Infisical

Infisical centralizes application secrets — API keys, database credentials, certificates — with per-environment scoping, versioning, access controls and integrations that inject secrets into CI pipelines, Kubernetes and local development.

It is a young, fast-moving product with a hosted offering funding development; the self-hosted open-source deployment is well documented but keeps evolving, so pin versions and read changelogs. For teams currently sharing .env files over Slack, almost anything is an upgrade — this is a good one.

The approachable middle ground between .env chaos and running HashiCorp-grade infrastructure.