Infisical

An open-source platform for managing application secrets, configuration and certificates in one place. It stores shared configuration values, generates dynamic secrets on demand, issues and rotates certificates through a built-in PKI, and scans repositories and infrastructure for leaked credentials.

Teams use it to give developers a single source of truth across environments, to keep secrets out of source control, and to satisfy audits that ask how keys are rotated and who can read them.

Deploying it yourself means the secret material never sits with an external vendor, there is no charge per developer, and the encrypted store and audit trail are yours to back up and restore.