Infisical

We just finished Q1 and it was the best quarter in Infisical’s history. A few highlights: → Onboarded many more awesome customers including global enterprises like Airbus and Wise as well as fast-growing startups like OpenRouter and Clay. → User signups are up 84% quarter-over-quarter. Even more growth is coming from agents using Infisical natively. → Net revenue retention keeps going up as customers are expanding product adoption and committing to Infisical as a centralized identity security platform. We’re lucky to be an increasingly critical part of their infrastructure and security stack. → Launched new awesome products including our latest open source project Agent Vault! To help us scale what's working, I'm extremely excited to welcome Garrett Gibbs as our Head of Sales! We are hiring across every possible role: sales, solutions, engineering, recruiting, marketing, and more. Please reach out to me or Garrett Gibbs if you want to talk about any of the open roles.

I'm excited to share that I've joined Infisical as Head of Sales. After a few decades of experience in software across cybersecurity, AI, and observability, I've learned to recognize the difference between hype and the real thing. The most successful companies tend to have the same characteristics: they deliver a product developers actually want and get real value from, operate in a growing market that's ripe for disruption, and are led by a passionate founding team that knows how to solve hard problems, build great products, and do it without the ego. Infisical hit all the marks. The same way Datadog had something undeniably different when I joined in 2020, I felt that same energy the first time I dug into what Infisical is building. Open source, loved by engineers and developers, and solving a problem that only gets more critical as AI changes how software is built and run. Secrets sprawl across codebases, machine identities are multiplying faster than anyone can track, and AI agents are being handed access to critical infrastructure with almost no governance. Security teams and platform engineers are being asked to manage a world that looks nothing like it did five years ago, and the tools most companies are using haven't kept up. Infisical is purpose-built for this moment: open source, multiple deployment options, and unified across secrets management, PKI, KMS, and PAM on a single platform. Vlad Matsiiako, Tony D., and Maidul Islam have built something special, with a growing customer list, from AI-native leaders like NVIDIA and Hugging Face to global enterprises like LG and First American Financial, that reflects just how quickly the market is recognizing it. I spent my first week at the Red Hat Summit in Atlanta with the team. The photo here tells the story better than I can. The booth was packed for three straight days with platform engineers, security leaders, and developers sharing the same pain and asking the same questions. This isn't just hype, it's a market looking for an answer. This is exactly why we're investing in our go-to-market organization now. To meet this demand, we're growing the team across Sales (Enterprise and Commercial AEs), Solution Engineering, RevOps/Enablement, and more. If you want to join a company with real traction, delivering tangible value to customers, and the chance to help shape how we scale it, let's talk. Big things ahead! #Infisical #DevSecOps #SecretsManagement #AISecurity #OpenSource

Fake secrets. Real alerts. Honey Tokens are live in Infisical! Create credentials that look real, plant them where secrets might leak, and get alerted the moment they’re used. See the guide below to get started

Infisical team is at the Red Hat Summit this week. Come say hi and grab some merch at our booth! ⛑️

I worked at Cloudflare for 5 years before joining Infisical, devastated to see so many great people I worked with caught up in yesterday's layoffs. If you're figuring out what's next my DMs are open, I'm happy to help however I can.

An attacker compromises your secrets manager. They pull a list of AWS credentials. They start using them. One of them isn't real. The moment they try it, you get an alert. You know exactly which environment was breached. You know exactly when. You know exactly which credentials to rotate. That's Honey Tokens, live in Infisical today: > Generate decoy AWS IAM credentials in seconds > Plant them across any project, alongside your real secrets > Real-time alerts the moment one is touched > One-time setup per organization

An attacker compromises your secrets manager. They pull a list of AWS credentials. They start using them. One of them isn't real. The moment they try it, you get an alert. You know exactly which environment was breached. You know exactly when. You know exactly which credentials to rotate. That's Honey Tokens, live in Infisical today: > Generate decoy AWS IAM credentials in seconds > Plant them across any project, alongside your real secrets > Real-time alerts the moment one is touched > One-time setup per organization

The Infisical team is at Google Cloud Next! Swing by Booth 2801 to chat about how we secure secrets, certificates, & agents and grab some merch! Here's a sneak peek🔥

For a while, we've been grappling with one big question: How do we give agents secure access to services without them reading any secrets? Today, we provide an early answer that at Infisical: Agent Vault, an open source, HTTP credential proxy and vault. Agents like OpenClaw or Claude Code can proxy requests through Agent Vault regardless of the method an agent uses to interact with any target service: API, CLI, SDK, MCP. With Agent Vault, we’re rethinking how secrets should be consumed by agents. We believe that vaults and/or secret stores are here to stay but the way in which secrets are delivered to fit the ergonomics of how agents operate will change drastically. In the current state, agents cannot be trusted with holding secrets directly and so there has to be a dedicated credential broker beside each agent, be it through a dedicated service, sidecar, or egress layer; to securely attach credentials onto every request to the outside world. With this proxy in place, you can inspect proxied requests and, in the future, apply firewall rules to apply restrictions to traffic flowing through the proxy. The Agent Vault project by Infisical is an early peek into a trend that we believe many folks including Anthropic, Brex, Browser Use and others have caught onto which is the separation of the agent from its credentials.