← All platforms
IInfisical
The developer-first one — open source, self-hostable, and it does not require a platform team to adopt.
OSS secretsApp secrets, PKI, SSHBy InfisicalSince 2022Licence: MIT (core)
- Type
- OSS secrets
- How it works
- Starts where most teams actually hurt: .env files in Slack. Syncs secrets into CI, Kubernetes and cloud platforms, with dynamic secrets and rotation in paid tiers, and an internal CA alongside. Self-host the same code you would rent.
- Scope
- App secrets, PKI, SSH
- Deployment
- SaaS + self-hosted
- Hardware / key custody
- KMS module; HSM support in paid tiers
- Pricing*
- Free (5 identities); Pro $20/identity/mo · pricing page
- Free tier
- Yes
- Licence
- MIT (core)
- Best for
- Teams escaping .env files
- Notable
- Free tier is usable, not a trial
* Published list pricing at August 2026 (vendor pricing pages, August 2026), not a quote.
Strengths
- Genuinely quick to adopt — hours, not a quarter
- Open-source core you can self-host
- Over a hundred integrations for syncing
- Certificate management included
Trade-offs
- Less proven at very large scale than Vault
- Per-identity pricing adds up on big teams
- Younger company
- Not a general-purpose cryptographic KMS
Visit Infisical → Documentation
Listed for comparison as of August 2026 — not an endorsement, and Infisical did not pay for placement. See disclosure.
Compare Infisical with…