Get a recommendation
Tell us your requirements and our advisors will help you compare and shortlist the best-fit options — free and unbiased.
A real human, fast
Someone on our team replies within one business day — no bots, no ticket queue.
Routed to the right team
Buying, selling, partnering, or investing — you reach the people who can actually help.
Independent & unbiased
No pushy sales. Just honest guidance grounded in the ecosystem.
Tailored to your context
Tell us what you need and we shape the next steps around it.
Who are you? Pick the option that fits best.
Open-source secrets management and internal PKI
Infisical is an open-source secrets-management platform that helps teams securely store, manage, sync, and rotate the secrets their applications depend on — API keys, database credentials, certificates, and environment variables. Positioned as a modern, developer-friendly alternative to HashiCorp Vault and cloud secret managers, it centralizes secrets across projects and environments, integrates with the tools and platforms teams already use, and — crucially — can be self-hosted for full control over sensitive data, since its core is open source (MIT). That combination of open source, self-hosting, and a polished experience made it a fast-rising choice for engineering teams.
The platform goes beyond basic storage. It offers a dashboard, CLI, and SDKs to manage and inject secrets; integrations to sync secrets into CI/CD, Kubernetes, and cloud platforms; and access controls, versioning, and audit logs for governance. Infisical adds capabilities like secret scanning (catching leaked secrets in code), dynamic secrets (short-lived, generated on demand), automated rotation, and an internal PKI/certificate-management module — expanding from a secrets store into a broader secrets-and-infrastructure-security platform. Its per-identity model counts both humans and machines (CI jobs, services, Kubernetes workloads).
Infisical serves development and platform teams that want open-source, self-hostable secrets management with modern features. The open-source core is free to self-host; Infisical Cloud offers a Free tier (up to 5 identities, 3 projects, 3 environments), a Pro plan around $18 per identity/month (SAML SSO, RBAC, secret versioning, 90-day audit logs), and a custom Enterprise tier (dynamic secrets, LDAP, SCIM, HSM). It competes with HashiCorp Vault, Doppler, AWS Secrets Manager, and 1Password, differentiating on open source plus self-hosting and a rich feature set.
Pricing Model
Open source + freemium
Starting Price
$0/mo
Free Options
Free version, Free trial
Cloud free (5 identities, 3 projects); self-host OSS (MIT) free.
Per identity (human or machine).
Custom pricing for advanced security and scale.
| Feature | Free / Open Source Popular | Pro | Enterprise |
|---|---|---|---|
| Up to 5 identities | — | — | |
| 3 projects and environments | — | — | |
| Secret sync | — | — | |
| CLI and SDKs | — | — | |
| Self-host free (MIT) | — | — | |
| SAML SSO | — | — | |
| RBAC | — | — | |
| Secret versioning | — | — | |
| IP allowlisting | — | — | |
| 90-day audit logs | — | — | |
| Dynamic secrets | — | — | |
| LDAP and SCIM | — | — | |
| HSM support | — | — | |
| Advanced audit | — | — | |
| Dedicated support | — | — |
Other
DevOps
Missing an integration?
API Types
SDK Availability
Verify SDK availability in vendor's documentation.
Developer Features
No reviews yet. Be the first to review Infisical.
Have a question about Infisical? Ask the community.
Compliance Standards
SOC 2 Type II
EnterpriseISO 27001
EnterpriseGDPR Compliant
GlobalHIPAA
HealthcarePCI DSS
FinanceCCPA
PrivacyFedRAMP
GovernmentCSA STAR
CloudDeployment & Data
Data Residency Options
Verify with vendor for your specific region requirements.
SecretOps platform to manage secrets and app config
Secure password manager for people and businesses.
Quick comparisons
