Skip to main content

​
Projects

A project defines a specific scope of work for a given product line in Infisical. Projects are created within an organization, and an organization can contain multiple projects across different product types.

​
Project types

Infisical supports project types, each representing a different security product with its own dashboard, workflows, and capabilities. The organization overview lists them as cards, and selecting one opens the projects of that type. The supported project types are:
  • Secrets Management: Securely store, access, and distribute secrets across environments with fine-grained controls, automatic rotation, and audit logging.
  • Secret Scanning: Detect hardcoded secrets in code, CI pipelines, and infrastructure—integrated with GitHub, GitLab, Bitbucket, and more.
  • Certificate Manager: Issue and manage X.509 certificates using protocols like EST, with support for internal and external CAs.
  • KMS: Encrypt and decrypt data using centrally managed keys with enforced access policies and full audit visibility.
  • Privileged Access Manager: Manage access to resources like databases, servers, and accounts with policy-based controls and approvals.

​
Roles and access control

Users and machine identities must be added to a project to access its resources. Each identity is assigned a project-level role that defines what they can manage—such as secrets, certificates, or PAM access. These roles apply to both individuals and user groups, enabling scalable access across teams and environments. Project access is strictly scoped: only members of a project can view or manage its resources. If someone needs access but isn’t part of the project, they can submit an access request. Each project in Infisical has its own access control model, distinct from organization-level access control. While organization roles govern broader administrative access, project-level roles control what users, groups, and machine identities can do within the boundaries of a specific project—such as managing secrets, issuing certificates, or configuring PAM access. Depending on the project type (e.g. Secrets Management, PKI, PAM), project-level access control supports advanced features like temporary access, access requests, and additional privileges. To learn more about how permissions work in detail, refer to the access control documentation.

​
Audit logs

Infisical provides audit logging at the project level to help teams monitor activity and maintain accountability within a specific project. These logs capture all relevant events—such as secret access, certificate issuance, and PAM activity—that occur within the boundaries of that project. Unlike the organization-level audit view, which aggregates logs across all projects in one centralized interface, the project-level audit view is scoped to a single project. This enables relevant project admins and contributors to review activity relevant to their work without having broader access to audit logs in other projects that they’re not part of.

​
Project settings

Each project has its own settings panel, with options that vary depending on the selected product type. These may include setup and configuration for environments, tags, behaviors, encryption strategies, and other options. Project settings are fully independent and reflect the capabilities of the associated product.