Infisical is an open-source secrets management platform for developers. Compare its features, pricing tiers, and alternatives like Vault and Doppler.
Infisical is an open-source secrets management platform founded in 2022 by Tony Dang, Vlad Matsiiako, and Maidul Islam, who took the company through Y Combinator's W23 batch before raising a $16 million Series A led by Elad Gil in 2025. Headquartered in San Francisco, Infisical helps engineering teams store, sync, and rotate API keys, environment variables, and certificates instead of scattering them across .env files, chat messages, or hardcoded config.
The platform's core is MIT-licensed and can be self-hosted for free or run as a managed Infisical Cloud service, giving teams flexibility over where their most sensitive data lives. It ships with a dashboard, REST API, CLI, SDKs, a Kubernetes Operator, and a background agent that injects secrets into running applications at runtime.
Infisical's free, open-source core covers secret storage, referencing and overrides between environments, secret scanning to catch leaked credentials in code, webhooks for automation, and two-factor authentication, along with pre-built integrations for AWS, Vercel, GitHub Actions, and other common infrastructure tools. This means teams can run a fully self-hosted secrets manager without paying for a license, which is unusual among competitors.
Paid Pro and Enterprise tiers add the controls larger teams need for compliance and operational safety: secret versioning with point-in-time recovery, role-based access control, automated secret rotation, SAML SSO, temporary just-in-time access, dynamic secrets that generate short-lived credentials on demand, SCIM and LDAP provisioning, and hardware security module (HSM) and KMIP support for regulated environments.
Infisical prices around 'identities' — counting both human team members and machine or service accounts — rather than traditional seats. The Free plan supports up to 5 identities, 3 projects, and 3 environments with the full open-source feature set and the option to self-host at no cost.
The Pro plan costs $18 per identity per month and adds versioning, RBAC, rotation, SSO, IP allowlisting, and audit logs, while Enterprise moves to custom pricing for SCIM, dynamic secrets, dedicated infrastructure, HSM support, and a 99.99% SLA. Notably, several advanced features like RBAC and SAML SSO require a paid license key even when self-hosting on your own servers.
Yes, Infisical has a free tier covering up to 5 identities, 3 projects, and the full open-source feature set, including self-hosting.
Infisical was founded in 2022 by Tony Dang, Vlad Matsiiako, and Maidul Islam, and went through Y Combinator's W23 batch.
Infisical Pro costs $18 per month per identity, where an identity can be a human user or a machine/service account.
Yes, the MIT-licensed core can be self-hosted at no cost, though features like RBAC and SAML SSO require a paid license key.
Yes, Infisical raised a $16 million Series A in June 2025 led by Elad Gil, with participation from Y Combinator and Gradient, bringing total funding to roughly $19 million.
Infisical competes with HashiCorp Vault, AWS Secrets Manager, and Doppler in the secrets management space.