Infisical/infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents. observed · 2026-10-17
Health v2 · maintenance only
95/100
- Activity 100
- Release rhythm 87
- Longevity 100
Flags: no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 1.0
- age_days: 1537
- days_rel: 5
- days_push: 4
- n_releases_24m: 317
Adoption not part of the score
29809 stars · 2349 forks observed · 2026-10-17
What it is AI-extracted, prompt v1, taxonomy v1, 2026-10-05, confidence 0.97
Infisical is an open‑source platform for managing secrets, certificates, and privileged access across environments. It provides a web UI, CLI, and APIs for secure storage, rotation, and delivery of credentials.
Use cases
- Store and manage API keys, database passwords, and other secrets securely across development and production.
- Automatically rotate database and cloud credentials on a schedule to reduce breach risk.
- Sync secrets to CI/CD pipelines, GitHub Actions, Terraform, and other infrastructure tools.
- Provide AI agents with temporary, scoped access to credentials without exposing raw secrets.
- Manage the lifecycle of TLS certificates, including issuance, renewal, and expiration alerts.
- Enforce fine‑grained RBAC and approval workflows for secret changes in sensitive environments.
When to choose
- You need a self‑hosted secret management solution that can run in Docker or on your own servers.
- Your organization requires secret rotation, dynamic secrets, and detailed audit logging.
- You want built‑in integrations for CI/CD, Kubernetes, and AI agent workflows.
- Fine‑grained access control and approval policies are a must for compliance.
When to avoid
- You only have a few simple environment variables and prefer a lightweight .env file approach.
- You prefer a fully managed cloud service without any operational overhead.
- Your environment cannot run Docker or lacks the resources for a web‑based service.
Facets
application · maturity active
authorization security artificial-intelligence self-hosted cli secret-management certificate-management privileged-access rbac dynamic-secrets secret-sync approval-workflows audit-logging secrets secret-rotation agent-proxy agent-vault devops docker web-server
10 sources
- readme: https://github.com/Infisical/infisical · fetched 2026-10-17 · 718a4ae07beb
- homepage: https://infisical.com · fetched 2026-09-21 · 442a04aa6536
- site_page: https://infisical.com/docs/documentation/getting-started/overview · fetched 2026-09-21 · 37152a8dd102
- site_page: https://infisical.com/docs/documentation/platform/secrets-mgmt/overview · fetched 2026-08-29 · 3a1726da67d6
- site_page: https://infisical.com/docs/documentation/platform/secret-rotation/overview · fetched 2026-09-21 · bfbee012f2c1
- site_page: https://infisical.com/docs/documentation/platform/pr-workflows · fetched 2026-09-21 · 61a4b867f9d5
- site_page: https://infisical.com/docs/documentation/platform/agent-proxy/overview · fetched 2026-08-29 · 67bdcdefe103
- site_page: https://infisical.com/docs · fetched 2026-09-21 · 87c6665df10e
- site_page: https://infisical.com/docs/documentation/platform/access-controls/overview · fetched 2026-09-21 · 4910954c0adb
- site_page: https://infisical.com/docs/documentation/platform/agent-vault/overview · fetched 2026-09-21 · 35b7decd1316
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| Infisical/infisical | main | 95 |
For agents
markdown · JSON · MCP: product_card(name="Infisical/infisical")
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem