Infisical Secrets and Identity Platform

An open-source secrets management and identity security platform securing over 10 billion secrets daily for organizations including Hugging Face, Lucid, Writer, OpenRouter, and Excalidraw. The platform combines three product modules into a single stack: secrets management with environment-based scoping, Git-style version control, automatic rotation, and dynamic short-lived credential issuance scoped per request; certificate management with a full private PKI system that automates certificate lifecycle from issuance through renewal and revocation, including continuous discovery of deployed certificates across environments and automatic sync to AWS load balancers; and privileged access management that replaces standing admin credentials with just-in-time identity-based sessions for databases and infrastructure, complete with session recording and AI-generated summaries of privileged actions taken during each access window. Security certifications include SOC 2 Type II, HIPAA, and FIPS 140-3 compliance, with AES-GCM-256 encryption at rest and in transit. Fine-grained role-based access control scopes permissions by environment, path, and identity, while approval workflows require reviews for sensitive changes before reaching production. Self-hosted deployment is available via Docker and Kubernetes, or teams can use the managed cloud with 99.99 percent availability SLAs. Integration support covers AWS, Azure, GitHub, Kubernetes, Docker, Terraform, GitLab, Google Cloud, Ansible, Vercel, Heroku, and Cloudflare through native sync connectors.