> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# What is Infisical?

> The open source platform for managing secrets, certificates, and secure infrastructure access.

[Infisical](https://infisical.com) is the [open source](https://github.com/Infisical/infisical), all-in-one platform for secrets, certificates, privileged access, and AI agent access.

It provides modern security workflows — including secrets rotation, dynamic credentials, access approvals, privileged access management, and credential-free access for AI agents — all within one platform designed for developers, infrastructure, and security teams.

Start managing secrets securely with [Infisical Cloud](https://app.infisical.com) or learn how to [host Infisical](https://infisical.com/docs/self-hosting/overview.md) yourself.

> [!TIP]
>
> Visual learner? Watch a [guided overview of the Infisical platform](https://www.youtube.com/watch?v=2GrrScI2Qms) to build the right mental model before diving into the rest of the documentation.

## Why use Infisical?

Managing secrets, credentials, and infrastructure access is a critical concern for engineering teams. As infrastructure scales and environments become more complex, [secrets start to sprawl](https://infisical.com/blog/what-is-secret-sprawl) — across codebases, CI/CD pipelines, configuration files, and cloud services. This makes them difficult to track, rotate, and secure.

Without proper management, secret sprawl turns into risk: hardcoded credentials, unrotated keys, fragmented access controls that attackers can exploit amongst other things.

Infisical addresses this challenge by providing an all-in-one platform and workflows to:

* Securely store and manage application secrets from development to production.
* Scan code and pipelines for exposed credentials.
* Automate X.509 certificate issuance and renewal.
* Govern privileged access to infrastructure with policy-driven sessions.
* Encrypt and decrypt sensitive data with centralized key control.
* Broker outbound API access for AI agents so they never hold real credentials.
* Audit every access, credential use, and change.

Infisical is designed to integrate cleanly into your stack—improving security without adding complexity.

## What can you do with Infisical?

Infisical consists of six integrated products, each addressing a specific aspect of infrastructure security. The cards below link to an introduction to each product and the tasks it can be used for.

> [card] [Manage secrets](https://infisical.com/docs/documentation/getting-started/choose-a-product/secrets-management/overview.md)
>
> Store, deliver, and rotate credentials used by applications, and broker access to services for AI agents.

> [card] [Detect leaked secrets](https://infisical.com/docs/documentation/getting-started/choose-a-product/secret-scanning.md)
>
> Scan source code and developer systems to identify credentials that have been exposed.

> [card] [Manage certificates](https://infisical.com/docs/documentation/getting-started/choose-a-product/pki.md)
>
> Issue and automatically renew TLS, mTLS, and device certificates from internal or external certificate authorities.

> [card] [Manage cryptographic keys](https://infisical.com/docs/documentation/getting-started/choose-a-product/kms.md)
>
> Perform encryption, decryption, and signing operations using keys stored within Infisical.

> [card] [Manage privileged access](https://infisical.com/docs/documentation/getting-started/choose-a-product/pam.md)
>
> Give users and AI agents session-based access to databases and servers without providing them with the underlying credentials.

> [card] [Run AI agents securely](https://infisical.com/docs/documentation/getting-started/choose-a-product/agent-vault.md)
>
> Broker outbound API access for AI agents so they call services under stored credentials they never see.

## How the platform fits together

All six products share the same underlying platform. This platform includes organizations, projects, identities, deployment configuration, and integrations with external services.

> [card] [Account structure](https://infisical.com/docs/documentation/getting-started/concepts/platform-hierarchy.md)
>
> How organizations, projects, and members are structured within Infisical.

> [card] [Identity and access](https://infisical.com/docs/documentation/getting-started/concepts/platform-iam.md)
>
> How users and machine identities authenticate, and how roles determine their permissions.

> [card] [External integrations](https://infisical.com/docs/documentation/getting-started/concepts/app-connections.md)
>
> Stored credentials that allow Infisical to authenticate with third-party services on your behalf.

> [card] [Private network access](https://infisical.com/docs/documentation/getting-started/concepts/networking.md)
>
> How Infisical reaches systems that aren't directly accessible from its own network.

> [card] [Cloud vs. self-host](https://infisical.com/docs/documentation/getting-started/concepts/deployment-models.md)
>
> Choose between running Infisical on Infisical Cloud or on your own infrastructure.

> [card] [Architecture and security](https://infisical.com/docs/documentation/getting-started/concepts/internals.md)
>
> How Infisical is built, how permissions are evaluated, and how data is encrypted.

> [card] [Contributing](https://infisical.com/docs/documentation/getting-started/concepts/contributing.md)
>
> How to propose a change to Infisical, run the platform locally, and open a pull request.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.