Staxly

Infisical vs Kinde

Open-source secrets, PKI and SSH — self-hostable Doppler/Vault alternative
vs. Flexible authentication, user management, and feature flags

Infisical (OSS)Kinde website

Pricing tiers

Infisical

Free (Cloud)
$0. Unlimited users. 5 projects. 30-day audit. Community support.
Free
Self-Host CE (OSS)
Free forever. MIT license. Core features free. Docker Compose.
$0 base (usage-based)
Pro
$18/user/mo. Unlimited projects, secret rotation, dynamic secrets, 90-day audit, Slack alerts.
$18/mo
Enterprise
Custom. SAML, SCIM, SLA, dedicated deploy, HIPAA-ready, audit 1yr+.
Custom
Self-Host EE (BSL)
Custom. BSL-licensed enterprise features for self-hosted deploys.
Custom
Infisical (OSS)

Kinde

Free
10,500 MAU included. MFA, B2B orgs, custom domain, 2 custom roles, 1 webhook, 2 environments.
Free
Pro
Unlimited webhooks, roles, feature flags, API keys. Remove Kinde branding. SOC 2 attestation.
$25/mo
Plus
Unlimited enterprise SSO, API scopes, org-owned M2M apps, 6 environments.
$75/mo
Scale
11 environments, custom domain per org, SCIM, MFA triggers, 30-day audit logs.
$250/mo
Enterprise
Custom. Dedicated infra option, volume discounts, custom SLAs.
Custom
Kinde website

Free-tier quotas head-to-head

Comparing free on Infisical vs free on Kinde.

MetricInfisicalKinde
custom roles2 roles
environments2 envs
feature flags10 flags
mau included10500 users/month
webhooks1 webhooks

Features

Infisical · 18 features

  • Approval PoliciesPR-style approvals.
  • Audit LogFull activity trail.
  • Dynamic SecretsGenerate on-demand creds.
  • E2E EncryptionOptional zero-knowledge mode.
  • EnvironmentsMulti-env (dev/staging/prod).
  • Infisical AgentSidecar for secret injection.
  • Infisical CLICommand-line access.
  • Kubernetes OperatorNative K8s controller.
  • PKI (Certificates)Private CA + cert lifecycle.
  • RBACRoles + permissions.
  • SCIMUser provisioning.
  • Secret RotationAuto-rotate keys.
  • Secrets ManagementCore secret storage.
  • Secret SyncSync to cloud/hosting.
  • Self-Host (CE + EE)Docker / Helm / AMI.
  • SSHEphemeral SSH access.
  • SSO (SAML)Enterprise auth.
  • WebhooksChange events.

Kinde · 14 features

  • API ScopesOAuth scopes for your APIs, enforced server-side (Plus+).
  • B2B OrganizationsMulti-tenant orgs with user roles, invitations, feature flags per org.
  • Custom DomainHost auth at auth.yourbrand.com. Free tier includes this.
  • Enterprise SSOSAML 2.0 + OIDC enterprise connections (Plus unlimited).
  • Feature FlagsBuilt-in feature flags with per-user/org overrides. No separate service needed.
  • Kinde AIAI-assisted query and insights over your Kinde data.
  • Kinde Billing (preview)Built-in subscription billing linked to users/orgs. Stripe under the hood.
  • Machine-to-MachineClient credentials grant for service-to-service auth.
  • Multi-Factor AuthTOTP authenticator apps, SMS, email, passkey.
  • PasswordlessEmail code + passkey (WebAuthn).
  • Roles & PermissionsRBAC with roles → permissions. Assigned per user or per organization.
  • SCIM ProvisioningDirectory provisioning from IdPs (Scale tier).
  • Sign-in WidgetHosted pages + themeable widget for login/signup. Customizable with CSS.
  • WebhooksEvent webhooks: user.created/updated, organization events, MFA, etc.

Developer interfaces

KindInfisicalKinde
CLIinfisical CLI
SDKinfisical-python, @infisical/sdkKinde Android / Kotlin, Kinde Flutter SDK, Kinde Go SDK, Kinde iOS / Swift, @kinde-oss/kinde-auth-nextjs, @kinde-oss/kinde-auth-react, @kinde-oss/kinde-nodejs-sdk, Kinde Python SDK
RESTInfisical REST APIKinde Management API
MCPKinde MCP
OTHERInfisical Agent, Infisical Dashboard, Kubernetes Operator, Self-Host (Docker)
Staxly is an independent catalog of developer platforms. Some links to Infisical and Kinde may be affiliate links — Staxly may earn a commission if you sign up through them, at no extra cost to you. Pricing is verified against vendor pages at publication time — reconfirm before buying.

Want this comparison in your AI agent's context? Install the free Staxly MCP server.