Secrets, certificates and access management platform
Open-core platform to manage application secrets and environment variables across teams and infrastructure, with SDKs, a CLI and secret scanning.
Infisical stores secrets per project and environment and delivers them to applications through a CLI, SDKs, a Kubernetes operator and integrations with CI/CD and cloud platforms. It adds secret versioning, rotation, dynamic secrets and an internal PKI.
It can be self-hosted or used as a cloud service. Most of the code is MIT-licensed; enterprise features live in separately licensed directories.
MIT · MIT License (core) · Open source
Open core: code outside ee/ directories is MIT; ee/ is under a separate commercial licence. GitHub does not detect the licence.
Checked by ThreatWire against the repository's licence file on 2026-10-20. GitHub detects: NOASSERTION.
No published advisory found for Infisical in GitHub repository advisories. That does not mean the tool has no vulnerabilities.
Sources: GitHub repository advisories · checked 2026-10-20.
Community fork of Vault under an open-source licence
Linux Foundation project that forked HashiCorp Vault's last MPL-licensed code to keep an open-source secrets manager with a compatible API.
Identity and access management for apps and services
Identity provider with single sign-on, OpenID Connect, OAuth 2.0 and SAML, user federation, MFA and fine-grained authorisation. A CNCF project.
Secrets management and encryption as a service
Secrets manager that stores and issues credentials, certificates and keys, with dynamic secrets, encryption as a service and detailed audit logs.
Self-hosted identity provider
Identity provider supporting OIDC, OAuth 2.0, SAML, LDAP, RADIUS and a proxy provider, with flow-based customisation of every login step.
All-in-one scanner for images, code, IaC and clusters
Scanner from Aqua Security that finds vulnerabilities, misconfigurations, secrets and licences in container images, file systems, repositories and Kubernetes.
Secret scanner for Git repositories and files
Fast secret scanner for Git history, directories and stdin, with regex and entropy rules for API keys, tokens and passwords.
