” in Infisical’s announcement, which described the company as long cash-flow positive, said it held more cash than it had ever raised, counted more than 1,300 customer organizations including the U.S. government, and outlined hiring for more than 100 positions. Gallery Ventures, Pace Capital and Dynamic Capital also participated.

Why Infisical raised despite positive cash flow

The financing gives Infisical room to accelerate development across its existing security products and Agent Vault, its newer product for AI-agent access. Positive cash flow suggests the company could fund at least some expansion from its own resources; it does not establish how quickly it could support a wider product buildout and hiring plan that way. Raising capital lets management pursue those investments sooner, though no budget by product or team has been disclosed.

The planned work spans secrets management, certificate management and privileged access management. Those products cover related but distinct problems: storing and distributing application credentials, issuing and renewing certificates used to establish identity, and governing entry to sensitive systems. Agent Vault extends the access-control problem to software agents that may use tools and services on a person’s or organization’s behalf. The strategic premise is that a buyer already managing credentials for applications and employees may also need policies for agents; that is an inference about the opportunity, not a disclosed sales result.

The customer count matters as evidence of a broader installed base, but it is a company-wide figure. It does not identify how many organizations have bought Agent Vault, how many are using the preview, or what portion of revenue comes from agent security. Likewise, advertised openings indicate a planned increase in capacity rather than completed hiring. The distinction matters because the valuation is being discussed in connection with a newer category whose commercial scale is undisclosed.

What the valuation measures

Infisical’s $40 million funding round compared with its stated $600 million valuation.

The investment equals about 6.7% of the stated valuation when the round is divided by the company value. That ratio puts the size of the financing in context, but it is not a verified ownership stake. The available deal description leaves the pre-money versus post-money basis, any secondary sale and the rights of new shares unspecified.

If the valuation is post-money and the entire investment buys newly issued shares on identical economic terms, the round would represent about 6.7% of the company after closing. If the valuation is pre-money under the same simplifying assumptions, the investment would represent 6.25% after closing. Neither scenario establishes the actual capitalization table; the calculations show why transaction structure matters before translating a funding amount into dilution.

The price reflects investor expectations about future growth rather than a published measure of Agent Vault’s current traction. The available deal terms establish the amount, stated valuation and lead investor, while the detailed operating claims remain company disclosures. Without product-level revenue or adoption figures, readers cannot isolate how much of the price rests on established credential products and how much on the potential market for AI-agent controls.

Agent Vault extends credential management into access control

Infisical Agent Vault passes an authorized agent request through a proxy while withholding the underlying credential.

Infisical’s Agent Vault product page labels the commercial service a preview and describes a forward proxy that attaches a real credential to an authorized outbound request while keeping it out of the agent’s environment. Access bundles define the services an agent may reach, sessions can expire or be revoked, and request logs show allowed and denied activity. Features and pricing may change during the preview.

That design builds on the credential business in a specific way. An organization still has to hold and govern the secret, but the agent receives a permitted path to a service instead of the secret itself. The proxy supplies the credential when a request meets the configured rules. This changes the immediate exposure risk if an agent’s context or files are inspected, while leaving decisions about what an authorized agent may do to the organization’s access policy.

Access bundles can narrow a service by HTTP method or path, and time-bound sessions limit how long permission lasts. Those controls make the product more than a place to store API keys: it also determines which requests agents may make and retains a record of them. The product description sets out intended capabilities, not independently measured performance across customer deployments.

The hiring plan and new funding increase Infisical’s ability to pursue that design across its platform. The next commercial evidence will be whether organizations move from preview use to sustained deployment and whether agent access becomes a meaningful business alongside secrets, certificates and privileged access. Until the company discloses that split, its established customer base and its agent-security opportunity remain distinct measures.