infisical

Infisical addresses the challenge of managing secrets, certificates, and privileged access in software projects by centralising these sensitive elements with built-in versioning, rotation, and leak prevention. Unlike simpler vaults or secret stores, it offers dynamic secrets generation for databases and message brokers, secret sharing with expiry, and integration with Kubernetes via an operator that reloads deployments automatically. Its approach extends beyond secrets to include certificate management and AI agent access control, aiming to simplify security for developers, not just security teams. The project has over 30,000 stars and recent commits, indicating active maintenance, but lacks notable growth signals, suggesting it is still establishing adoption. It is less suitable for teams needing a minimalist vault for secrets only or those prioritising mature, widely adopted solutions like HashiCorp Vault or AWS Secrets Manager, especially when they do not require the additional certificate or AI agent features.

Choose this platform if you need a unified system managing secrets, certificates, and privileged access with support for Kubernetes and dynamic secrets. Consider Vault or AWS Secrets Manager if your focus is solely on secret storage with a more established ecosystem and integrations.

Commonly deployed in teams managing multi-environment applications requiring fine-grained secret versioning and rotation, especially where Kubernetes workloads need automated secret injection and reloads. Also relevant for projects integrating AI agents with controlled access or those requiring ephemeral database credentials.

Latest commit: 2026-11-14. Over the past 34 days, this repository gained 800 stars (+2.7% growth). Activity data is based on daily RepoPi snapshots of the GitHub repository.