About Infisical
Infisical sells an all-in-one platform to manage application secrets, certificates, and privileged access across cloud, on-prem, and AI infrastructure. Infisical describes one platform, one identity model, and one place to audit every credential that applications and agents use. Infisical prices its four product lines separately, and a customer can buy one as a point solution or several to use Infisical as a platform. Infisical products each have an open-source core under the MIT license, free forever for those who self-host.[1][3]
Infisical syncs, rotates, and audits application credentials across every environment and workload. Infisical scopes access to secrets by environment, path, and identity with fine-grained RBAC. Infisical rotates credentials on a schedule and issues short-lived, on-demand secrets scoped to each request. Infisical can require reviews for sensitive changes and access requests before they reach production.
Infisical offers a plan for individuals and personal projects with 5 identities, unlimited projects, 3 environments, and 10 secret syncs. Infisical offers a plan for scaling teams with complex security needs that includes everything in Pro plus dynamic secrets, gateways, full secret rotation, custom roles, and temporary access. Infisical sells to large orgs needing SCIM, custom SLAs, and dedicated support, with a plan that includes everything in Advanced plus LDAP, SCIM, user groups, approval workflows, KMIP, external KMS and HSM, audit log streaming, sub-organizations, and a 99.99% SLA.[3]
Customers decide which tools and APIs each agent can reach, and everything else is blocked at the proxy. Infisical routes every request an agent makes through Infisical and logs it.[3]
Infisical stands up private CAs and automates the full certificate lifecycle. Infisical shows every CA and certificate across infrastructure, with alerts and expiry warnings. Infisical continuously discovers certificates already deployed across environments. Infisical issues and pushes certificates directly to AWS load balancers and other external systems automatically. Infisical sells to teams running internal PKI at small scale, with core internal CA and certificate management, ACME-compatible external CA integration, API and ACME enrollment, and a certificate dashboard. Infisical also sells to organizations with existing PKI, device fleets, or compliance requirements, with CAs and active certificates priced per unit and unlimited SANs per certificate. Infisical offers wildcard SANs, externally-signed intermediate CAs, Microsoft AD CS, and EST enrollment to those organizations.[1][3]
Infisical replaces standing admin credentials with short-lived, identity-based sessions. Infisical sessions are fully audited across infrastructure, databases, and sensitive systems. Infisical lets users launch into databases and infra from the browser. Infisical offers a plan for teams needing access control and session auditing, with up to 50 accounts, access requests, approval workflows, credential rotation, SSH certificate auth, and command blocking.[3]
Infisical Cloud runs in US and EU regions, and the MIT-licensed core is self-hostable at no cost on any plan. Infisical plans include unlimited projects, two-factor authentication, secret sharing, community support, pay by card, and annual billing. Infisical offers licensed, supported deployment in a customer's own infrastructure, including air-gapped. Infisical states that it is SOC 2, HIPAA, and FIPS 140-3 compliant.[3]
Infisical supports SSO through SAML and OIDC with Okta, Entra ID / Azure AD, Google, JumpCloud, Keycloak, Auth0, PingOne, and general OIDC. Infisical supports SCIM provisioning for automatic user provisioning and deprovisioning from an IdP. Infisical can push audit events to an external SIEM, including non-HTTP providers via Fluent Bit. Infisical supports AWS KMS, GCP KMS, AWS CloudHSM, and PKCS#11 HSMs so root key material stays in the customer's infrastructure. Infisical can be used to manage secrets in cloud, infra tools, frameworks, and more.[1][3]
Infisical on the record