Infisical
Infisical is an open-source secrets management platform founded in 2022 that stores, rotates, and audits application credentials, certificates, and privileged access for engineering teams and AI agent deployers, with 100k+ users and notable enterprise customers including NVIDIA, LG, and Hugging Face.
- Company typePrivate
- Founded2022
- HeadquartersSan Francisco, United States
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Infisical does
Infisical is an open-source secrets management platform founded in 2022 and headquartered in San Francisco, operating as a remote-first company with team members in 15+ countries. The company provides end-to-end identity security for application secrets, certificates, and privileged access, serving developers, DevOps and platform engineers, security teams, and a growing base of AI agent deployers. Named enterprise customers span technology (NVIDIA, Hugging Face, Lucid, Writer, SolarWinds), automotive (Volkswagen), manufacturing (LG), logistics (UPS), mining (Fortescue), healthcare (Hinge Health), and professional services (Marsh McLennan), with the platform reporting 100k+ users, 27.5k+ GitHub stars, and 10 billion secrets secured daily.
The product is built around four pillars: Secrets Management (centralized storage, rotation, and delivery of credentials), Certificate Management / PKI (private CA issuance and X.509 lifecycle automation), Privileged Access Management with session recording and AI-generated summaries, and Agent Vault, a credential security proxy that prevents AI agents from exfiltrating secrets through prompt injection. Supporting modules include Secret Scanning (Radar) covering 140+ secret types, Honey Tokens for breach detection, Dynamic Secrets with 24 short-lived credential templates, Key Management (KMS), Infisical Gateway for private network access, and a Kubernetes Operator with External Secrets Operator integration. The platform ships SDKs in 10+ languages and native integrations with major cloud providers, CI/CD systems, infrastructure tools, and communication platforms; Infisical is SOC 2 Type II, HIPAA, and FIPS 140-3 compliant.
Commercially, Infisical runs a tiered subscription model: a free tier driving bottom-up developer adoption, a Pro tier at $18 per identity per month, and an Enterprise tier with custom contracts that add dedicated infrastructure, dynamic secrets, AI Security Advisor, approval workflows, KMS/HSM support, audit log streaming, 99.99% SLA, and a dedicated support engineer. Distribution combines self-serve cloud and self-hosted deployments, listing on AWS Marketplace, and an enterprise field-sales motion. To date the company has raised roughly $18.8M across a Y Combinator SAFE, a $2.8M seed led by Gradient Ventures (July 2023), and a $16M Series A led by Elad Gil (June 2025) with Gradient and Y Combinator participating — with revenue reported to have grown 20x+ year-over-year into the Series A.
Infisical firmographics
Firmographics- Name
- Infisical
- Legal name
- Infisical
- Website
- https://infisical.com
- Company type
- Private
- Founded year
- 2022
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Infisical is an open-source secrets management platform founded in 2022 that stores, rotates, and audits application credentials, certificates, and privileged access for engineering teams and AI agent deployers, with 100k+ users and notable enterprise customers including NVIDIA, LG, and Hugging Face.
- Ownership category
- akta.pro rank
Infisical industry classification
Industry- Product category
- Secrets Management / Identity Security Software
- NAICS
- Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518210)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Secrets Management & Machine Identity (API keys, certificates, workload identity) (HDAEAJAJ)
- akta.pro secondary industry
- Device Identity & Certificate-Based Authentication (PKI) (BPAMAEAL)
Keywords
Where Infisical is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Infisical business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations
Revenue model
- Subscription Plans: Tiered subscription model with Free, Pro ($18/identity/month), and Enterprise tiers. Pro tier adds secret versioning, point-in-time recovery, RBAC, secret rotation, honey tokens, temporary access, SAML SSO, IP allowlisting, and priority support. Enterprise adds dedicated infrastructure, unlimited honey tokens, enterprise SCIM, LDAP, dynamic secrets, AI security advisor, approval workflows, sub-organizations, KMS/HSM support, and 99.99% SLA.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free tier for individuals and startups with basic secrets management features |
| Per seat | Monthly | Pro tier for teams requiring advanced secrets management with compliance features |
| Subscription | Multi-year contract | Enterprise tier with full platform capabilities and dedicated support |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels8 records
Infisical product offering
Product offeringCore offering
Infisical is an open-source identity security platform that provides centralized management of application secrets, X.509 certificates, and privileged access across developer and AI infrastructure. The platform delivers four core products — Secrets Management, Certificate Management (PKI), Privileged Access Management (PAM), and Agent Vault — through a cloud SaaS, self-hosted deployments, or AWS Marketplace, with freemium and per-identity subscription pricing.
Product overview
Infisical is an open-source, end-to-end identity security platform that provides a unified stack for managing secrets, certificates, and privileged access for developers and AI agents. The platform is organized around three core products: Secrets Management (for storing, rotating, and delivering application secrets), Certificate Management/PKI (for automating X.509 certificate lifecycle), and Privileged Access Management/PAM (for securing access to critical infrastructure). Supporting these core products are specialized modules including Agent Vault (for AI agent credential security), Secrets Scanning/Radar (for detecting hardcoded secrets), Honey Tokens (for breach detection via decoy credentials), Key Management/KMS (for encryption key control), Infisical Gateway (for private network access), Infisical Agent (for VM/workload secret injection), and the Kubernetes Operator (for container-native secret management). The platform offers Secret Syncs pushing secrets to 35+ destinations, Dynamic Secrets supporting 24 database/cloud templates, and comprehensive CI/CD integrations. Available in Free, Pro ($18/identity/month), and Enterprise tiers with SOC 2, HIPAA, and FIPS 140-3 compliance.
Differentiator
Problem solved
Functional benefit
Products and services
- Secrets Management Centralized platform for securely storing, managing, and controlling access to sensitive application secrets (API keys, database credentials, configuration values) across environments. Provides secret stores, access controls, secret delivery via CLI/SDKs/APIs, secret rotation, dynamic secrets, and lifecycle automation for developers, DevOps engineers, and security teams.
- Certificate Management (PKI) Centralized platform for managing X.509 certificates across organizations. Issues certificates for TLS, mTLS, and device authentication from private CAs or external providers like DigiCert and Let's Encrypt. Automates the full certificate lifecycle including issuance, renewal, and revocation with identity-based access controls.
- Privileged Access Management (PAM) Centralized PAM with session recording for database queries, SSH, RDP, and Kubernetes access. Provides just-in-time access, AI-generated session insights, credential injection, credential rotation, and full audit trails for securing access to critical infrastructure.
- Agent Vault Open-source credential security platform for securely managing secrets for AI agents across on-premise, Kubernetes, and cloud environments. Prevents credential exfiltration in prompt injection attacks by routing outbound requests through a TLS-intercepting proxy that swaps credentials without exposing them to the agent's environment.
Quantifiable outcome
- 10+ hours per week reclaimed by engineering teams through automated secrets management
- +4 more outcomes
Companies that use Infisical
Customer profileNamed customers17 records
Segments4 records
Ideal customer profiles4 records
Infisical technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration109 records
AI capability6 records
Feature8 records
Infisical partnerships and signals
Strategic signalScale indicators8 records
Recent moves6 records
Expansion highlights7 records
Infisical competitors and assessment
Company assessmentDirect peers
- HashiCorp Vault: The incumbent open-core secrets management platform serving the same developer and enterprise customers with centralized secret storage, dynamic secrets, PKI, and data encryption. Infisical explicitly positions against Vault on developer UX and ease of use.
- Doppler: Developer-focused secrets management SaaS targeting SMB and startup customers with strong UI, sync to cloud platforms, and similar per-seat pricing model. Shares Infisical's developer-led GTM and feature overlap around secret syncing and environment management.
- Akeyless: SaaS-based secrets management and vaultless encryption platform that competes head-to-head with HashiCorp Vault and Infisical in enterprise accounts, offering PKI, dynamic secrets, and zero-knowledge HSM-backed architecture.
- 1Password (Teams & Business): Password and secrets manager that has expanded into developer secrets sharing, SSH key management, and infrastructure secrets. Targets overlapping SMB and enterprise customers with consumer-grade UX.
Broad incumbents
- AWS Secrets Manager: The hyperscaler-native secrets management service bundled with the AWS ecosystem. Default choice for AWS-only shops and a price/value competitor Infisical must displace via cross-cloud unification and developer UX.
- Azure Key Vault: Microsoft's managed secret and key store. Competes directly in enterprises standardized on Azure, providing first-party IAM and HSM-backed key management that Infisical must complement or replace.
- CyberArk Conjur: Enterprise secrets and privileged access management incumbent from CyberArk. Overlaps directly with Infisical's PAM and secrets modules at large regulated enterprises (financial services, healthcare).
- Delinea (ThycoticCentrify) Secret Server: Enterprise privileged access management and secrets management suite. Direct competitor in the PAM segment where Infisical has expanded, serving regulated enterprise customers.
Emerging players
- GitGuardian: Secret detection and remediation platform overlapping with Infisical's Radar (secret scanning) module and broader secrets lifecycle. Often sits alongside or adjacent to a secrets manager.
- Bitnami Sealed Secrets / External Secrets Operator: Kubernetes-native secret management tooling that integrates with Infisical and competes in the cloud-native/K8s segment. Represents both an integration partner (Infisical is an ESO backend) and a potential future competitor for K8s-first customers.
Market position
Strengths5 records
Weaknesses4 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Infisical social profiles
Digital presenceInfisical compliance and trust
Trust signalCompliance4 records
Infisical financial estimates
Financial estimateRevenue estimate
Valuation estimate
Infisical leadership team
Management profileNumber of profiles
Profiles3 records
Infisical funding detail
Funding detailFunding overview
Funding rounds3 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Infisical M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Infisical
What does Infisical do?
Infisical is an open-source identity security platform that provides centralized management of application secrets, X.509 certificates, and privileged access across developer and AI infrastructure. The platform delivers four core products — Secrets Management, Certificate Management (PKI), Privileged Access Management (PAM), and Agent Vault — through a cloud SaaS, self-hosted deployments, or AWS Marketplace, with freemium and per-identity subscription pricing.
Is Infisical a public or private company?
Infisical is a private company. It is classified as venture growth investor backed and is currently operating.
When was Infisical founded?
Infisical was founded in 2022. It employs 51 to 100 people.
Where is Infisical based?
Infisical is headquartered in San Francisco, United States, in the North America region.
How does Infisical make money?
One revenue line is on record: subscription Plans.
Who are Infisical's main competitors?
Direct peers on record are HashiCorp Vault, Doppler, Akeyless and 1Password (Teams & Business). Broad incumbents are AWS Secrets Manager, Azure Key Vault, CyberArk Conjur and Delinea (ThycoticCentrify) Secret Server. Emerging players are GitGuardian and Bitnami Sealed Secrets / External Secrets Operator.
Does Infisical have an API?
Yes. Infisical provides a REST API for programmatically interacting with secrets, access controls, and certificate workflows. SDKs available in Node.js, Python, Go, Java, .NET, Ruby, PHP, C++, and other languages with built-in auth, caching, and lifecycle management. MCP server available for AI agent integration. Developer documentation is at infisical.com/docs/api-reference/overview/introduction.
What industry is Infisical in?
Infisical's product category is Secrets Management / Identity Security Software. Its primary akta.pro industry code is HDAEAJAJ, Secrets Management & Machine Identity (API keys, certificates, workload identity), with a secondary code of BPAMAEAL, Device Identity & Certificate-Based Authentication (PKI). Its NAICS code is 54151 and its SIC code is 7372.