Repolode
Submit
Infisical

Infisical/infisical

Open-source platform for managing secrets, certificates, keys, privileged access, and AI agent credentials in one place.

Open-source alternative to:HashiCorp Vault1Password Secrets AutomationDoppler

View on GitHubWebsite
Stars
29,909
Forks
2,364
Open issues
827
Last commit
2 hours ago

What is it?

Infisical is an open-source security platform that centralizes application secrets and configuration across environments, with versioning, rotation, dynamic credentials, and sync to services like GitHub, Vercel, and AWS Secrets Manager. It also covers secret scanning for repositories and local files, with a pre-commit hook that blocks commits containing secrets.

Beyond secrets, the platform includes a private and external certificate authority with certificate lifecycle management, a key management system accessible through an API and KMIP, and privileged access management for databases, SSH servers, and Kubernetes with session recording and approval workflows.

A newer Agent Vault component lets AI agents call APIs such as LLM providers, GitHub, and Slack through a proxy that attaches real credentials at the network boundary, so agents never receive the secrets themselves. The project can be run locally with Docker or self-hosted, and offers a CLI, SDKs in multiple languages, and an API.

Key features

  • 01Centralized secrets management with versioning, rotation, and point-in-time recovery
  • 02Dynamic secrets and secret syncs to platforms such as GitHub, Vercel, and AWS
  • 03Secret scanning for Git repositories and local files, with a pre-commit hook
  • 04Private and external certificate authority with lifecycle management and ACME/EST/SCEP enrollment
  • 05Key management system with encrypt, sign, and MAC operations via API and KMIP
  • 06Privileged access management with just-in-time access and session recording
  • 07Agent Vault proxy that keeps real credentials away from AI agents

Use cases

  • Storing and rotating database passwords and API keys across development, staging, and production
  • Preventing secrets from being committed to source repositories
  • Issuing and renewing internal TLS certificates for services
  • Granting AI agents controlled access to third-party APIs without sharing credentials

Things to know

  • The repository metadata lists the license as NOASSERTION, while the README badge says MIT, so confirm the license before relying on it.

Topics

#secret-management#security#pki#certificate-management#privileged-access-management#kubernetes#ai-agents#devsecops#acme#agents

FAQ

What is infisical?
Open-source platform for managing secrets, certificates, keys, privileged access, and AI agent credentials in one place. Infisical is an open-source security platform that centralizes application secrets and configuration across environments, with versioning, rotation, dynamic credentials, and sync to services like GitHub, Vercel, and AWS Secrets Manager. It also covers secret scanning for repositories and local files, with a pre-commit hook that blocks commits containing secrets.
Is infisical free to use? What license does it have?
infisical is open source under the Other license. Check the license terms before using it in commercial products.
Is infisical still maintained?
Actively maintained. The last commit to infisical was on Oct 22, 2026.
What can I use infisical for?
Storing and rotating database passwords and API keys across development, staging, and production Preventing secrets from being committed to source repositories Issuing and renewing internal TLS certificates for services Granting AI agents controlled access to third-party APIs without sharing credentials
Where can I get infisical?
The source code and installation instructions are on GitHub: https://github.com/Infisical/infisical

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects