Tools

Infisical is the open-source platform for secrets, certificates, and privileged access management.

The authentication glue you need.

Share sensitive information securely with self-destructing links that are only viewable once.

Fully transparent SSH, HTTPS, Kubernetes, MySQL and Postgres bastion/PAM that doesn't need additional client-side software

Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

Secure, browser-based, password-only self-custodial cryptocurrency wallet.

Single Sign-On for Your Self-Hosted Universe

Kanidm: A simple, secure, and fast identity management platform

Whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.

A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.

Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

Open source Auth0/Clerk/Firebase alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

Open Source Identity and Access Management For Modern Applications and Services

Password manager dedicated for managing passwords in a collaborative way. One symmetric key is used to encrypt all shared/team passwords and stored server side in a file and the database. works on any server Apache, MySQL and PHP.

Web frontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory.

Quantum-inspired keyring for AI coding agents. Secure secrets with superposition, entanglement, tunneling, and teleportation.

Credential isolation proxy for AI agents. Injects secrets at the network boundary with domain restrictions, agent authentication, and audit logging. No SDK required — works as a transparent HTTP proxy or MCP server.