HelloStackHelloStack
Infisical logo

Secrets, certificates, and access management on autopilot

About Infisical

Infisical is an all-in-one platform to securely manage application secrets, certificates, SSH keys, and configurations across teams and infrastructure. It serves developers, security and operations teams needing centralized secret management across Kubernetes, Terraform, CI/CD, and local development, on-prem and cloud.

Infisical screenshot

Key Features

In practice, teams rely on Infisical to store and use credentials where they run, rotate them automatically, and manage certificates across cloud and on-prem environments:

Secrets Management

Centralized storage and access controls for secrets across Kubernetes, Terraform, CI/CD, and local development, with on-prem and cloud coverage.

Dynamic Secrets & Secret Rotation

Generate per-client secrets on demand and rotate them regularly to minimize credential leakage.

PKI

Set up Private Certificate Authority hierarchies and manage the full lifecycle of X.509 certificates for services, applications, and devices.

SSH

Issue ephemeral SSH credentials for short-lived, centralized access to infrastructure.

Summary

Best for security teams, platform/DevOps engineers, and SREs managing secrets, certificates, and SSH access across cloud and on-prem.

Free

$0 / mo

  • Dashboard UI
  • API
  • CLI
  • SDKs
  • Kubernetes Operator
  • Infisical Agent
  • Webhooks
  • 2FA
  • Self-hosting or Infisical Cloud
  • All Integrations (AWS, Vercel, GitHub Actions, GitLab CI/CD, Jenkins, Ansible, etc.)
  • Secret Referencing and Overrides
  • Secret Scanning and Leak Prevention
  • Secret Sharing
  • Community Support in Slack

Pro

$18 / mo

  • All of Free plus
  • Secret Versioning
  • Point-in-time Recovery
  • Role-based Access Controls
  • Secret Rotation
  • Temporary Access Provisioning
  • SAML SSO
  • Continous Monitoring for Secret Leaks
  • IP Allowlisting
  • 90-day Audit Log Retention
  • Higher Rate Limits
  • Priority Customer Support

Enterprise

Custom

  • All of Pro plus
  • Dedicated Infrastructure
  • Enterprise SCIM
  • LDAP Authentication
  • Dynamic Secrets
  • AI Security Advisor
  • Approval Workflows
  • Access Requests
  • Gateways
  • Sub-organizations
  • KMIP
  • KMS & HSM Support
  • Audit Log Streaming
  • Custom Audit Log Retention
  • Custom Rate Limits
  • User Groups
  • Custom Roles
  • 99.99% SLA
  • SOC2 & PenTest Reports
  • Dedicated Support Engineer

More in Infrastructure

See all →