Infisical

Infisical is the open-source answer to the mess of passing API keys through DMs or praying your .env files don't leak. It centralizes secrets, certificates, and identities for both humans and AI agents, acting as a modern hub that doesn't feel like a relic from the enterprise-only era. If you find HashiCorp Vault too bloated or want to avoid vendor lock-in from cloud providers, this is where you land.

It is a perfect fit for growing teams that need to sync credentials across environments without the manual overhead. The trade-off is the usual self-hosting tax: if you go that route, you are responsible for keeping the vault alive and secure. While it might be overkill for a tiny solo project, it is a solid move for any dev lab that wants to treat security as a first-class citizen without the corporate headache.