1. [Home](https://www.g2.com/)
2. ...
3. [Secrets Management Tools](https://www.g2.com/categories/secrets-management-tools)
4. [Infisical Discussions](https://www.g2.com/products/infisical/discuss)

[
 ![Infisical](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_365aabbc4d5956ffeed13bbd6f5c42d3/5a0c7d78-0f77-462a-8d55-52fefdbc0da0.png "Infisical")
](/products/infisical/reviews)

# Infisical Discussions

Infisical is an open-source identity security platform that unifies secrets management, certificate management, and privileged access management in a single product. Teams use Infisical to centrally manage secrets, certificates, and access across cloud, self-hosted, and multi-cloud environments, with out-of-the-box workflows and a developer-first experience built on Postgres. Unlike building-block tools that require you to assemble your own UI, workflows, and automation, Infisical is a ready-to-go product. Most teams get value on day one: no certification required, no months of onboarding, and no dedicated team needed to keep it running. What Infisical covers: Secrets Management (incl. KMS): The default tool for managing secrets and credentials across your stack. Import existing secrets from AWS Secrets Manager and other sources on day one, then manage them through centralized dashboards, approval workflows, dynamic secrets, and a built-in KMS. Certificate Management: Full certificate lifecycle including issuance, renewal, discovery, and automation, with support for SCEP, EST, and ACME. Automated renewal prevents outages from expired TLS certificates, which matters more as certificate lifetimes shrink toward 47 days. Privileged Access Management: Secure access to critical infrastructure including SSH, RDP, and web applications. Includes session recording, just-in-time access, and approval workflows through Slack and PagerDuty. Secrets Scanning: Detect leaked credentials across repositories before they become incidents. Built for how real infrastructure teams work: Open source and transparent, so you can review the codebase and try before you buy. Flexible deployment on shared cloud, dedicated cloud, or fully self-hosted across any cloud or on-prem, powered by Postgres replication. The architecture (Postgres, Redis, stateless backend) is intentionally simple, which keeps deployment and maintenance straightforward. Trusted by teams at Hugging Face, OpenRouter, Lucid Software, and Excalidraw. Infisical secures more than 10 billion secrets daily. Get started at https://app.infisical.com/signup or talk to the team at https://infisical.com/talk-to-us.

## Be the first to start the conversation

Get answers from real professionals in the G2 community.