secrets-management
(5)
Oasis Security
Oasis Security is a New York and Tel Aviv based cybersecurity company that built the first enterprise platform purpose-built to discover, secure, and govern non-human identities (NHIs) - the service accounts, API keys, tokens, workloads, and increasingly the AI agents that now vastly outnumber human users in modern cloud environments. Founded in 2022 by former Israeli intelligence engineers Danny Brickman and Amit Zimmerman, Oasis gives security teams a single source of truth for machine identities, automating inventory, posture management, threat detection, remediation, and full lifecycle governance. As enterprises race to deploy AI agents that can act autonomously with real credentials, Oasis positions its Agentic Access Management platform as the control layer that lets companies scale AI without losing control of who - and what - has access.
Token Security
Token Security is a New York- and Tel Aviv-based cybersecurity company that secures non-human identities (NHIs) - the service accounts, API tokens, workloads and, increasingly, autonomous AI agents that now vastly outnumber human users inside enterprises. Its agentless platform continuously discovers these machine identities across cloud, SaaS and AI environments, maps their ownership, permissions and access into a unified identity graph, and enforces least-privilege and lifecycle controls. Founded in 2023 by CEO Itamar Apelblat and CTO Ido Shlomo, the company has raised roughly $27M (Seed plus a $20M Series A led by Notable Capital) and counts customers such as GitLab, Bloomreach, HiBob, Dayforce and BetterHelp.
Shuttle
Shuttle is a Rust-native cloud platform that lets developers ship backends without writing infrastructure files. You annotate what you need in code - a database, secrets, a web server - and Shuttle provisions it and deploys to the cloud. Founded in 2019 and shaped by Y Combinator's Summer 2020 batch, the company is now repositioning as an 'AI platform engineer' that handles the deployment step where AI coding tools like Cursor, Copilot and Lovable leave off. It has drawn more than 20,000 developers and over 120,000 deployments, and raised a $6M seed round in October 2025.
Infisical
Infisical is an open-source security platform that helps engineering teams manage secrets, certificates, and machine identities in one place. Born out of Y Combinator's W23 batch, it replaces scattered .env files and hardcoded API keys with a unified, MIT-licensed stack covering secrets management, dynamic secrets, rotation, secret scanning, PKI, KMS, SSH, and privileged access. Used by companies like Hugging Face, LG, and Lucid, it secures billions of secrets and is backed by Elad Gil, Google's Gradient Ventures, and Y Combinator.
Vlad Matsiiako
Vlad Matsiiako is the Ukrainian-born co-founder and CEO of Infisical, the open-source secrets, certificate, and access management platform that processes well over 100 million secrets a day. After studying in the Netherlands, working as one of the first data scientists at bunq, picking up a master's at Cornell, and a stint at Figma, he teamed up with two Cornell friends, cycled through ideas like a VR marketplace, and finally bet on the unglamorous problem that bites every engineer: leaked API keys and sprawling .env files. Infisical went through Y Combinator's Winter 2023 batch, open-sourced its code to earn developer trust, and raised a $16M Series A led by Elad Gil in 2025.