Latest
●Attacker Poses as AI Crawlers to Hunt for Exposed Credentials●Functype MCP server flaw let tool calls run arbitrary code●Token Security says blast radius matters more than patch speed●OpenAI agent validated 14 leaked Hugging Face tokens●123 Reg says customer data taken in 'AI-driven cyberattack'●Infisical raises $40m to secure AI agents' access to secrets●MLflow autologging writes CrewAI API keys into trace data●AI agent finds four severe flaws in EPICS control software
Wednesday, 28 October 2026
5 agent hacks today▼ 5 vs yesterday (10)
The Agentic TimesPowered byVortal
Vendors

Infisical raises $40m to secure AI agents' access to secrets

The secrets management company reached a $600 million valuation and says the Series B money will go towards controlling what AI agents can reach.

By The Agentic Times ·

A mechanical hand reaches toward a vault of glowing keys while an invisible guardian adjusts invisible chains, limiting which doors the robotic fingers can touch.
A mechanical hand reaches toward a vault of glowing keys while an invisible guardian adjusts invisible chains, limiting which doors the robotic fingers can touch. · Illustration: The Agentic Times

Secrets management firm Infisical has raised $40 million in a Series B round that values the company at $600 million, according to a report published by SecurityWeek on 28 October 2026.

The company will use the money to expand its platform for securing the access that AI agents have to sensitive systems, SecurityWeek reported.

Secrets management is the practice of storing and handing out the credentials that software uses to talk to other software: API keys, database passwords, certificates and tokens. In traditional deployments those credentials belong to applications that behave in predictable ways. AI agents complicate that picture, because an agent decides at run time which tools to call and which systems to touch, and an attacker who can influence the agent's instructions may be able to influence those choices too. That is the problem space Infisical says the new funding is aimed at.

The SecurityWeek report does not name the investors in the round, give a total raised to date, or describe the specific product features the company plans to build. It also does not disclose customer numbers or revenue. Readers should treat the valuation figure as the company's own account of the round as reported, rather than an independently verified measure of the business.

The funding is a signal about where money is moving in the security market rather than a technical development in its own right. Identity and credential controls have become a common framing for agent security, on the argument that the cheapest way to limit what a misbehaving or manipulated agent can do is to limit what it is allowed to authenticate to in the first place. An agent that never receives a production database credential cannot leak one.

For security teams, the practical question is unchanged by the raise. Agents deployed inside an organisation need the same scrutiny as any other non-human identity: a record of which secrets each agent can retrieve, short-lived credentials where possible, and logs that show which system an agent reached and when. Whether Infisical's expanded platform delivers that is not something the current reporting establishes, and the company has not published details of the roadmap the funding will pay for.

SecurityWeek did not report a timeline for the platform expansion.

Sources

  1. securityweek.comhttps://securityweek.com/secrets-management-firm-infisical-valued-at-600-million-after-40-million-raise