The open-source security infrastructure platform: Manage secrets, certificates, keys, privileged access, and AI agent access in one platform.

Community | Infisical Cloud | Self-Hosting | Docs | Website | X | Hiring (Remote/SF)

Introduction

Infisical is the open source security infrastructure platform that teams use for secrets, certificates, privileged access management, and AI agent access.

We're on a mission to make security tooling more accessible to everyone, not just security teams, and that means redesigning the entire developer experience from ground up.

Features

Secrets Management

Centralize your application secrets and configuration across every environment, with versioning, rotation, and leak prevention built in.

• Dashboard: Manage secrets across projects and environments (e.g. development, production, etc.) through a user-friendly interface.
• Secret Syncs: Sync secrets to platforms like GitHub, Vercel, AWS, and use tools like Terraform, Ansible, and more.
• Secret versioning and Point-in-Time Recovery: Keep track of every secret and project state; roll back when needed.
• Secret Rotation: Rotate secrets at regular intervals for services like PostgreSQL, MySQL, AWS IAM, and more.
• Dynamic Secrets: Generate ephemeral secrets on-demand for services like PostgreSQL, MySQL, RabbitMQ, and more.
• Secret Sharing: Share a secret with anyone through a link that expires after a set time or number of views.
• Infisical Kubernetes Operator: Deliver secrets to your Kubernetes workloads and automatically reload deployments.
• Infisical Agent: Inject secrets into applications without modifying any code logic.
• Honey Tokens: Plant decoy credentials alongside your real secrets, and get an alert as soon as someone tries to use them.

Secret Scanning

Find secrets that were committed to your code, and block commits that add new ones.

• Repository Scanning: Scan the full history of your GitHub, GitLab, and Bitbucket repositories and each new push, then review the findings in Infisical.
• Local Scanning: Scan files, directories, and git history from the CLI, and install a pre-commit hook that blocks any commit containing a secret.

Certificate Management

Issue, track, and renew X.509 certificates from internal or external CAs, and sign software artifacts.