Pinned Tweet
Infisical helps secure tens of billions of credentials every day across defense, pharma, finance, and physical infrastructure.
come join us to redefine how high growth startups and fortune 100s think about their security stack as ai transforms how we build software.
we’re hiring for 100+ positions across security, infrastructure, product, engineering, and more!
We’re excited to announce we have raised a $40M Series B!
This next round of funding lets us continue to strengthen our secrets, certificate, and access management products.
We'll also expand the capabilities of Agent Vault, so engineers adopting AI agents can give them access without handing over the underlying credentials.
Thank you to @eladgil, @GradientVC, @ycombinator, and our other investors, as well as our customers, community, and team for helping us get here!
Maidul retweeted
Six months in and couldn’t be happier I joined Infisical at such a pivotal time. We’ve got an amazing team, real problems to solve, and a lot more to build.
We’re excited to announce we have raised a $40M Series B!
This next round of funding lets us continue to strengthen our secrets, certificate, and access management products.
We'll also expand the capabilities of Agent Vault, so engineers adopting AI agents can give them access without handing over the underlying credentials.
Thank you to @eladgil, @GradientVC, @ycombinator, and our other investors, as well as our customers, community, and team for helping us get here!
Maidul retweeted
Big congrats! Lots to do in security & cyber today 🔥
Today, we’re announcing Infisical’s $40M Series B at a $600M valuation, led by @eladgil.
AI has made it 10x easier to write code, 10x easier to find vulnerabilities, and given autonomous agents access to some very sensitive systems.
The problem is that much of today’s security infrastructure wasn’t built for any of this.
We’re changing this with @infisical. Today, over 1,300 organizations trust us to secure their infrastructure, including Airbus, First American Financial, Hugging Face, OpenRouter, and Wise.
Proud of what our team has built so far. Even more excited about what we have ahead of us.
Back to work.
RT @scottraywilson: Two years at Infisical, and we just announced our $40M Series B led by Elad Gil at a $600M valuation :pikachu-shocked:…
This quoted post is unavailable.
Maidul retweeted
Today, we’re announcing Infisical’s $40M Series B at a $600M valuation, led by @eladgil.
AI has made it 10x easier to write code, 10x easier to find vulnerabilities, and given autonomous agents access to some very sensitive systems.
The problem is that much of today’s security infrastructure wasn’t built for any of this.
We’re changing this with @infisical. Today, over 1,300 organizations trust us to secure their infrastructure, including Airbus, First American Financial, Hugging Face, OpenRouter, and Wise.
Proud of what our team has built so far. Even more excited about what we have ahead of us.
Back to work.
s tier propaganda on open source models
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concerning-b…
Maidul retweeted
I regret to inform you that nobody cares about your potential. Potential is nothing without execution. When you're young, everyone cares about your potential. You get used to focusing on it. But as you get older, no one cares about your potential. Just your delivery against it.
Maidul retweeted
Introducing tsrs: a Rust port of the TypeScript compiler 🦀
We are not forking TypeScript!
◆ In close collaborating with the TypeScript team
◆ Up to 8x faster than TS 7.0 & ~70% less memory
◆ Runs in WASM, so it works in your browser & on Workers
◆ Soon part of the Oxc toolchain
npx tsrs
blog.cloudflare.com/typescri…
Maidul retweeted
Greptile has raised a $50M Series B led by Menlo Ventures. The round values the company at $750M.
Greptile reviews and tests more than 1% of all PRs opened on GitHub every day. Thousands of engineering teams including Nvidia, Coinbase, Decagon, and Vanta use Greptile as their independent and central validation layer.
Fewer than 50 people, we are a small, talent-dense team of engineers and researchers in a quiet corner of San Francisco. If you’re interested in joining us, we’d love to hear from you.
Maidul retweeted
over the past few weeks, we leaked thousands of API keys across the NYC subway!
please don't try this at home.
Maidul retweeted
If you're using OpenCode, here's what I'd do following today's breach:
1. Rotate potentially exposed API keys immediately. (@infisical can automate rotation for OpenAI, OpenRouter, etc.)
2. Stop handing raw API keys to AI agents. Use a transparent proxy like Infisical Agent Vault instead.
3. Use dynamic secrets so database credentials are short-lived rather than permanent.
4. Review audit logs for suspicious activity and unauthorized access.
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
Maidul retweeted
"The purpose of software engineering is to control complexity, not to create it." – Pamela Zave
More true now than ever.
Maidul retweeted
We spent the last month moving Agent Vault OSS directly into the Infisical platform.
This is the result of that effort which will evolve into a fuller agent security infrastructure solution that is tightly integrated with the rest of our security product suite.
LFG 🚀
A credential an AI agent can read, is a credential it can leak.
Introducing Agent Vault: a new Infisical product that lets Claude Code, Codex, and other agents call the APIs and services they need, without holding real credentials.
With Agent Vault:
> Your agents work as they normally do, with no code changes
> A prompt-injected agent can only reach preapproved HTTP services, down to exact methods and paths
> Agent sessions expire on a schedule you set, and every request is logged
Maidul retweeted
A credential an AI agent can read, is a credential it can leak.
Introducing Agent Vault: a new Infisical product that lets Claude Code, Codex, and other agents call the APIs and services they need, without holding real credentials.
With Agent Vault:
> Your agents work as they normally do, with no code changes
> A prompt-injected agent can only reach preapproved HTTP services, down to exact methods and paths
> Agent sessions expire on a schedule you set, and every request is logged
Maidul retweeted
MY HOMELAB HAS NO .ENV FILES!
Tailscale + Infisical self hosted = insanely cool. If you're a homelabber, this is a must-see in my opinion. In this video, I go deep on how to:
- add devices to a tailnet
- self-host Infisical, Grafana and Nextcloud
- lock everything down with tags and ACLs
- fetch secrets only at runtime
