Finn Lobsien retweeted
Congrats to @matsiiako, @dangtony98, @maidulll and @infisical (W23) on their $40M Series B!
Infisical is the open source security infrastructure that manages API keys, passwords, and certificates for developers, machines, and AI agents.
When an AI agent needs access to a sensitive system, Infisical hands it a fake credential and swaps in the real one through a proxy. The agent does its job without ever seeing the actual key.
More than 1,300 organizations use the platform, including Airbus, Hugging Face, and the US Government, and they just passed 30,000 stars on GitHub.
forbes.com/sites/rashishriva…
Finn Lobsien retweeted
Infisical helps secure tens of billions of credentials every day across defense, pharma, finance, and physical infrastructure.
come join us to redefine how high growth startups and fortune 100s think about their security stack as ai transforms how we build software.
we’re hiring for 100+ positions across security, infrastructure, product, engineering, and more!
We’re excited to announce we have raised a $40M Series B!
This next round of funding lets us continue to strengthen our secrets, certificate, and access management products.
We'll also expand the capabilities of Agent Vault, so engineers adopting AI agents can give them access without handing over the underlying credentials.
Thank you to @eladgil, @GradientVC, @ycombinator, and our other investors, as well as our customers, community, and team for helping us get here!
Finn Lobsien retweeted
We’re excited to announce we have raised a $40M Series B!
This next round of funding lets us continue to strengthen our secrets, certificate, and access management products.
We'll also expand the capabilities of Agent Vault, so engineers adopting AI agents can give them access without handing over the underlying credentials.
Thank you to @eladgil, @GradientVC, @ycombinator, and our other investors, as well as our customers, community, and team for helping us get here!
Legacy security tools make you choose between velocity and security. Super excited to continue fixing that and contribute to security infrastructure devs love.
Today, we’re announcing Infisical’s $40M Series B at a $600M valuation, led by @eladgil.
AI has made it 10x easier to write code, 10x easier to find vulnerabilities, and given autonomous agents access to some very sensitive systems.
The problem is that much of today’s security infrastructure wasn’t built for any of this.
We’re changing this with @infisical. Today, over 1,300 organizations trust us to secure their infrastructure, including Airbus, First American Financial, Hugging Face, OpenRouter, and Wise.
Proud of what our team has built so far. Even more excited about what we have ahead of us.
Back to work.
Finn Lobsien retweeted
Today, we’re announcing Infisical’s $40M Series B at a $600M valuation, led by @eladgil.
AI has made it 10x easier to write code, 10x easier to find vulnerabilities, and given autonomous agents access to some very sensitive systems.
The problem is that much of today’s security infrastructure wasn’t built for any of this.
We’re changing this with @infisical. Today, over 1,300 organizations trust us to secure their infrastructure, including Airbus, First American Financial, Hugging Face, OpenRouter, and Wise.
Proud of what our team has built so far. Even more excited about what we have ahead of us.
Back to work.
Finn Lobsien retweeted
Infisical 🤝 Northflank
nice, @Railway made me switch to @infisical to all my envs and @northflank for all my critical apps, ty opus 5.5
Finn Lobsien retweeted
If you’re a Railway user acting on today’s security incident, here are some best next steps:
> Rotate any potentially exposed secrets and credentials
> Review audit logs for suspicious access
> Set up automated rotation for DB credentials and API keys
> Use short-lived, dynamic credentials wherever possible
> Consider fetching secrets at runtime instead of storing them directly in Railway
@infisical supports automated rotation for 50+ secret types, dynamic secrets, and Railway secret sync if you need a place to start.
An urgent notice from the Railway team
blog.railway.com/p/security-…
Finn Lobsien retweeted
over the past few weeks, we leaked thousands of API keys across the NYC subway!
please don't try this at home.
Finn Lobsien retweeted
Access denied. Credential required.
On October 21 at 1 PM ET, see how Agent Vault gives AI agents access to the services they need without ever exposing the credentials behind them
We’ll walk through Agent Vault live and show how it works with tools like Claude Code and Codex, and answer your questions.
Save your spot: infisical.com/webinars/live-…
Finn Lobsien retweeted
A credential an AI agent can read, is a credential it can leak.
Introducing Agent Vault: a new Infisical product that lets Claude Code, Codex, and other agents call the APIs and services they need, without holding real credentials.
With Agent Vault:
> Your agents work as they normally do, with no code changes
> A prompt-injected agent can only reach preapproved HTTP services, down to exact methods and paths
> Agent sessions expire on a schedule you set, and every request is logged
Finn Lobsien retweeted
If your agents run in @daytonaio sandboxes, you can now manage their keys in Infisical alongside every other secret your team uses!
Infisical now syncs copies of secrets straight into Daytona's secret store. Daytona keeps the real values out of the sandbox, and Infisical keeps the secret values current. Rotate a key in Infisical and every sandbox that references it gets the new value on the next sync, with no changes to your create calls.
Available on all plans, including free!
Finn Lobsien retweeted
DevOps / DevSecOps folks, how are you managing secrets in Terraform?
In this video, I walk through .tfstate, ephemeral values, write-only arguments, and how a secrets manager fits into the picture.
Curious what you're doing out in the wild. What's working well for you? 😃
Finn Lobsien retweeted
You can now give someone access to production Redis without giving them the password!
You put the password into Infisical once. After that, you decide who has access. Anyone with permission can open Redis from their browser or terminal without ever seeing the password. Infisical keeps logs for every command.
Live in Infisical PAM today! If you haven't looked at Infisical for privileged access management yet, the list of supported account types is growing every week. Docs below 👇
Finn Lobsien retweeted
"How do you share .env files as a team?"
I see this question all too often. The answer is "You don't". And you actually don't need a .env file at all!
In this video I break down what environment variables are, what the environment really is, and how runtime injection with centralized secrets can help deliver env vars to the environment and solve the problem of secret sprawl.
Ditch the .env file. There's a better way.
Finn Lobsien retweeted
I pasted this API key into Claude and it told me to rotate it immediately.
Is this supposed to make it harder to read or something?
Finn Lobsien retweeted
Most people know Infisical for secrets management but you can also use it for privileged access management (PAM) to access resources like databases too.
This release is a step forward specifically in Infisical’s PAM account discovery functionality where we can help surface existing accounts.
New in Infisical: Postgres account discovery!
Infisical PAM can now scan your Postgres instances and surface every account that can log in, including the ones no-one is tracking. Pick the accounts you want to bring under management, and rescan on a schedule to catch what changes.
No network exposure: the scan runs through your Infisical Gateway.
Live today on Enterprise. See it in action 👇
Finn Lobsien retweeted
New in Infisical: Postgres account discovery!
Infisical PAM can now scan your Postgres instances and surface every account that can log in, including the ones no-one is tracking. Pick the accounts you want to bring under management, and rescan on a schedule to catch what changes.
No network exposure: the scan runs through your Infisical Gateway.
Live today on Enterprise. See it in action 👇