Skip to content
InfratoApp
Layers / Security / Governance / Access control and secrets / infisical

By Infisical

ACCESS CONTROL AND SECRETS

infisical — Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents. Listed under Access control and secrets in the Security / Governance layer. 6 of 8 comparison attributes are recorded, each with the page it was read from.

Infisical is the all-in-one identity security platform for developers, machines, and AI agents. Manage identities, secrets, certs, and access.

4 OF 4 SIGNALS HELD

WebsiteDocsPricing pageInfisical/infisical

What it runs on, and what runs on it

0 cited edges
The differentiator

Computed from the stack graph, both directions. Every cited edge links the page it was read from; a vendor-added one links the vendor’s own source — this is the reason to be here rather than on the vendor’s own site.

No edges on record for infisical.

Nothing in the directory documents depending on it, and its own docs do not name what it runs on. An edge is only stored when a source states it.

Submit a documented integration →

From Infisical? No claim is needed for this: a link to your docs that names what infisical runs on is enough.

Agentic surface

1 integration

MCP servers and agent skills that name infisical as their official vendor, or that mention wrapping it. Unverified means a mention in the tool’s own description, not a citation.

Open-source signals

DOWNLOADS 30D
not measured
LAST COMMIT
not measured

A HOLLOW RING IS UNMEASURED, NOT ZERO · WE DO NOT SUBSTITUTE A PARENT COMPANY’S REPOSITORY FOR A PRODUCT THAT HAS NONE

Price

We hold no price for this product.

The seller publishes a pricing page, linked above, but we read no rate from it. Either it quotes by sales call rather than in public, or the last reading passed 21 days and was hidden rather than shown stale. If that changes — or if you publish /.well-known/pricing.json — it appears here with a capture date.

How we read prices →

What its categories ask

6 answered · 2 unanswered

8 questions declared by Access control and secrets. Most rows across the directory read like these.

ATTRIBUTEANSWEREVIDENCE · SOURCE
Audit logYes
“Audit logs record every access.[Audit logs](https://infisical.com/docs/documentation/platform/audit-logs): event coverage, retention, and SIEM streaming.”
2026-10-06
Deploymentboth2026-09-23
LicenceMIT license
“The core platform is **open source under the MIT license** and can be self-hosted.”
2026-10-06
Open sourceYes
“The core platform is **open source under the MIT license** and can be self-hosted.”
2026-10-06
Role-based accessYes
“Role-based and attribute-based access control scope access by role, project, environment, and folder path for humans and machines alike, with custom roles, grants that expire on their own, and approval workflows on changes.”
2026-10-06
Secrets managementYes
“Secrets Management Securely store, manage, and control access to sensitive application secrets across your environments.”
2026-09-15
Air-gapped installno answer on record
SSO / SAMLno answer on record

A ROW WITH NO ANSWER IS NOT A ROW WITH A “NO” · A VENDOR MAY ANSWER A BLANK ONE, MARKED VENDOR CLAIMED WITH ITS SOURCE · A DOCUMENTED VALUE IS DISPUTED, NOT OVERWRITTEN, AND STAYS VISIBLE WHILE WE RE-READ THE SOURCE

Practitioner reviews

Nobody has written one yet.

A review here is structured, not a star: hardware, scale band, what broke in production, and whether you would choose it again.

NO PERCENTAGE IS SHOWN UNDER FIVE REVIEWS · NO STAR RATINGS, EVER

More from Infisical

1 other product from Infisical. Listed under the same organisation record — see the company page.

Also in this category

25 products in Access control and secrets. Comparison defaults to within the category — pairing this with a GPU cloud would produce a page that means nothing.

ageboxNO DEPENDENTS RECORDEDCOMPARE →
agent-vaultNO DEPENDENTS RECORDEDCOMPARE →
agenthoundNO DEPENDENTS RECORDEDCOMPARE →
berglasNO DEPENDENTS RECORDEDCOMPARE →
betterleaksNO DEPENDENTS RECORDEDCOMPARE →
cerbosNO DEPENDENTS RECORDEDCOMPARE →
cliNO DEPENDENTS RECORDEDCOMPARE →
consoleNO DEPENDENTS RECORDEDCOMPARE →

USED BY = LISTED PRODUCTS DEPENDING ON IT, IN THIS DIRECTORY

Frequently asked

Is infisical open source?
Yes — it is listed as open source, and its repository is the source for the activity figures on this page rather than anything the project says about itself.
Does infisical offer audit log?
Yes. Read from their own page: “Audit logs record every access.[Audit logs](https://infisical.com/docs/documentation/platform/audit-logs): event coverage, retention, and SIEM streaming.”.
Does infisical offer open source?
Yes. Read from their own page: “The core platform is **open source under the MIT license** and can be self-hosted.”.
What does a blank mean on the infisical page?
That nobody has told us, not that the answer is no. A hollow ring is "no answer on record", which is a different state from a recorded no — and the two look different on purpose. A blank is an absence of evidence, and this page shows how many of its questions are in that state rather than quietly leaving them out.
Where do the infisical figures come from?
Each one is read from a public page — usually the vendor's own documentation or pricing page — and carries a link to it with the date it was read. Nothing here is estimated, averaged across sources, or inferred from a similar product. If a figure cannot be traced to a page, it is not published.
Can infisical change what this page says?
They can claim the listing and supply or correct values, which are then labelled as theirs. They cannot remove the page, hide a comparison they are losing, or change a figure somebody else recorded with a source. Nothing on the page is for sale. How the site is paid for is set out under money and independence at /our-data#sec5.
Something here is wrong — how do I fix it?
Dispute the value. Every figure links to the page it was read from, so a dispute names the value and gives a source that contradicts it. That is the only lever anyone has over this page, and it is the same lever for the vendor, a competitor and a reader.
Is this listing run by Infisical?
No. It is built from public sources, and no value on it came from the company. Anyone with an address at docs.agent-vault.dev can claim it for free. A claim lets the company write the tagline, description and logo, and answer blank questions or add dependencies, each marked as theirs with a source. Prices, licence and OSS figures stay as the directory read them, category changes only through our review, and each can be disputed with a source.

Cite this page

A model that quotes us should quote us correctly. The reading and its date sit inside the citation rather than beside it, because a quotation carrying only a URL goes wrong the week the URL changes.

infratoapp, “infisical — Access control and secrets”, read 6 October 2026. Audit log: Yes as published at infisical.com. https://www.infratoapp.com/products/infisical

What infisical can and cannot change here

Claiming Infisical lets its admins and editors change the tagline, description, logo, docs link and deployment model of every product that org owns — live, labelled as theirs, and logged. Answers to blank questions and dependencies go live too, marked as the owner’s and sourced; a documented answer cannot be overwritten. Everything else on this page is a stated fact with a dispute route: price, licence and OSS figures. Those columns are ungranted at the database level, so they are not a feature we withheld — they are a write that cannot happen. Name, category, website, pricing page and package names can be changed by the owner only through our review. A dispute never deletes a value; it marks it and publishes the correction.

Claim InfisicalFree · email at docs.agent-vault.dev