- Starting price
- $20/ annually
- Pricing
- Free plan
- Website
- infisical.com
About Infisical
Infisical is an all-in-one platform to securely manage application secrets, certificates, SSH keys, and configurations across teams and infrastructure. It serves developers, security and operations teams needing centralized secret management across Kubernetes, Terraform, CI/CD, and local development, on-prem and cloud.
Key Features
In practice, teams rely on Infisical to store and use credentials where they run, rotate them automatically, and manage certificates across cloud and on-prem environments:
Secrets Management
Centralized storage and access controls for secrets across Kubernetes, Terraform, CI/CD, and local development, with on-prem and cloud coverage.
Dynamic Secrets & Secret Rotation
Generate per-client secrets on demand and rotate them regularly to minimize credential leakage.
PKI
Set up Private Certificate Authority hierarchies and manage the full lifecycle of X.509 certificates for services, applications, and devices.
SSH
Issue ephemeral SSH credentials for short-lived, centralized access to infrastructure.
Summary
Best for security teams, platform/DevOps engineers, and SREs managing secrets, certificates, and SSH access across cloud and on-prem.
Pricing
View pricingPlans and prices as listed on infisical.com as of Oct 7, 2026.
Free
$0 / forever
- 5 identities, unlimited projects
- 100+ integrations
- Agent Proxy
- Secret Sharing
- Secret References and Imports
- Secret Overrides
- 2FA
- Unlimited Projects (separate from 5 identities)
Pro
$20 / billed annually
- Everything in Free, plus:
- Unlimited identities
- Access Controls
- Secret Rotation
- SAML SSO
- 30-day Audit log retention
- Secret Versioning
- Point-in-time Recovery
- Honey Tokens
Advanced
$40 / billed annually
- Everything in Pro, plus:
- Dynamic Secrets
- SOC 2 Type II
- Higher Rate Limits
- Custom Roles
- SSO & MFA enforcement
- 90-day Audit log retention
- Temporary Access
Enterprise
Custom / billed annually
- Everything in Advanced, plus:
- Approval Workflows & Access Requests
- LDAP
- SCIM
- Custom Audit log retention and rate limits
- User Groups
- 99.99% SLA
- KMIP (add-on)
- External KMS & HSM Support
- Audit Log Streaming (SIEM)
- Sub-organizations
- Self-hosting or Dedicated Infrastructure
