#1 in Secrets & Key ManagementUpdated 2026-08

Infisical

by Infisical · Secrets, certificate and privileged access management for developers

70.2 — BenchRank score out of 100

Homepage
Pricing page

Visit website See full Secrets & Key Management ranking

Overview

Infisical is an identity security platform for storing, syncing, rotating and auditing application secrets across environments and workloads. It also runs private CAs with automated certificate issuance, renewal and discovery, and issues short-lived privileged sessions in place of standing admin credentials. An Agent Proxy brokers credentials to AI agents so the agent sees placeholders rather than real values.

Best for: Engineering teams wanting secrets, certificates and privileged access managed on one platform
Pricing: Free plan for 5 identities, then $20 per identity/month (Pro) or $40 per identity/month (Advanced), with custom Enterprise pricing; self-hosting is an add-on at $25–$100 per identity/month.
Runs on: WebSelf-hostedCLI

Strengths and trade-offs

Strengths

Free tier: 5 identities, unlimited projects, 100+ integrations
Self-host on your own infrastructure or use Infisical Cloud
Secrets, PKI and privileged access share one identity model
Agent Proxy attaches secrets at the proxy, not in the agent

Trade-offs

Priced per identity, counting machines and CI pipelines as well as people
Self-hosting is a paid add-on, from $25 per identity per month
Access controls, SAML SSO and audit logs all require the $20 Pro plan
Approval workflows, SCIM, LDAP and SIEM streaming are Enterprise-only

Pricing

Published plans from Infisical’s own pricing page, in USD. Usage charges and add-ons may apply on top.

Infisical pricing tiers, monthly rates in USD
Plan	Monthly	Includes
Free	Freeflat	5 identities, unlimited projects 100+ integrations Agent Proxy and Secret Sharing Secret references, imports, overrides and 2FA
Pro	$20per identity	Unlimited identities Access controls and SAML SSO Secret rotation, versioning and point-in-time recovery 30-day audit log retention
Advanced	$40per identity	Dynamic secrets and honey tokens SOC 2 Type II and higher rate limits Custom roles, SSO/MFA enforcement, temporary access 90-day audit log retention
Enterprise	Contact sales	Approval workflows and access requests LDAP, SCIM and user groups KMIP, external KMS and HSM support Audit log streaming to SIEM and a 99.99% SLA

How this score is made up

Each dimension is scored out of 100 and combined into the headline score using fixed weights.

MCP support: 60 out of 100
API quality: 30 out of 100
Documentation: 90 out of 100
Agent friendliness: 65 out of 100
Pricing transparency: 85 out of 100
Changelog: 100 out of 100
Marketing site structure: 85 out of 100
Operational trust: 85 out of 100

Measured, but not part of the score

Useful to know, but not a mark for or against the product — so these do not affect the ranking.

Openness: 55 out of 100
Maintenance: 100 out of 100

This doesn’t look right — report a problem with Infisical’s score

Alternatives in Secrets & Key Management

Ranked 2
65.5 — BenchRank score out of 100
Unkey
UnKey · API deployment, gateway and observability on one platform
Best for: Teams that want API deployment, key auth, rate limiting and logs from a single vendor
Ranked 3
59.5 — BenchRank score out of 100
Bitwarden
Bitwarden · Open source credential manager for people, AI agents and machines
Best for: Businesses wanting an open source, self-hostable password manager with SSO, SCIM and event logs
Ranked 4
57.4 — BenchRank score out of 100
Vault
HashiCorp Vault · Secrets management and encryption as a service via UI, CLI or HTTP API
Best for: Security and platform teams storing secrets, issuing database credentials and encrypting data