Live data from Hacker News

Show HN: Infisical – open-source secret management platform

infisical.com

1–10 of 59 posts

Show HN: Infisical – open-source secret management platform

#1
Hi HN, we’re the founders of Infisical, the open source secret management platform – it provides an end-to-end set of tools to manage your secrets across your team and infrastructure (https://infisical.com/).

Excited to show you all the progress that we’ve made in the past few months after our Launch HN in February (https://news.ycombinator.com/item?id=34955699) and Show HN in December (https://news.ycombinator.com/item?id=34055132).

During the previous Show HN and Launch HN, we received a ton of feedback which helped us improve Infisical. We’ve since released:

- Secret scanning: a new toolset to block commits with hardcoded secrets and continuously monitor your code.

- Folders: Deeper organizational structure within projects to accommodate for microservice architectures and storage of more secret types like user API keys and OAuth tokens.

- Node and Python SDKs, Webhooks: More ways to integrate and start syncing secrets with Infisical across your infrastructure.

- Integrations with Terraform, Supabase, Railway, Checkly, Cloudflare Pages, Azure Key Vault, Laravel Forge, and more.

- Secret Referencing and Importing: to create a proper single source of truth.

- 1-click deployments to AWS EC2, Digital Ocean, Render, Fly.io: More ways to self-host Infisical on your own infrastructure.

In addition, the platform has become more stable and undergone a full-coverage penetration test; we’ve also begun the SOC 2 (Type II) certification process.

Overall, we’re really lucky to have support of the developer community, and, in fact, Infisical has gathered over 7k GitHub stars, and now processes over 200 million secrets per month for everyone from solo developers to public enterprises.

Our repo is published under the MIT license so any developer can use Infisical. Again, the goal is to not charge individual developers. We make money by charging a license fee for some enterprise features as well as providing a hosted version and support.

Check out Infisical Cloud (https://infisical.com/) or self-host Infisical on your own infrastructure (https://github.com/Infisical/infisical). We’d love to hear what you think!

We’re excited to continue building Infisical, and keep shipping features for you. Please let us know if you have any thoughts, feedback, or feature suggestions!

Show HN: Infisical – open-source secret management platform
infisical.com

Re: Show HN: Infisical – open-source secret management platform

#5

What’s the business model? Is this FOSS or just OSS?

It differs for open source and managed cloud:

1. For the managed Cloud product, it'a typical freemium model, where we have a pretty generous free tier, and you can upgrade if you need more features or higher limits than the free tier.

2. For the open source version, almost all the features (especially the ones that are needed by individual developers and small teams) are completely free with the exceptions of some managerial/compliance features (e.g., audit logs, potentially certain types of 2FA). These managerial features require a license. Some of these paid features are still under development. Plus, for the open source version, we also sell support packages to help with redeployments/maintenance/emergency situations.

Re: Show HN: Infisical – open-source secret management platform

#6

What’s the business model? Is this FOSS or just OSS?

It differs for open source and managed cloud: 1. For the managed Cloud product, it'a typical freemium model, where we have a pretty generous free tier, and you can upgrade if you need more features or higher limits than the free tier. 2. For the open source version, almost all the features (especially the ones that are needed by individual developers and small teams) are completely free with the exceptions of some ma…

wait, you need to pay to be able to use a yubi key for two factor?

Re: Show HN: Infisical – open-source secret management platform

#7
post #6

Earlier quoted context omitted.

It differs for open source and managed cloud: 1. For the managed Cloud product, it'a typical freemium model, where we have a pretty generous free tier, and you can upgrade if you need more features or higher limits than the free tier. 2. For the open source version, almost all the features (especially the ones that are needed by individual developers and small teams) are completely free with the exceptions of some ma…

wait, you need to pay to be able to use a yubi key for two factor?

We don't have support for this yet. Would you say you think this should be a free feature?

Re: Show HN: Infisical – open-source secret management platform

#8
post #3

How does this compare with Hashicorp Vault?

The main goal is to create an all-in-one secret management platform that targets developers and not just platform/security engineers (following the security shift left). Infisical is one platform where you can securely store your secrets, automatically sync them to 3rd party tools, continuously monitor code and prevent secret leaks, etc. We have more exciting features coming very soon.

On top of that, we heard over and over again that HCP Vault is too complicated for developers to set up and maintain. One of the goals of Infisical is to provide similar levels of security at a reduced learning curve. Because of that, we invested a lot of effort in the developer experience in order to make everything more intuitive for developers when compared to Vault.

You should try and let me know what you think.

Re: Show HN: Infisical – open-source secret management platform

#10

The fact that there are no Java or Rust SDKs available makes this a non-starter for me to even consider it.

Java SDK was actually already developed by one of our community members (Piyush Chhabra) and has to be reviewed: https://github.com/piyushchhabra/infisical-java

Rust SDK is coming soon too.

SDKs are not the most popular way of using Infisical though. You should look into our CLI (which most of the folks use) and API

Post reply on HN