# Infisical

> Infisical is an open-source security platform that helps engineering teams manage secrets, certificates, and machine identities in one place. Born out of Y Combinator's W23 batch, it replaces scattered .env files and hardcoded API keys with a unified, MIT-licensed stack covering secrets management, dynamic secrets, rotation, secret scanning, PKI, KMS, SSH, and privileged access. Used by companies like Hugging Face, LG, and Lucid, it secures billions of secrets and is backed by Elad Gil, Google's Gradient Ventures, and Y Combinator.

- **Founded:** 2022
- **Headquarters:** San Francisco, California, United States
- **Founders:** Vlad Matsiiako (Co-Founder & CEO), Maidul Islam (Co-Founder & CTO), Tony Dang (Co-Founder)
- **Team size:** Approximately 32-50 employees
- **Products:** Secrets Management, Dynamic Secrets, Secret Rotation, Secret Scanning (Radar), PKI / Certificate Management
- **Notable:** Y Combinator W23 graduate, One of the largest and fastest-growing open-source security projects on GitHub (~27,000+ stars), 40+ million downloads and 100,000+ developers

## Products & services

- **Secrets Management** — Flagship product to store, sync, and inject secrets and configs across teams, CI/CD, and cloud with end-to-end encryption, versioning, point-in-time recovery, audit logs, and fine-grained access control.
- **Dynamic Secrets** — Generate ephemeral, on-demand credentials for databases and cloud services like PostgreSQL, MySQL, RabbitMQ, and AWS IAM that expire automatically.
- **Secret Rotation** — Automatically rotate database and cloud credentials at set intervals to reduce the blast radius of leaked secrets.
- **Secret Scanning (Radar)** — Detect and prevent hardcoded secrets from leaking into git, integrated with GitHub, GitLab, Bitbucket, and CI pipelines.
- **PKI / Certificate Management** — Run private certificate authorities, issue and monitor X.509 certificates, use certificate templates, and automate renewals including a Kubernetes PKI Issuer and EST enrollment.
- **KMS** — Centralized key management with symmetric encrypt/decrypt operations exposed via API.
- **SSH** — Issue short-lived signed SSH certificates to replace static, long-lived SSH keys.
- **PAM (Privileged Access Management)** — SSO-brokered just-in-time access to PostgreSQL, SSH servers, Kubernetes, and Active Directory with session recording, replay, and AI session insights.
- **Agent Vault (Sentinel)** — Open-source credential-injecting forward proxy that lets AI agents make authenticated requests without ever seeing, storing, or logging the underlying secret.

## Achievements

- Y Combinator W23 graduate
- One of the largest and fastest-growing open-source security projects on GitHub (~27,000+ stars)
- 40+ million downloads and 100,000+ developers
- Reached cash-flow positive before raising its Series A
- Raised $16M Series A led by Elad Gil in June 2025

## Latest updates

- **2025-06** — Raised $16M Series A led by Elad Gil to expand into unified secrets, identity, and access management.
- **2025-01** — Expanded the platform with PKI, KMS, and SSH access management offerings.
- **2026-04** — Launched Agent Vault, an open-source credential proxy that lets teams ship AI agents to production without exposing underlying credentials.

## Links

- Website: https://infisical.com
- LinkedIn: https://www.linkedin.com/company/infisical/
- Twitter/X: https://x.com/infisical
- GitHub: https://github.com/Infisical

---

Profile page: https://yespress.io/infisical
Published by YesPress — https://yespress.io
Last updated: 2026-06-14