infisical README

The project's README from github.com/Infisical/infisical. As one markdown file: README.md.

infisical

The open-source secret management platform: Sync secrets/configs across your team/infrastructure and prevent secret leaks.

Slack | Infisical Cloud | Self-Hosting | Docs | Website | Twitter | Hiring (Remote/SF)

Infisical is released under the MIT license. Latest Infisical release Cloudsmith downloads Slack community channel

Infisical secrets management dashboard

Introduction

Infisical is the open source security infrastructure platform that teams use for secrets, certificates, and privileged access management.

We're on a mission to make security tooling more accessible to everyone, not just security teams, and that means redesigning the entire developer experience from ground up.

Features

Secrets Management:

Centralize your application secrets and configuration across every environment, with versioning, rotation, and leak prevention built in.

Certificate Management

Run a complete private PKI: issue, manage, and monitor X.509 certificates from a centralized platform.

Infisical Key Management System (KMS):

Centrally manage cryptographic keys and use them to encrypt and decrypt data across your projects.

Privileged Access Management (PAM)

Manage and secure access to critical infrastructure like databases and servers with policy-based controls, approvals, and full session visibility.

General Platform:

Capabilities that span every Infisical product.

Getting started

Check out the Quickstart Guides

Use Infisical Cloud Deploy Infisical on premise
The fastest and most reliable way to
get started with Infisical is signing up
for free to Infisical Cloud.
View all deployment options

Already self-hosting? Plan version upgrades with the Infisical Upgrade Tool.

Run Infisical locally

To set up and run Infisical locally, make sure you have Git and Docker installed on your system.

Linux/macOS:

git clone https://github.com/Infisical/infisical && cd "$(basename $_ .git)" && cp .env.example .env && docker compose -f docker-compose.prod.yml up

Windows (Command Prompt):

git clone https://github.com/Infisical/infisical && cd infisical && copy .env.example .env && docker compose -f docker-compose.prod.yml up

Once running, create an account at http://localhost:80.

Contributing? Check out our guide to see how to get started.

Scan and prevent secret leaks

On top of managing secrets with Infisical, you can also scan for over 140+ secret types in your files, directories and git repositories.

To scan your full git history, run:

infisical scan --verbose

Install pre commit hook to scan each commit before you push to your repository

infisical scan install --pre-commit-hook

Learn about Infisical's code scanning feature here

Open-source vs. paid

This repo available under the MIT expat license, with the exception of the ee directory which will contain premium enterprise features requiring a Infisical license.

If you are interested in managed Infisical Cloud of self-hosted Enterprise Offering, take a look at our website or book a meeting with us.

Security

Please do not file GitHub issues or post on our public forum for security vulnerabilities, as they are public!

Infisical takes security issues very seriously. If you have any concerns about Infisical or believe you have uncovered a vulnerability, please report it privately through our vulnerability disclosure policy at https://infisical.com/vulnerability-disclosure. Scope, safe harbour and disclosure terms are all set out there. See also SECURITY.md.

Please report any security problems to us before disclosing them publicly. For compliance documentation and security questionnaires, use [email protected] instead.

Contributing

Whether it's big or small, we love contributions. Check out our guide to see how to get started.

Not sure where to get started? You can:

We are hiring!

If you're reading this, there is a strong chance you like the products we created.

You might also make a great addition to our team. We're growing fast and would love for you to join us.

infisical (Infisical/infisical)

Searching Database…

29.8K ·GitHub
Infisical
What is this?Infisical is an open-source security platform teams use to centralize secrets, certificates, and privileged access, with syncing, rotation, and leak prevention built in.
Is this a hosted service or something I run myself?Both: there is a managed Infisical Cloud with a free tier, or you self-host it on-prem or in your own cloud and keep all data on your own infrastructure.
How do I get it running?Fastest path is signing up free for Infisical Cloud. To run it locally you need Git and Docker installed, then use the README setup for Linux/macOS or Windows and create an account.
How do my apps and CI pipelines actually pull the secrets?Apps read secrets via client SDKs (Node, Python, Go, Ruby, Java, .NET), the CLI, or the API; Infisical can also sync directly to GitHub, Vercel, AWS, Terraform, Ansible, and Kubernetes.
Is everything open source, or are some features paid?The repo is MIT expat except the ee/ directory, which holds premium enterprise features requiring a paid Infisical license; Infisical Cloud has a free tier.
Do I have to rotate secrets manually, or does it handle that?It rotates secrets on a schedule for services like PostgreSQL, MySQL, and AWS IAM, and dynamic secrets generate ephemeral credentials on demand for PostgreSQL, MySQL, RabbitMQ, and more.
What are honey tokens?Decoy credentials you plant next to real secrets; if an attacker tries to use one, your team is alerted instantly — a tripwire for leaked credentials.
Can I connect to internal servers from the browser?Yes — PAM web access lets you open SSH, PostgreSQL, Redis, and Windows RDP sessions straight from the browser, with session recording for audits.
What are similar projects?vault, casdoor, teleport, trufflehog, dotenv, pangolin, evenfire, openclaw-enterprise
Which topics is it in?pam, acme, environment-variables, secret-management, secrets, terraform, devsecops, audit-log, postgres, sso, rbac, enterprise
Creator
Infisical
Size
1.9 GB
Stars
29.8K
Updated
CommitOct 16Releasev0.166.8Oct 15
Age
4y
Commits · 90 Days