README.md
Infisical is the open source security infrastructure platform that teams use for secrets, certificates, and privileged access management.
We're on a mission to make security tooling more accessible to everyone, not just security teams, and that means redesigning the entire developer experience from ground up.
Centralize your application secrets and configuration across every environment, with versioning, rotation, and leak prevention built in.
Run a complete private PKI: issue, manage, and monitor X.509 certificates from a centralized platform.
Centrally manage cryptographic keys and use them to encrypt and decrypt data across your projects.
Manage and secure access to critical infrastructure like databases and servers with policy-based controls, approvals, and full session visibility.
Capabilities that span every Infisical product.
Check out the Quickstart Guides
| Use Infisical Cloud | Deploy Infisical on premise |
|---|---|
| The fastest and most reliable way to | |
| get started with Infisical is signing up | |
| for free to Infisical Cloud. | |
| View all deployment options |
To set up and run Infisical locally, make sure you have Git and Docker installed on your system.
Linux/macOS:
git clone https://github.com/Infisical/infisical && cd "$(basename $_ .git)" && cp .env.example .env && docker compose -f docker-compose.prod.yml up
Windows (Command Prompt):
git clone https://github.com/Infisical/infisical && cd infisical && copy .env.example .env && docker compose -f docker-compose.prod.yml up
Once running, create an account at http://localhost:80.
Contributing? Check out our guide to see how to get started.
On top of managing secrets with Infisical, you can also scan for over 140+ secret types in your files, directories and git repositories.
To scan your full git history, run:
infisical scan --verbose
Install pre commit hook to scan each commit before you push to your repository
infisical scan install --pre-commit-hook
Learn about Infisical's code scanning feature here
This repo available under the MIT expat license, with the exception of the ee directory which will contain premium enterprise features requiring a Infisical license.
If you are interested in managed Infisical Cloud of self-hosted Enterprise Offering, take a look at our website or book a meeting with us.
Please do not file GitHub issues or post on our public forum for security vulnerabilities, as they are public!
Infisical takes security issues very seriously. If you have any concerns about Infisical or believe you have uncovered a vulnerability, please get in touch via the e-mail address [email protected]. In the message, try to provide a description of the issue and ideally a way of reproducing it. The security team will get back to you as soon as possible.
Note that this security address should be used only for undisclosed vulnerabilities. Please report any security problems to us before disclosing it publicly.
Whether it's big or small, we love contributions. Check out our guide to see how to get started.
Not sure where to get started? You can:
If you're reading this, there is a strong chance you like the products we created.
You might also make a great addition to our team. We're growing fast and would love for you to join us.