Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
Repository Index
88,573 visible repositories in the index
1–20 of 20 · Most stars
Simple and flexible tool for managing secrets
OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
A vault for securely storing and accessing AWS credentials in development environments
- aws
- iam
- temporary-credentials
- keychain
a secure dotenv—from the creator of `dotenv`
- dotenv
- env
- dotenvx
- environment-variables
AI-safe .env files: Schemas for agents, Secrets for humans.
- configuration
- dotenv
- env
- env-vars
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
Cloud native secrets management for developers - never leave your command line for secrets.
- secrets
- secret-management
- vault
- hashicorp
A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
- vault
- kubernetes
- kubernetes-secrets
- golang
Leapp is the DevTool to access your cloud
Open-source ConfigOps infrastructure ⚙️
- application-configuration
- configuration
- configuration-file
- configuration-management
Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume.
- kubernetes
- csi
- hashicorp-vault
- azure-keyvault
KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources
A simple, secure CLI tool designed to manage secrets (for humans and agents)
A surprisingly configurable convention-based approach to managing your application's custom configuration settings.
A secure and easy-to-use store for your production secrets
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Pythonic way of keeping secrets secure in JSON
- secret-management
- secret-in-json
- json-parser
- python
Keep your secrets out of your AI coding agents. A local HTTPS proxy that swaps real credentials with placeholders and injects them at the network boundary.
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.
- 2fa
- aes-gcm
- dotenv
- encryption