CISO Tribune

Vendor comparison · 2 companies

Infisical vs Valence

Infisical sells an all-in-one platform to manage application secrets, certificates, and privileged access across cloud, on-prem, and AI infrastructure. Valence sells a platform that discovers and protects human, non-human, and AI agent identities across endpoint, cloud, and SaaS. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Infisical
  • Valence
Infisical vs Valence: Products, Customers and Funding Compared
InfisicalInfisical sells an all-in-one platform to manage application secrets, certificates, and privileged access across cloud, on-prem, and AI infrastructure.infisical.comValenceValence sells a platform that discovers and protects human, non-human, and AI agent identities across endpoint, cloud, and SaaS.valencesecurity.com
What it sells
  • Secrets Management[1][3]Syncs, rotates and audits application credentials across every environment and workload.
  • Agent Vault[1][3]Agent Vault is billed per brokered request.
  • SaaS Identity Threat Detection and Response (ITDR)Monitors identity activity across SaaS to detect threats.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Privately held[2][4]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 4, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Infisical sells mainly to teams that manage credentials for applications and agents across cloud, on-prem, and AI infrastructure. Individuals and personal projects, and scaling teams with complex security needs, are named as audiences for Secrets Management plans. Large orgs needing SCIM, custom SLAs, and dedicated support are named as an audience for the plan with LDAP, SCIM, and approval workflows. Teams running internal PKI at small scale are named for the entry certificate offering, and organizations with existing PKI, device fleets, or compliance requirements for the offering priced per unit. Infisical offers Infisical Cloud in US and EU regions, and supported deployment in a customer's own infrastructure, including air-gapped.From its own pages, Valence sells mainly to security teams that need to discover, protect, and detect and respond to threats across their SaaS and AI ecosystem. Valence also addresses SaaS admins, who work with security teams on a unified view of SaaS and AI risks. Valence works with business users to understand and address risks they configured. Valence offers a route for organizations that want to develop integrations for proprietary or highly specialized SaaS apps. Valence says its platform helps find and fix risks across mission-critical SaaS applications.
Last verified
October 28, 2026November 2, 2026

Where they overlap

  • Infisical and Valence are both filed under Non-human identity security.

Where they differ, field by field

  • Infisical's primary category is Non-human identity security; Valence's is SaaS security posture.
  • Infisical is also filed under Machine identity and PKI and Privileged access management. Valence is also filed under Identity threat detection and response.
  • Infisical lists Secrets Management and Agent Vault. Valence lists SaaS Identity Threat Detection and Response (ITDR).
  • Infisical is privately held.

What it sells: Infisical

What Secrets Management does[1][3]
Can require reviews for sensitive changes and access requests before they reach production. Secrets Management is billed per identity, meaning human users plus machine identities.
What Agent Vault does[1][3]
Agent Vault is billed per brokered request. Every request an agent makes is routed through Infisical and logged. An agent only ever sees placeholders, and real secrets are attached at the proxy.

What it sells: Valence

What SaaS Identity Threat Detection and Response (ITDR) does
Valence delivers identity threat detection and response across a SaaS ecosystem. Valence monitors activity across users, service accounts, tokens, and integrations to identify suspicious access patterns, privilege abuse, and signs of compromise. Valence correlates events across applications to uncover threats that are difficult to detect in isolation.

Questions about Infisical and Valence

What do Infisical and Valence sell?
Infisical sells Secrets Management and Agent Vault. Valence sells SaaS Identity Threat Detection and Response (ITDR).
Are Infisical and Valence in the same category?
They share Non-human identity security. Infisical's primary category is Non-human identity security and Valence's is SaaS security posture.
Who owns Infisical and Valence?
Infisical is privately held.
Who are Infisical and Valence sold to?
From its own pages, Infisical sells mainly to teams that manage credentials for applications and agents across cloud, on-prem, and AI infrastructure. From its own pages, Valence sells mainly to security teams that need to discover, protect, and detect and respond to threats across their SaaS and AI ecosystem.

About Infisical

Infisical sells an all-in-one platform to manage application secrets, certificates, and privileged access across cloud, on-prem, and AI infrastructure. Infisical describes one platform, one identity model, and one place to audit every credential that applications and agents use. Infisical prices its four product lines separately, and a customer can buy one as a point solution or several to use Infisical as a platform. Infisical products each have an open-source core under the MIT license, free forever for those who self-host.[1][3]

Infisical syncs, rotates, and audits application credentials across every environment and workload. Infisical scopes access to secrets by environment, path, and identity with fine-grained RBAC. Infisical rotates credentials on a schedule and issues short-lived, on-demand secrets scoped to each request. Infisical can require reviews for sensitive changes and access requests before they reach production.

Infisical offers a plan for individuals and personal projects with 5 identities, unlimited projects, 3 environments, and 10 secret syncs. Infisical offers a plan for scaling teams with complex security needs that includes everything in Pro plus dynamic secrets, gateways, full secret rotation, custom roles, and temporary access. Infisical sells to large orgs needing SCIM, custom SLAs, and dedicated support, with a plan that includes everything in Advanced plus LDAP, SCIM, user groups, approval workflows, KMIP, external KMS and HSM, audit log streaming, sub-organizations, and a 99.99% SLA.[3]

Customers decide which tools and APIs each agent can reach, and everything else is blocked at the proxy. Infisical routes every request an agent makes through Infisical and logs it.[3]

Infisical stands up private CAs and automates the full certificate lifecycle. Infisical shows every CA and certificate across infrastructure, with alerts and expiry warnings. Infisical continuously discovers certificates already deployed across environments. Infisical issues and pushes certificates directly to AWS load balancers and other external systems automatically. Infisical sells to teams running internal PKI at small scale, with core internal CA and certificate management, ACME-compatible external CA integration, API and ACME enrollment, and a certificate dashboard. Infisical also sells to organizations with existing PKI, device fleets, or compliance requirements, with CAs and active certificates priced per unit and unlimited SANs per certificate. Infisical offers wildcard SANs, externally-signed intermediate CAs, Microsoft AD CS, and EST enrollment to those organizations.[1][3]

Infisical replaces standing admin credentials with short-lived, identity-based sessions. Infisical sessions are fully audited across infrastructure, databases, and sensitive systems. Infisical lets users launch into databases and infra from the browser. Infisical offers a plan for teams needing access control and session auditing, with up to 50 accounts, access requests, approval workflows, credential rotation, SSH certificate auth, and command blocking.[3]

Infisical Cloud runs in US and EU regions, and the MIT-licensed core is self-hostable at no cost on any plan. Infisical plans include unlimited projects, two-factor authentication, secret sharing, community support, pay by card, and annual billing. Infisical offers licensed, supported deployment in a customer's own infrastructure, including air-gapped. Infisical states that it is SOC 2, HIPAA, and FIPS 140-3 compliant.[3]

Infisical supports SSO through SAML and OIDC with Okta, Entra ID / Azure AD, Google, JumpCloud, Keycloak, Auth0, PingOne, and general OIDC. Infisical supports SCIM provisioning for automatic user provisioning and deprovisioning from an IdP. Infisical can push audit events to an external SIEM, including non-HTTP providers via Fluent Bit. Infisical supports AWS KMS, GCP KMS, AWS CloudHSM, and PKCS#11 HSMs so root key material stays in the customer's infrastructure. Infisical can be used to manage secrets in cloud, infra tools, frameworks, and more.[1][3]

Infisical on the record

Sources

Infisical full record

  1. [1]infisical.comInfisical · infisical.com · undated page, accessed October 28, 2026 · Tier A
  2. [2]Infisical | The modern security platform for developers and agentsInfisical · undated page, accessed November 10, 2026 · Tier A
  3. [3]Infisical pricingInfisical · undated page, accessed November 10, 2026 · Tier A
  4. [4]Infisical Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Valence full record

  1. [1]valencesecurity.comValence · valencesecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Israeli cybersecurity startup valence launches out of stealth with 7m in fundingValence · valencesecurity.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]SaaS Application Security Platform | ValenceValence · undated page, accessed October 29, 2026 · Tier A
  4. [4]Valence Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed October 29, 2026 · Tier C
  5. [5]The Leader in SaaS and AI Security, Built for the Agentic Era | ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  6. [6]Comprehensive Microsoft 365 Security and Risk RemediationValence Security · undated page, accessed November 4, 2026 · Tier A
  7. [7]SaaS Security Posture Management | ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  8. [8]AI Security Posture Management (AI-SPM)Valence Security · undated page, accessed November 4, 2026 · Tier A
  9. [9]Identity Threat Detection and Response (ITDR) | ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  10. [10]Valence Connector Studio | Extend SaaS Security to Any ApplicationValence Security · undated page, accessed November 4, 2026 · Tier A
  11. [11]Remediate Your Slack Security Risks | ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  12. [12]GitHub Security: Manage Risks with ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  13. [13]Google Workspace Security | Protect Your SaaS EnvironmentValence Security · undated page, accessed November 4, 2026 · Tier A
  14. [14]Salesforce Security | Protect Your SaaS EnvironmentValence Security · undated page, accessed November 4, 2026 · Tier A

Spot a factual error? Request a correction.