Infisical

What it is for

Infisical is a secrets + access desk: you store a key per environment, optionally broker it to an agent, and you can self-host the MIT core at $0. Use it when the job is secrets you start at $0 (5 identities, no card), not when you need a $20 chat seat.

What makes it unique: the cover is the official Infisical Project Overview (secret names × Development / Staging / Production) from the folders docs — not a pricing card. The table itself is ops of Secrets.

Key features

• Secrets Management — env keys you inject via CLI, API, or SDK (pricing Secrets Management). One secret. Folders, syncs, and the cover table are ops of this. The SDK is install. Cloud Free is $0 / 5 identities; Pro is $20/identity/month annual ($23 monthly).
• Privileged Access (PAM) — request, approve, and record a session to a machine (pricing Privileged Access). A session, not a secret row. Billed per human user. Pro is $20/user/month (14-day trial; up to 50 accounts).
• Certificate Management — an internal CA and cert dashboard with no per-cert meter (pricing Certificate Management). A cert, not a .env key. Free is $0 (2 CAs, 10 SANs); past that is Enterprise custom.
• Agent Vault — a proxy that attaches a real credential to an agent call so the agent never holds the secret (Agent Vault; pricing). A brokered request, not a PAM SSH session. First 5,000 requests/month $0, then $2/1,000.
• Self-host — MIT core you run yourself; Cloud is the hosted desk (self-hosting; pricing). A deploy, not a secret. Supported / air-gapped self-host is Enterprise SKU.

Identities (Secrets) and human users (PAM) are the Cloud meters. Dynamic secrets and gateways sit on Secrets Advanced. Approvals on Secrets are Enterprise. Honey tokens are SKU of Secrets.

Who it's for

Best fit: app / platform teams who will stay on Secrets Free $0 (5 identities, 3 environments, 10 syncs, no card) while they store a first .env, then buy Secrets Pro at $20 per identity / month annual — and add PAM or Agent Vault only when they need a session or a brokered request.

Pricing

Verified 2026-10-22 (Asia/Shanghai) from infisical.com/pricing. Four product lines, four bills. The MIT core is $0 to self-host.

Secrets Management (per identity / month)

• Free — $0 forever. 5 identities. Unlimited projects. 3 environments. 10 secret syncs.
• Pro — $20/identity/month annual, $23 monthly. Unlimited identities. 6 environments/project. 25 syncs. SAML SSO, versioning, PITR, public-DB rotation, 3 honey tokens, 30-day audit. 30-day free trial, no card.
• Advanced — $40/identity/month annual, $46 monthly. 12 environments/project. 50 syncs. Dynamic secrets, gateways, full rotation, custom roles, temporary access, SSO/MFA enforcement, 90-day audit.
• Enterprise — custom, annual. SCIM, LDAP, approval workflows, KMIP, external KMS/HSM, SIEM streaming, sub-orgs, 99.99% SLA.

Privileged Access (per human user / month; 14-day trial)

• Pro — $20/user/month. Up to 50 accounts. Access requests, session recording (30-day), SSH cert auth, command blocking.
• Enterprise — custom. Windows / RDP, discovery, SCIM, LDAP, custom retention.

Certificate Management (no per-cert charge)

• Free — $0. Up to 2 internal CAs, 2 basic external CAs, 10 active SANs.
• Enterprise — custom. Unlimited CAs/SANs, AD CS, EST, inventory, auto-renewal, CRL.

Agent Vault (per brokered request)

• Pro — first 5,000 requests/month $0, then $2 per additional 1,000. 30-day session logs.
• Enterprise — custom. BYO S3 logs, SIEM, SCIM.

Self-host — MIT core $0. Supported / licensed self-host is talk-to-sales.

Confirm checkout; taxes follow your location.

Limitations / costs

• Secrets Free is 5 identities. A CI bot plus four humans fills it; Pro is $20 per identity (annual).
• Four products, four bills. A Secrets Pro seat does not include PAM or Agent Vault.
• A secrets desk, not an API-key meter for your customers. For customer API keys see Unkey. For a MoR checkout that issues license keys see Polar.

Alternatives

• Unkey — customer API keys and rate limits when you are not storing .env secrets.
• Polar — Merchant of Record checkout that can grant a license key after a sale.
• GrowthBook — feature flags when the “secret” is an on/off rule, not a credential.

Official tutorial

Official docs path only. The @infisical YouTube handle we opened resolved to a personal channel on 2026-10-22 — do not embed a third-party walkthrough.

Written path: folders plus infisical.com/pricing.

Website

https://infisical.com

Repository

https://github.com/Infisical/infisical

Source

Catalog row curated for AI Tools Nav. Cover is the official Infisical Project Overview secrets table from the folders docs. Dollars checked on infisical.com/pricing (Secrets Free $0 / 5 identities; Pro $20/identity annual; PAM Pro $20/user; Agent Vault 5,000 free then $2/1k; PKI Free $0; self-host MIT $0).

Last verified

2026-10-22 (Asia/Shanghai) editorial check.