Infisical is an open-source secrets manager used by engineering teams to store, sync, and govern application secrets, certificates, and privileged access across environments. This launch introduces Access Controls v2, a rework of how permissions are granted inside a project. Instead of authoring custom roles for every one-off request, admins can now scope access directly to a specific folder or environment in a few clicks, which the team says covers the majority of real-world access patterns they observed among existing users.
The update ships five default access levels, so most decisions collapse down to whether a person or machine identity should read or write secrets in a given folder. Because permissions attach to the folder or environment itself, they persist when that resource is renamed or moved, which removes a common source of drift in larger projects. Custom roles remain available for teams with more complex authorization needs, but folder-level access is meant to let individual teams manage their own scope without waiting on a project admin.
The launch is posted by co-founder and CEO Vlad Matsiiako. Infisical raised a $16M Series A led by Elad Gil, with participation from Y Combinator, Gradient Ventures, and Dynamic Fund , and the company is a YC W23 alum, so this release lands as the platform continues to push deeper into identity and auth tooling for both human developers and the growing surface of machine and agent identities calling secrets APIs.
Comments (8)
Sign in to join the discussion.
P
Priya VattiSep 10, 2026
the 'few clicks' claim is doing heavy lifting in that tweet. show me the click count on screen or it didn't happen.
T
Toralf KjeldsenSep 10, 2026
custom roles were the RBAC equivalent of shaving yaks. good riddance if this actually replaces the 80% case.
R
rustytacosSep 10, 2026
one-off folder access is basically prod-incident-at-2am mode. finally a UI that respects the reality of on-call.
C
Chiamaka O.Sep 10, 2026
the demo cuts are clean but the voiceover pacing is a little too calm for a security launch. sound like you actually caught someone with this.
M
Miguel FerreiraSep 10, 2026
tweet is missing a hook. 'introducing v2' buries the actual pain, lead with the 2am escalation you're killing next time.
Y
Yuki M.Sep 10, 2026
curious how this maps to agent identities. if my agent needs 4 hour scoped access to one env, does it get a real ephemeral principal or just a token with a TTL?
B
Benazir RahimiSep 10, 2026
any audit trail on these one-offs? auditors love the phrase 'temporary access' the way cats love water.
A
Anya VolkovSep 10, 2026
been meaning to rip out our janky homegrown role system for months, this might finally be the excuse. adding to the 'next sprint' pile which is where dreams go to die.
Work With Us
Book an intro call to explore our suite of services. We might have a waitlist.
Infisical
Security Infrastructure for Developers and Agents
Security Infrastructure for Developers and Agents
Tags
TLVC Rating
Community Rating
No ratings yet
to rate this launch.
Infisical is an open-source secrets manager used by engineering teams to store, sync, and govern application secrets, certificates, and privileged access across environments. This launch introduces Access Controls v2, a rework of how permissions are granted inside a project. Instead of authoring custom roles for every one-off request, admins can now scope access directly to a specific folder or environment in a few clicks, which the team says covers the majority of real-world access patterns they observed among existing users. The update ships five default access levels, so most decisions collapse down to whether a person or machine identity should read or write secrets in a given folder. Because permissions attach to the folder or environment itself, they persist when that resource is renamed or moved, which removes a common source of drift in larger projects. Custom roles remain available for teams with more complex authorization needs, but folder-level access is meant to let individual teams manage their own scope without waiting on a project admin. The launch is posted by co-founder and CEO Vlad Matsiiako. Infisical raised a $16M Series A led by Elad Gil, with participation from Y Combinator, Gradient Ventures, and Dynamic Fund , and the company is a YC W23 alum, so this release lands as the platform continues to push deeper into identity and auth tooling for both human developers and the growing surface of machine and agent identities calling secrets APIs.
Comments (8)
the 'few clicks' claim is doing heavy lifting in that tweet. show me the click count on screen or it didn't happen.
custom roles were the RBAC equivalent of shaving yaks. good riddance if this actually replaces the 80% case.
one-off folder access is basically prod-incident-at-2am mode. finally a UI that respects the reality of on-call.
the demo cuts are clean but the voiceover pacing is a little too calm for a security launch. sound like you actually caught someone with this.
tweet is missing a hook. 'introducing v2' buries the actual pain, lead with the 2am escalation you're killing next time.
curious how this maps to agent identities. if my agent needs 4 hour scoped access to one env, does it get a real ephemeral principal or just a token with a TTL?
any audit trail on these one-offs? auditors love the phrase 'temporary access' the way cats love water.
been meaning to rip out our janky homegrown role system for months, this might finally be the excuse. adding to the 'next sprint' pile which is where dreams go to die.