#99
A
Rank #25
Infisical
Open-source secrets management platform comparable to HashiCorp Vault, with proper server-side encryption and access control rather than client-managed secrets. One of the more security-conscious designs in this batch.
79.8
/ 100
⚙ Full Stack
Node.js/TypeScript backend, Postgres for encrypted secret storage, Redis for caching/session state, KMS-style envelope encryption for secrets at rest.
📈 Scaling Analysis
Stateless API tier backed by Postgres for durable encrypted storage scales the conventional way; the security model (server-side encryption, RBAC, audit logs) is architected properly rather than bolted on, which is the main differentiator versus weaker secrets tools.
🚀 Running on Nexlayer
App pod plus postgres and redis pods; set SITE_URL to the Nexlayer domain and REDIS_URL to redis.pod:6379. mirror.gcr.io/library/node covers the build image; the encryption key material should be injected via env/secret mount, never baked into the image.