Infisical is an open-source platform to manage and deliver app secrets, certificates (PKI), SSH credentials, and encryption keys across teams and infrastructure.

29k stars2.2k forkslast commit Actively maintained
Cloud-based privileged access management and enterprise password vault for securely storing, discovering, rotating and auditing secrets and privileged credentials. Includes role-based access control, session monitoring, automated rotation and compliance reporting.
Infisical is an open-source platform to manage and deliver app secrets, certificates (PKI), SSH credentials, and encryption keys across teams and infrastructure.

29k stars2.2k forkslast commit Actively maintained
Secure access platform for servers, Kubernetes, databases, desktops, and web apps with SSO/MFA, short-lived certificates, and full session auditing.

20.9k stars2.1k forksAGPL-3.0last commit Actively maintained
Self-hosted transparent bastion host and PAM for SSH, HTTPS, MySQL and Postgres with RBAC, session recording, and SSO/2FA—no client-side software required.

7.7k stars356 forksApache-2.0last commit Actively maintained
Advanced SSH server and bastion that authenticates via OpenID Connect or keys, runs sessions inside Docker containers or Kubernetes pods, and supports automatic user provisioning.

83 stars2 forksApache-2.0last commit Actively maintained
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 4 of 4 shipped a commit in the last six months. Licences in this list: AGPL-3.0, Apache-2.0. In exchange you take on hosting, backups and updates yourself.
Browse everything in Identity & Access Management (IAM).