What is Infisical?

What is Infisical?

Infisical is the open source, all-in-one platform for secrets, certificates, and privileged access management.

It provides modern security workflows — including secrets rotation, dynamic credentials, access approvals, and SSH certificate-based access — all within one platform designed for developers, infrastructure, and security teams.

Start managing secrets securely with Infisical Cloud or learn how to host Infisical yourself.

The short video below provides a guided overview of Infisical's platform and key concepts, helping you build the right mental model before diving into the rest of the documentation.

<div style={{ position: "relative", paddingBottom: "56.25%", height: 0, overflow: "hidden", maxWidth: "100%" }}> <iframe src="https://www.youtube.com/embed/2GrrScI2Qms" title="YouTube video player" style={{ position: "absolute", top: 0, left: 0, width: "100%", height: "100%", border: 0 }} allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowFullScreen ></iframe> </div>

Why use Infisical?

Managing secrets, credentials, and infrastructure access is a critical concern for engineering teams. As infrastructure scales and environments become more complex, secrets start to sprawl — across codebases, CI/CD pipelines, configuration files, and cloud services. This makes them difficult to track, rotate, and secure.

Without proper management, secret sprawl turns into risk: hardcoded credentials, unrotated keys, fragmented access controls that attackers can exploit amongst other things.

Infisical addresses this challenge by providing an all-in-one platform and workflows to:

• Securely store and manage application secrets from development to production.
• Scan code and pipelines for exposed credentials.
• Automate X.509 certificate issuance and renewal.
• Manage SSH access using short-lived, policy-driven certificates.
• Encrypt and decrypt sensitive data with centralized key control.
• Audit every access, credential use, and change.

Infisical is designed to integrate cleanly into your stack—improving security without adding complexity.

What does Infisical include?

Infisical consists of several tightly integrated products, each designed to solve a specific part of the infrastructure security surface:

• Secrets Management: Securely store, access, and distribute secrets across environments with fine-grained controls, automatic rotation, and audit logging.
• Secrets Scanning: Detect hardcoded secrets in code, CI pipelines, and infrastructure—integrated with GitHub, GitLab, Bitbucket, and more.
• Certificate Management: Issue and manage X.509 certificates using protocols like EST, with support for internal and external CAs.
• Infisical KMS: Encrypt and decrypt data using centrally managed keys with enforced access policies and full audit visibility.
• Infisical PAM: Manage access to resources like databases, servers, and accounts with policy-based controls and approvals.