Skip to content
inetGeek

Infisical pricing and limits

iScore78–90 · ≈#2/3
infisical.com · Secrets management
SEPT 2026 audit

Open-source secrets manager billed per identity (human or machine), with versioning and dynamic secrets on paid tiers.

Visit Infisical documentation
Compare Infisical with

No affiliate links, sponsored placements or paid rankings appear on this site. Ordering follows the sourced data and the stated criteria.

Entry paid planPro tier: $20/identity/month billed annually, or $23/identity/month billed monthly.
GitHub stars29,220Infisical/infisical
RegionsInfisical Cloud runs in two regions: US (us.infisical.com or app.infisical.com) and EU (eu.infisical.com), each in its own AWS account
Free tierYes

Reviewed by Palash BagchiUpdated 20 criteria comparedSources last checked

Infisical pricing at a glance

Entry paid plan
Pro tier: $20/identity/month billed annually, or $23/identity/month billed monthly source ↗
Pricing model
Billed per identity per month source ↗
What the free plan includes
A free plan for individuals and personal projects; every paid plan additionally carries a free trial with no credit card source ↗

First line of each sourced value. The full text is in Infisical pricing below. How this free offer stacks up: cloud free tiers compared.

01.Evaluation guide

Who it suits

Teams that want per-identity pricing that treats a machine credential the same as a human one, or that value the option to self-host the same open-source engine the cloud product runs.

Consider something else if…

Dynamic secrets are needed immediately — that's an Advanced-tier feature here, two tiers above the entry paid plan.

Editorial · Palash Bagchi · approved

Machine-derived signals

Not sourced facts — counts and matches read by a script, not a person. See each line for where it comes from.

Open source: Infisical/infisical · 29,220 stars · 2,256 forks

Infisical's own site (infisical.com) self-detects as: hosting — US hosting, Cloud PaaS, Cloud Hosting, Server Location · CDN — Edge Delivery Network (category-level via BuiltWith, not a named vendor)

Each value below links to the page it was read from, with the sentence it came from. Criteria Infisical does not publish are not listed.

Infisical pricing

5 criteria
Free tierYes
Sources (1) →
Kind of free offerFree tier
Sources (1) →
  • Infisical Pricing ↗

    “Get started with: 5 identities, unlimited projects 100+ integrations Agent Proxy Secret Sharing Secret References and Imports Secret Overrides 2FA Unlimited Projects (separate from 5 identities)”

    Read 2026-09-14 · official pricing · Report a correction

What the free plan includesA free plan for individuals and personal projects; every paid plan additionally carries a free trial with no credit card.
Sources (1) →
Entry paid planPro tier: $20/identity/month billed annually, or $23/identity/month billed monthly.
Sources (1) →
  • Infisical Pricing ↗

    “Pro For growing teams looking to boost their security. Start a free trial Billed annually Save 13% $20 $23 [...] /identity/month An identity is any human or machine that authenticates to Infisical.”

    Read 2026-09-14 · official pricing · Report a correction

Pricing modelBilled per identity per month. An identity is any principal that authenticates to Infisical, human or machine.
Sources (1) →
  • Infisical Pricing ↗

    “/identity/month An identity is any human or machine that authenticates to Infisical. Everything in Free, plus: Unlimited identities Access Controls Secret Rotation SAML SSO”

    Read 2026-09-14 · official pricing · Report a correction

Infrastructure

2 criteria
RegionsInfisical Cloud runs in two regions: US (us.infisical.com or app.infisical.com) and EU (eu.infisical.com), each in its own AWS account
Sources (1) →
  • Infisical Cloud - Infisical ↗

    “Architecture overview of Infisical's US and EU cloud deployments [...] US cloud (us.infisical.com or app.infisical.com) [...] Each region operates in a separate AWS account, providing strong isolation boundaries for security, compliance, and operational independence.”

    Read 2026-09-13 · official docs · Report a correction

Uptime SLAThe SLA's own wording disagrees with itself: "ninety-nine and nine tenths percent (99.99%)" spells 99.9 and prints 99.99. Either way it applies only to Enterprise tier and above.
Sources (1) →
  • Infisical Service Level Agreement ↗

    “infisical will provide actual availability for at least ninety-nine and nine tenths percent (99.99%) of the total time in each calendar month during the subscription term [...] applies only to infisical cloud services at the enterprise tier or above”

    Read 2026-09-14 · official site · Report a correction

Auth

1 criteria
Audit logsNone on Free. 30-day retention on Pro, 90-day on Advanced, custom retention on Enterprise.
Sources (1) →
  • Infisical Pricing ↗

    “Everything in Free, plus: Unlimited identities Access Controls Secret Rotation SAML SSO 30-day Audit log retention [...] Everything in Pro, plus: Dynamic Secrets Honey Tokens SOC 2 Type II Higher Rate Limits Custom Roles SSO & MFA enforcement 90-day Audit log retention [...] Custom Audit log retention and rate limits”

    Read 2026-09-14 · official pricing · Report a correction

Secrets

2 criteria
Secret versioningNot included on the free tier. Included from Pro: secret versioning and point-in-time recovery.
Sources (1) →
  • Infisical Pricing ↗

    “Everything in Free, plus: Unlimited identities Access Controls Secret Rotation SAML SSO 30-day Audit log retention Secret Versioning Point-in-time Recovery”

    Read 2026-09-13 · official pricing · Report a correction

Dynamic (short-lived) secretsNot included on Free or Pro. Included from Advanced: dynamic secrets.
Sources (1) →
  • Infisical Pricing ↗

    “Everything in Pro, plus: Dynamic Secrets Honey Tokens SOC 2 Type II Higher Rate Limits Custom Roles SSO & MFA enforcement 90-day Audit log retention Temporary Access”

    Read 2026-09-13 · official pricing · Report a correction

Support

1 criteria
Support on entry paid planCommunity support Help from the Infisical community and team through public channels like Slack and GitHub.
Sources (1) →

Compliance

9 criteria
SOC 2SOC 2 Type 2 report listed in Infisical's Trust Center; access by request.
Sources (1) →
HIPAAHIPAA listed under Compliance in Infisical's Trust Center, alongside SOC 2 and FIPS 140-3. DPA requires an executed BAA before PHI is submitted.
Sources (1) →
GDPR / data residencyDPA covers EU GDPR, UK GDPR and the Swiss FADP, using the SCCs, UK Addendum or Swiss modifications for transfers out of the EEA, UK or Switzerland.
Sources (1) →
  • Data Processing Agreement | Infisical ↗

    “the EU General Data Protection Regulation (Regulation (EU) 2016/679) ( “EU GDPR” ), the UK General Data Protection Regulation [...] Company will comply using a recognized mechanism, including the SCCs, the UK Addendum, the Swiss modifications to the SCCs, or any other lawful transfer mechanism recognized under Applicable Privacy Law”

    Read 2026-09-13 · official site · Report a correction

PCI DSSPayment card information subject to PCI DSS is Restricted Data customers may not submit without express prior written agreement.
Sources (1) →
  • Data Processing Agreement | Infisical ↗

    “Customer will not submit, and will not permit any User to submit, the following categories of data to the Services without the parties’ express prior written agreement [...] (f) payment card information subject to PCI DSS”

    Read 2026-09-13 · official site · Report a correction

Encryption at restSecrets and sensitive data encrypted with AES-256-GCM before being persisted to the storage backend.
Sources (1) →
  • Security — Infisical Docs ↗

    “any sensitive data (e.g. secrets, certificates entering the server), where applicable, is encrypted using a 256-bit Advanced Encryption Standard (AES) cipher in the Galois Counter Mode (GCM) with 96-bit nonces prior to being persisted in the storage backend.”

    Read 2026-09-14 · official docs · Report a correction

Customer-managed keysA project can be encrypted with an external KMS — AWS KMS or GCP KMS — instead of Infisical's internal KMS.
Sources (1) →
Role-based access controlRole-based, attribute-based, and one-off additional-privilege resource constraints.
Sources (1) →
  • Security — Infisical Docs ↗

    “The access control policies are configured by operators of Infisical ahead of time and may involve role-based, attribute-based, and one-off "additional privilege" resource constraints.”

    Read 2026-09-14 · official docs · Report a correction

Private networking / VPCGateways run inside your own network so Infisical can reach private resources; a paid feature under the Enterprise Tier for Infisical Cloud.
Sources (1) →
  • Networking - Infisical ↗

    “Some of the systems Infisical connects to aren't reachable from the internet: a database in a private subnet, an on-premises appliance, a server behind a corporate firewall. [...] Gateway is a paid feature available under the Enterprise Tier for Infisical Cloud users.”

    Read 2026-09-13 · official docs · Report a correction

Dedicated infrastructureInfisical Cloud is multi-tenant by default; dedicated cloud instances are available for enterprises with stricter isolation or regulatory needs.
Sources (1) →

When these numbers change, hear about it. Sources are re-checked monthly; a repricing goes out as a short note.

Confirm by email; unsubscribe from any issue. Your address goes to Kit and nowhere else — what we do with it.

Infisical in the news

Headlines from other publications, not checked by us · collected

Selected by a search on this company, refreshed weekly. Nobody here has verified these claims — where something material is confirmed, it is written into the page above with its source, the way every other fact on this site is.

Infisical pricing questions

How much does Infisical cost?

Pro tier: $20/identity/month billed annually, or $23/identity/month billed monthly.

Infisical Pricing · read

How does Infisical charge?

Billed per identity per month. An identity is any principal that authenticates to Infisical, human or machine.

Infisical Pricing · read

Does Infisical have a free tier?

Yes. A free plan for individuals and personal projects; every paid plan additionally carries a free trial with no credit card.

Infisical Pricing · read

What uptime does Infisical guarantee?

The SLA's own wording disagrees with itself: "ninety-nine and nine tenths percent (99.99%)" spells 99.9 and prints 99.99. Either way it applies only to Enterprise tier and above.

Infisical Service Level Agreement · read

Compare Infisical withAll alternatives, ranked →
Infisical vs Doppler
Infisical vs AWS Secrets Manager

Comments

Every page here is sourced and dated.