About Infisical
Infisical is an all-in-one platform to securely manage application secrets, certificates, SSH keys, and configurations across teams and infrastructure. It serves developers, security and operations teams needing centralized secret management across Kubernetes, Terraform, CI/CD, and local development, on-prem and cloud.

Key Features
In practice, teams rely on Infisical to store and use credentials where they run, rotate them automatically, and manage certificates across cloud and on-prem environments:
Secrets Management
Centralized storage and access controls for secrets across Kubernetes, Terraform, CI/CD, and local development, with on-prem and cloud coverage.
Dynamic Secrets & Secret Rotation
Generate per-client secrets on demand and rotate them regularly to minimize credential leakage.
PKI
Set up Private Certificate Authority hierarchies and manage the full lifecycle of X.509 certificates for services, applications, and devices.
SSH
Issue ephemeral SSH credentials for short-lived, centralized access to infrastructure.
Summary
Best for security teams, platform/DevOps engineers, and SREs managing secrets, certificates, and SSH access across cloud and on-prem.
Pricing
View pricingFree
$0 / mo
- Dashboard UI
- API
- CLI
- SDKs
- Kubernetes Operator
- Infisical Agent
- Webhooks
- 2FA
- Self-hosting or Infisical Cloud
- All Integrations (AWS, Vercel, GitHub Actions, GitLab CI/CD, Jenkins, Ansible, etc.)
- Secret Referencing and Overrides
- Secret Scanning and Leak Prevention
- Secret Sharing
- Community Support in Slack
Pro
$18 / mo
- All of Free plus
- Secret Versioning
- Point-in-time Recovery
- Role-based Access Controls
- Secret Rotation
- Temporary Access Provisioning
- SAML SSO
- Continous Monitoring for Secret Leaks
- IP Allowlisting
- 90-day Audit Log Retention
- Higher Rate Limits
- Priority Customer Support
Enterprise
Custom
- All of Pro plus
- Dedicated Infrastructure
- Enterprise SCIM
- LDAP Authentication
- Dynamic Secrets
- AI Security Advisor
- Approval Workflows
- Access Requests
- Gateways
- Sub-organizations
- KMIP
- KMS & HSM Support
- Audit Log Streaming
- Custom Audit Log Retention
- Custom Rate Limits
- User Groups
- Custom Roles
- 99.99% SLA
- SOC2 & PenTest Reports
- Dedicated Support Engineer