Infisical is an open-source platform that centralizes secrets, certificates, keys, and privileged access with versioning, rotation, and leak prevention. It targets the problem of teams securely managing and syncing secrets and certificates across environments.
Project overview
It combines secrets management, private PKI certificate lifecycle, and syncs to platforms like GitHub, Vercel, AWS, and Kubernetes under an MIT license with self-hosting options, addressing secret leakage risks directly.
Project type
Infrastructure
Deployment
Refer to project documentation
License
License pending
Best for
Developer and enterprise teams that need to manage and sync secrets, certificates, and privileged access across environments without leaking secrets.
Key capabilities
Centralize application secrets and configuration across environments with versioning, rotation, dynamic secrets, and secret syncs to platforms like GitHub, Vercel, and AWS.
Issue, manage, and monitor X.509 certificates from a centralized platform, including internal CA, external CA integration, and lifecycle management.
Limitations and risks
The repository's ee directory contains premium enterprise features that require an Infisical license, so features in that directory are not part of the self-hosted open-source deployment; a paid dependency applies if you need them.
Getting started
Setup is easy: clone the repository, copy .env.example to .env, then run docker compose -f docker-compose.prod.yml up and create an account at http://localhost:80. A single documented docker compose command starts the full stack. No coding is required.
Evidence and sources
README: Sync secrets/configs across your team/infrastructure and prevent secret leaks.
README: Infisical is the open source security infrastructure platform that teams use for secrets, certificates, and privileged access management.
README: Centralize your application secrets and configuration across every environment, with versioning, rotation, and leak prevention built in.
README: Run a complete private PKI: issue, manage, and monitor X.509 certificates from a centralized platform.
README: you can also scan for over 140+ secret types in your files, directories and git repositories.