Secrets Management · pricing · Updated September 2026
Infisical pricing (2026)
Infisical starts at $0/mo (Free) as checked on 2026-09-03, read from Infisical's own pricing page; 3 plans. Best for Developer teams wanting open-source secrets management with cloud or self-hosted options. Every figure below links to its source and the date we captured it.
At a glance
- Entry price: $0/mo (Free)
- Free tier: Yes
- Compliance: HIPAA — · SOC 2 — · GDPR Yes
- Best for: Developer teams wanting open-source secrets management with cloud or self-hosted options; Organizations seeking a Vault alternative with simpler pricing; Teams needing secret scanning integrated into CI/CD pipelines from day one
As of · every figure below links to its source
Infisical plans & pricing
| Plan | Monthly | Annual | Billing | Notes | Source |
|---|---|---|---|---|---|
| Free | $0 | — | flat | Up to 5 identities, 3 projects, 3 environments, 10 integrations. Includes CLI, SDKs, Kubernetes Operator, webhooks, 2FA, secret scanning. Cloud or self-hosted. | infisical.com |
| Pro | $20 | — | per_seat | $18/month per identity. Includes secret versioning, point-in-time recovery, RBAC, secret rotation, SAML SSO, IP allowlisting, 90-day audit log retention, higher rate limits. | infisical.com |
| Enterprise | not priced monthly | — | custom | Custom pricing, demo required. Includes dedicated infrastructure, SCIM, LDAP, dynamic secrets, AI Security Advisor, KMIP, KMS/HSM, 99.99% SLA, SOC2 reports, dedicated support engineer. | infisical.com |
Last verified 2026-09-03. Official pricing page infisical.com/pricing fetched directly. SOC2 and PenTest reports mentioned in Enterprise tier features. No HIPAA or BAA mentioned on pricing or security pages. Annual billing discount not published on pricing page. Re-verified 2026-09-03 against the live pricing page — Pro: $18 -> $20.
Price changes
Price on record
$20/moTracked since June 2026. Last recorded move Sep 4, 2026: $18 → $20. No change record has cleared two sources yet, so nothing is published on the wire.
Capabilities
Integrations: GitHub Actions, GitLab CI/CD, Kubernetes (Operator + CSI Driver), AWS Secrets Manager, GCP Secret Manager, Azure Key Vault, Vercel, Ansible.
Key features: Open-source codebase — self-hostable without vendor lock-in; Secret scanning and leak prevention built into free tier; Dynamic secrets (database credentials, short-lived) on Enterprise; AI Security Advisor for automated secret hygiene recommendations; Unified platform covering secrets, PKI certificates, and SSH access management.
Plan limits: Free: 5 identities, 3 projects, 3 environments, 10 integrations; Pro: 90-day audit log retention, higher rate limits (exact limits not published); Enterprise: custom rate limits, custom audit log retention, 99.99% SLA.
Frequently asked questions
How much does Infisical cost?
Infisical starts at $0/mo (Free); it has 3 published plans. Verified 2026-09-03.
What are cheaper alternatives to Infisical?
Cheaper secrets management than Infisical (entry $0/mo) include Doppler at $8/mo, 1Password (Secrets Automation) at $10.99/mo. Verified 2026-09-03.
Does Infisical support HIPAA?
Infisical HIPAA support: —. SOC 2: —. GDPR: Yes.
Does Infisical have a free plan?
Infisical free tier: Yes.
Infisical vs alternatives
Compare all secrets management · Infisical alternatives · True cost of secrets management · SOC 2-certified secrets management · HIPAA-compliant secrets management · GDPR-compliant secrets management · Open data · MCP
Cheaper secrets management alternatives
- 1Password (Secrets Automation) from $10.99/mo
- Doppler from $8/mo
More secrets management tools
Related categories
Display this standing
Infisical currently holds a silver deskmark here — Rank 4 of 8 · Secrets Management. Anyone may show it. There is nothing to apply for, nothing to pay, and displaying it changes no score: the standing comes from the published algorithm and money never touches it.
The image is drawn from our live data, so it follows the standing rather than freezing it: if Infisical moves up or down a tier, the plaque on your own site says so at our next publish. Nothing is tracked beyond the ordinary web-server log that records any image request.