Infisical Secrets, PKI and Privileged Access Platform

Infisical Inc. is a Delaware corporation based in San Francisco that builds security infrastructure for developers and AI agents. Its core platform is open source under the MIT license, and it says more than 10 billion secrets are secured daily for users such as Databricks, LG Electronics, UPS, Hugging Face and Hinge Health.

Secrets Management delivers credentials to applications, CI jobs and agents at runtime instead of storing them in files, with rotation, dynamic secrets and syncs to cloud services. Certificate Management runs root and intermediate CAs, supports ACME, SCEP and EST enrollment and automates renewal. Privileged Access provides time-bound, recorded access to databases, SSH servers and cloud or Kubernetes accounts without exposing credentials, and Agent Vault lets AI agents call third-party APIs while a proxy injects keys at the network boundary. It runs on Infisical Cloud in US and EU regions or self-hosted via Docker, Kubernetes or air-gapped setups.

• Secrets management: Injects secrets at runtime with rotation, dynamic secrets and cloud syncs.
• Certificate management: Runs internal CAs and automates issuance via ACME, SCEP and EST.
• Privileged access: Gives time-bound, recorded access to databases, SSH and Kubernetes.
• Agent Vault: Brokers credentials for AI agents through a proxy with session logs.
• Flexible hosting: Runs as cloud in US or EU regions or self-hosted, including air-gapped.
• Developer integrations: Offers SDKs in nine languages and plugins for GitHub Actions, GitLab CI, Jenkins and Terraform.

A Vietnamese software outsourcing company can remove .env files and hard-coded keys from client projects and CI pipelines. A fintech can self-host Infisical in a local data center to manage database credentials and internal TLS certificates. A team building AI agents can let them call payment or messaging APIs without exposing keys.

The MIT-licensed core can be self-hosted for free, lowering the cost of replacing hard-coded secrets and .env files. Runtime delivery and rotation shrink the window in which leaked credentials are usable. Secrets, certificates and privileged access sit in one platform with shared RBAC and audit logs. AI agents can work with third-party APIs without ever holding the keys.

Leaked API keys and secrets in code repositories are a frequent breach cause, and AI agents multiply the number of credentials in use. Vietnam's large software outsourcing and fintech developer base increasingly adopts DevOps and cloud-native stacks, creating demand for affordable, self-hostable secrets and certificate management that can stay in local data centers.

Infisical Inc. is incorporated in Delaware with an address in San Francisco, California. Core platform is open source under the MIT license; Agent Vault launched as an open-source research preview in April 2026 and became a commercial product. Holds SOC 2 Type II and supports HIPAA and GDPR, with FIPS 140-3 validated modules in FIPS mode.