CipherTrust Secrets Management vs Infisical

CipherTrust Secrets Management, powered by Akeyless Vault, centralizes secrets, credentials, certificates, API keys, and tokens for DevOps tools and cloud workloads. It can create, store, rotate, and remove these items, with use cases including automated credential rotation, secrets sharing, just-in-time secret generation, and audit logs of secret use. Thales describes support for hybrid and multi-cloud environments, multiple tenants, on-premises systems, and legacy systems. Named integrations include GitHub, Kubernetes, and OpenShift. The product supports dynamic secrets, CI/CD injection, secret rotation, Kubernetes integration, and audit logs. Authentication standards listed are FIDO2.1, U2F, and WebAuthn, with NFC support; biometric unlock is not supported. CSM is available through self-hosted and web access, with a cloud deployment model also listed. It can run independently or alongside CipherTrust Manager, but needs a separate license. Pricing is on request, and a 90-day free trial is available.

Infisical is an identity security platform for managing application secrets, certificates, and privileged access across cloud, on-prem, and AI infrastructure. Secrets Management centralizes credentials for syncing, rotation, and auditing across environments and workloads, with role-based access scoped by environment, path, and identity. Secrets can be rotated on a schedule or issued as short-lived credentials. Certificate Management handles private certificate authorities and automates certificate issuance, renewal, and revocation. Privileged Access provides short-lived identity-based sessions with auditing, while Agent Proxy keeps real secrets at the proxy and gives agents placeholders, with requests logged. Infisical lists integrations including AWS, Azure Key Vault, GitHub, GitLab, Datadog, OpenAI, and PostgreSQL. It can be used as Infisical Cloud or self-hosted. A free plan is available; paid plans start at $20 a month billed annually. The free certificate plan is limited to 10 active certificates, up to 5 SANs per certificate, and no wildcard SANs.