Infisical

Open-source platform for managing application secrets, certificates, SSH keys, and configuration across teams and infrastructure. Delivers centralized secrets with end-to-end encryption, identity-based access control, and secure runtime delivery.

Trusted by organizations such as Hugging Face and used by thousands of teams. Infisical differentiates from alternatives like HashiCorp Vault by bundling secrets management, certificate lifecycle, and privileged access in a single developer-focused product with simpler setup and prebuilt integrations for Kubernetes, Terraform, and CI/CD.

Key capabilities:

• Centralized secrets management with audit logs, approval workflows, and temporary access policies
• Dynamic secrets and secret rotation to reduce credential sprawl and blast radius
• Certificate lifecycle management with automated issuance and renewal across internal and external PKI
• Privileged access management with just-in-time, identity-based access to infrastructure
• Integrations with Kubernetes, Terraform, GitHub Actions, Docker, Ansible, and major cloud secret managers
• Self-hosted deployment or managed cloud with AES-GCM-256 encryption

Teams use Infisical to inject secrets into CI/CD pipelines and runtime environments, manage database and API credentials across staging and production, and control certificate renewal for services and load balancers. The CLI and SDKs support local development workflows, while the agent integrates with container orchestration and serverless platforms.