Infisical/infisical

Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.

What it solves

Infisical is an open-source security infrastructure platform designed to centralize the management of secrets, certificates, and privileged access. It prevents secret leaks by providing a secure way to sync configurations across teams and infrastructure, replacing the need to manually share sensitive credentials in insecure ways.

How it works

The platform provides a centralized dashboard for managing secrets across different environments (development, production, etc.) and integrates with various platforms like GitHub, Vercel, and AWS. It uses a system of versioning, rotation, and dynamic secret generation to ensure credentials remain secure. For AI agents, it offers a specialized "Agent Vault" that proxies outbound requests to inject secrets, preventing agents from holding real credentials and mitigating risks like prompt injection.

Who it’s for

Developers, security teams, and DevOps engineers who need a secure, scalable way to manage application secrets, PKI (Public Key Infrastructure), and privileged access to servers and databases.

Highlights

  • Secrets Management: Centralized dashboard with versioning, rotation, and dynamic ephemeral secrets for services like PostgreSQL and MySQL.

  • Agent Vault: A dedicated proxy for AI agents to access external APIs without holding permanent credentials, reducing exfiltration risk.

  • Certificate Management: A complete private PKI to issue, manage, and monitor X.509 certificates with support for internal and external CAs.

  • Privileged Access Management (PAM): Just-in-time access to critical infrastructure (SSH, Kubernetes, databases) with session recording and AI-powered session insights.

  • Leak Prevention: Built-in scanning for over 140 secret types to prevent credentials from being committed to git repositories.

Related

  • Project
    huggingface/smolagents

    A lightweight library for building AI agents that can execute tasks by writing Python code, offering model and tool agnostic integrations with sandboxed execution support.

  • Project
    TencentCloud/TencentDB-Agent-Memory

    TencentDB Agent Memory is an open‑source memory hub for LLM agents. It captures conversations, extracts reusable skills, builds a Wiki from docs, and indexes code into a CodeGraph. A central UI (Memory Hub) lets teams manage assets, set fine‑grained ACLs, and bind specific memory pieces to individual agents. Agents talk to a uniform proxy, so any framework (Claude Code, DeepSeek Harness, OpenClaw, etc.) can use the same memory without code changes. Benchmarks show a 59 % boost in persona retention. The repo provides one‑click Docker deployment, migration tools, and a roadmap for zero‑config cold starts and more integrations.

  • Project
    assafelovic/gpt-researcher

    An open deep research agent that automates the process of gathering information from the web and local documents to produce detailed, factual, and cited research reports.

  • Project
    openai/openai-agents-python

    A lightweight, provider-agnostic framework for building multi-agent workflows, supporting text, voice, and sandbox-based agents.