THthunderbong·Jun 18, 2025Submission
Infisical: Open-source platform for secrets management, PKI, and SSH access
8 points · Open discussionInfisical
infisical
TypeScript2022–2025
Infisical / infisical
infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
12Distinct people
32Mentions
0Explicit recommenders
30.5KGitHub stars
What to know before exploring
What it is
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 5:04:57 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by month32 dated mentions
Observed mentions: 2022-12-01 08:21:08 UTC to 2025-06-18 15:07:05 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| Dec 2022 | 2022-12-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 5 | 2 | 3 |
| Jan 2023 | 2023-01-01 00:00:00 UTC | 2023-02-01 00:00:00 UTC | 1 | 1 | 0 |
| Feb 2023 | 2023-02-01 00:00:00 UTC | 2023-03-01 00:00:00 UTC | 5 | 1 | 4 |
| Mar 2023 | 2023-03-01 00:00:00 UTC | 2023-04-01 00:00:00 UTC | 0 | 0 | 0 |
| Apr 2023 | 2023-04-01 00:00:00 UTC | 2023-05-01 00:00:00 UTC | 0 | 0 | 0 |
| May 2023 | 2023-05-01 00:00:00 UTC | 2023-06-01 00:00:00 UTC | 1 | 0 | 1 |
| Jun 2023 | 2023-06-01 00:00:00 UTC | 2023-07-01 00:00:00 UTC | 0 | 0 | 0 |
| Jul 2023 | 2023-07-01 00:00:00 UTC | 2023-08-01 00:00:00 UTC | 3 | 1 | 2 |
| Aug 2023 | 2023-08-01 00:00:00 UTC | 2023-09-01 00:00:00 UTC | 8 | 1 | 7 |
| Sep 2023 | 2023-09-01 00:00:00 UTC | 2023-10-01 00:00:00 UTC | 0 | 0 | 0 |
| Oct 2023 | 2023-10-01 00:00:00 UTC | 2023-11-01 00:00:00 UTC | 0 | 0 | 0 |
| Nov 2023 | 2023-11-01 00:00:00 UTC | 2023-12-01 00:00:00 UTC | 0 | 0 | 0 |
| Dec 2023 | 2023-12-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 3 | 0 | 3 |
| Jan 2024 | 2024-01-01 00:00:00 UTC | 2024-02-01 00:00:00 UTC | 0 | 0 | 0 |
| Feb 2024 | 2024-02-01 00:00:00 UTC | 2024-03-01 00:00:00 UTC | 0 | 0 | 0 |
| Mar 2024 | 2024-03-01 00:00:00 UTC | 2024-04-01 00:00:00 UTC | 0 | 0 | 0 |
| Apr 2024 | 2024-04-01 00:00:00 UTC | 2024-05-01 00:00:00 UTC | 2 | 1 | 1 |
| May 2024 | 2024-05-01 00:00:00 UTC | 2024-06-01 00:00:00 UTC | 1 | 0 | 1 |
| Jun 2024 | 2024-06-01 00:00:00 UTC | 2024-07-01 00:00:00 UTC | 0 | 0 | 0 |
| Jul 2024 | 2024-07-01 00:00:00 UTC | 2024-08-01 00:00:00 UTC | 1 | 1 | 0 |
| Aug 2024 | 2024-08-01 00:00:00 UTC | 2024-09-01 00:00:00 UTC | 0 | 0 | 0 |
| Sep 2024 | 2024-09-01 00:00:00 UTC | 2024-10-01 00:00:00 UTC | 0 | 0 | 0 |
| Oct 2024 | 2024-10-01 00:00:00 UTC | 2024-11-01 00:00:00 UTC | 0 | 0 | 0 |
| Nov 2024 | 2024-11-01 00:00:00 UTC | 2024-12-01 00:00:00 UTC | 0 | 0 | 0 |
| Dec 2024 | 2024-12-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 0 | 0 | 0 |
| Jan 2025 | 2025-01-01 00:00:00 UTC | 2025-02-01 00:00:00 UTC | 0 | 0 | 0 |
| Feb 2025 | 2025-02-01 00:00:00 UTC | 2025-03-01 00:00:00 UTC | 0 | 0 | 0 |
| Mar 2025 | 2025-03-01 00:00:00 UTC | 2025-04-01 00:00:00 UTC | 0 | 0 | 0 |
| Apr 2025 | 2025-04-01 00:00:00 UTC | 2025-05-01 00:00:00 UTC | 1 | 0 | 1 |
| May 2025 | 2025-05-01 00:00:00 UTC | 2025-06-01 00:00:00 UTC | 0 | 0 | 0 |
| Jun 2025 | 2025-06-01 00:00:00 UTC | 2025-07-01 00:00:00 UTC | 1 | 1 | 0 |
What Hacker News says
32 sourcesHey HN! Infisical SSH, an extension of the open source Infisical platform [1], gives you a solution to centralize SSH access for your team and infrastructure.
Infisical SSH eliminates the need for you to manage SSH keys in favor of short-lived SSH certificates issued on demand. From one dashboard, you can define which users should have access to which machines and let Infisical facilitate connections using SSH certificate-based authentication under the hood.
With just a few clicks, you can bootstrap the same secure, scalable SSH certificate-based authentication scheme that companies like Meta, Uber, and Google use to scale SSH access across their infrastructure.
[1] Infisical - https://github.com/Infisical/infisical
In Show HN: Infisical SSH – Centralized SSH access for teams and infrastructureShow HN: Infisical PKI – Open-Source Private CA and Certificate Management
we just released an open source PKI engine [0] as part of the wider Infisical secret management toolset. With Infisical PKI, you can:
- create root and intermediary CAs;
- issue and revoke x.509 certificates (with support for CRL);
- encrypt TLS communication channels and authenticate users, computers, IoT devices, etc.
It is available under the MIT license as part of the main Infisical repository [1]
[0] https://infisical.com/docs/documentation/platform/pki/overvi...
[1] https://github.com/Infisical/infisical
9 points · Open discussionI was looking up "ephemeral credentials" a couple months ago but didn't stumble upon this until today. Is this pretty common?
It's pretty hidden within vault, only mentioned on a couple provider pages, whereas I feel like it should be the main thing - you set up ephemeral secrets for everything, falling back to static credentials only for services that don't support it.
Edit: Infisical supports it, AWS and Oracle Cloud only though: https://github.com/Infisical/infisical/blob/18c0d2fd6f31a3db...
In Vault-Backed Dynamic CredentialsYou should look into Infisical: https://github.com/Infisical/infisical
Disclaimer: I’m one of the founders.
In IBM to buy HashiCorp in $6.4B dealShow HN: Open-source alternative to HashiCorp/IBM Vault
123 points · Open discussionGiven how much of a PITA Vault is, I think it's time for people to move on from it (especially that I'm hearing this is financed by IMB to keep their Vault competitor going).
There are other great/better options. Check out Infisical for secret management: https://github.com/Infisical/infisical
Disclaimer: I'm one of the maintainers.
In HashiCorp Vault forked into OpenBAOAppreciate the fork, but I think it's time for people to move on from Vault and other HashiCorp tools (especially that I'm hearing this is financed by IMB to keep their Vault competitor going).
Check out Infisical for secret management: https://github.com/Infisical/infisical
Disclaimer: I'm one of the maintainers.
In OpenBao – FOSS Fork of HashiCorp VaultCheck out Infisical: https://github.com/Infisical/infisical
Disclaimer: I'm one of the founders
In OpenBao – FOSS Fork of HashiCorp VaultAnd still world-class testing: https://github.com/Infisical/infisical/blob/main/backend/tes...
Don't use this untested mess to store your secrets.
In Infisical – open-source HashiCorp Vault alternativeYes, this has been requested quite a bit recently. Could you please comment in this issue: https://github.com/Infisical/infisical/issues/442
We will make sure to prioritize the OIDC support depending on how many people ask for it
In Infisical – open-source HashiCorp Vault alternativeAt the moment we don't offer support for HSM but please make a request for it in our github issues https://github.com/Infisical/infisical/issue
In Infisical – open-source HashiCorp Vault alternativeThank you! If you have any feature suggestions, you're welcome to add those to https://github.com/Infisical/infisical/issues
In Infisical – open-source HashiCorp Vault alternativeHashiCorp switched Vault from MPL to BSL license yesterday. The terms of how they define "competitive" products are pretty vague, which means that any commercial product that uses Vault under the hood is at risk of violating the terms of the new license. Moreover, even if it's not violating the terms of license now, it doesn't mean that HashiCorp will not change its mind in future.
Ultimately, it just means that HashiCorp is not an open source company anymore. One of the biggest benefits of open source is building on top of open source software to create even better software. HashiCorp's move makes it impossible and simply slows down innovation. In fact, in their blog post, they say that they will start referring to their previously-open-source product as "community".
Infisical is an open source alternative to HashiCorp Vault. The main di
Read the rest
fference is that it provides more tools in one platform. Some examples of these are automatic secret scanning and leak prevention, CLI for local development, integrations with services like GitHub Actions, Circle CI, etc.
The core of Infisical is available under the MIT license with only very few features being enterprise-licensed – some will say it's not ideal but at least this type of license does not impose legal risks on our users while gives us the ability to monetize the product efficiently and support the open source (MIT-based) part of the product.
Over the last year, lots of developers and companies of all sizes (from tiny startups to Fortune 10 companies) have partially or fully switched to Infisical. For them, we now process over 300 million secrets per month.
Check out our git repo here: https://github.com/Infisical/infisical
Infisical – open-source HashiCorp Vault alternative
284 points · Open discussionShowing the 15 most recent of 32 sources. Enable JavaScript to search and browse every indexed mention.