Top all-time · #2452
Infisical
Company blog · infisical.com/blog · on HN as vmatsiiakosecurityprogramming
Infisical is the company blog at infisical.com, writing about security and programming. Since 2022, 31 different Hacker News readers have linked it 112 times, most often “Show HN: Infisical – open-source secrets manager for developers”. It is still writing: the last post was on 2025-08-31, and you can follow it by feed.
Too few sampled comments (24) to say how often HN recommends it.?
Why HN links it
HN readers link Infisical's site, docs and tutorials mainly as an open-source secrets manager, covering env files, self-hosting, Kubernetes and agent credentials. Commenters link it for the product rather than the writing.
Summarised by Claude from a sample of 24 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Infisical is the all-in-one identity security platform for developers, machines, and AI agents. Manage identities, secrets, certs, and access.
Most-linked posts?
- Show HN: Infisical – open-source secrets manager for developers6 people · 6 mentions · first linked 2023-01-24
- /docs/security/overview4 people · 4 mentions · first linked 2023-01-25
- /3 people · 8 mentions · first linked 2023-09-16
- /docs/integrations/platforms/kubernetes3 people · 4 mentions · first linked 2022-12-19
- How .env Works3 people · 3 mentions · first linked 2026-09-25
- Agent Vault: The Open Source Credential Proxy and Vault for Agents2 people · 2 mentions · first linked 2026-04-22
- SSH Keys Don't Scale. SSH Certificates Do2 people · 2 mentions · first linked 2025-04-14
- Agent Proxy: Secure Credential Brokering for Agents2 people · 2 mentions · first linked 2026-07-30
- The Great Migration from MongoDB to PostgreSQL2 people · 2 mentions · first linked 2024-03-28
- /docs/documentation/platform/agent-proxy/overview2 people · 2 mentions · first linked 2026-08-01
What Hacker News says?
You can use native authentication methods with Infisical that don't require you to use keys to authenticate with your secrets manager: - https://infisical.com/docs/documentation/platform/identities... - https://infisical.com/docs/documentation/platform/identities...
Comment linking /docs/documentation/platform/identities/oidc-auth/general
on “How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos”Submitted The Great Migration from MongoDB to PostgreSQL as a story · 345 points
HN discussionInfisical (YC W23) | Full Stack Engineer | REMOTE | Full-time We're building the open source security stack for developers – starting with secrets management. https://www.ycombinator.com/companies/infisical/jobs/0tvPmoc... ( https://infisical.com/careers )
Comment linking /careers
on “Ask HN: Who is hiring? (July 2024)”Submitted How we rebuilt complex permissions without migrating to Zanzibar as a story · 73 points
HN discussionYou might want to take a look at Infisical ( https://infisical.com )
Comment linking /
on “Ask HN: How to store and share passwords in a company?”Submitted SSH Keys Don't Scale. SSH Certificates Do as a story · 20 points
HN discussionYou should encrypt and backup your assets regularly. We recently published a tutorial on how to to do so using B2 and Infisical so that your private key doesn't live on the server: https://infisical.com/blog/self-hosting-infisical-homelab
Comment linking /blog/self-hosting-infisical-homelab
on “Self-Hosting like it's 2025”Submitted The Great Migration from MongoDB to PostgreSQL as a story · 17 points
HN discussionDo you know that OpenBao is actually funded by IBM? I'm biased (co-founder) but you should take a look at Infisical for secret management: https://infisical.com
Comment linking /
on “IBM nearing a buyout deal for HashiCorp, source says”Submitted Show HN: Infisical – open-source secrets manager for developers as a story · 14 points
HN discussionGit-crypt is a dead product with numerous unresolved issues and drawbacks. Newer versions of git cause git to crash when invoking git-crypt[0]. It doesn’t scale with users: Off-boarding a key is a commit in git. Since it is trivially easy to rewind a git repo before the revocation commit and then decrypt with the revoked key, this means you need to rotate every key under management when any revoke is performed. It p…
Comment linking /
on “Git-crypt – transparent file encryption in Git”Submitted Show HN: Infisical – open-source secret management platform as a story · 13 points
HN discussionYou can use Infisical for both secrets, certs, and PAM: https://infisical.com
Comment linking /
on “HashiCorp archives the Boundary open source repo”Submitted Show HN: Infisical PKI – Open-Source Private CA and Certificate Management as a story · 9 points
HN discussionI heard good things about Infisical (open source, end to end encryption of secrets): https://infisical.com/
Comment linking /
on “Ask HN: What tools should I use to manage secrets from env files?”Submitted Coding Agents Are Reading Your .env as a story · 8 points
HN discussionThere's a solution for this in Infisical! It's called secrets brokering and is built into the Infisical CLI: The Infisical agent proxy. Using this, your agent can use secrets without ever being able to fetch them back since they are injected into upstream requests. You can use this for local coding agents like Claude Code or Codex, and also have a standalone proxy with a separate machine identity for longer running…
Comment linking /docs/documentation/platform/agent-proxy/overview
on “Tailscale didn't stop the Hugging Face intrusion”Submitted The Case for Terraform Modules: Scaling Your Infrastructure Organization as a story · 7 points
HN discussionInfisical should work well for your use case! https://infisical.com
Comment linking /
on “Ask HN: How do you share and sync .env files and secrets with your team”Submitted Infisical Agent Vault as a story · 6 points
HN discussionWe use Infisical for both our dev and prod environments. If you're a YC company you can get your first year free. https://infisical.com
Comment linking /
on “Ask HN: How do you share and sync .env files and secrets with your team”Submitted Infisical raises $40M Series B led by Elad Gil as a story · 5 points
HN discussionThank you! Besides the CLI and browser UI, we also support a range of integrations (we're still working on this but you can already see some of them in the Integrations section of our ReadMe: https://github.com/Infisical/infisical; or here in docs: https://infisical.com/docs/integrations/overview ). With that, you can auto-inject your secrets into those 3-rd party services. You can also inject your secrets into Kube…
Comment linking /docs/integrations/platforms/kubernetes
on “Show HN: Infisical – open-source secrets manager”Submitted How .env Works as a story · 5 points
HN discussionLet me know if you have any questions. Here are the Docker instructions: https://infisical.com/docs/integrations/platforms/docker
Comment linking /docs/integrations/platforms/docker
on “Show HN: Infisical – open-source secrets manager”Submitted SSH Keys Don't Scale. SSH Certificates Do as a story · 5 points
HN discussionBased on a strict definition, I agree that Embrasure may not be considered self-hosted, but I don't think that's the "prevailing expectation." For example, look at Infisical's documentation[0], and you'll see they offer self-hosting solutions on AWS, GCP, Azure, and more. [0] https://infisical.com/docs/self-hosting/overview
Comment linking /docs/self-hosting/overview
on “Show HN: A self-hosted, AWS-based secrets manager”Submitted Postmortem-Driven Development as a story · 4 points
HN discussionHey! Definitely, we have more details on the cryptography in our documentation here: https://infisical.com/docs/security/overview . Put simply, Infisical operates E2EE by default which means the platform itself can’t decrypt secrets. This is unless you opt out of E2EE (secrets remain encrypted at rest) to use select features like native integrations - this is, however, not necessary to use the platform. In your case…
Comment linking /docs/security/overview
on “Infisical – open-source HashiCorp Vault alternative”Submitted Stop Using .env Files as a story · 4 points
HN discussion
