head to head · open source
Infisical vs Opengrep
Infisical has 30,219 GitHub stars, 2,408 forks, 789 open issues and last shipped yesterday. Opengrep has 3,273 stars, 287 forks, 92 open issues and last shipped yesterday. Infisical leads on adoption by 823% (30,219 vs 3,273 stars). Infisical is written in TypeScript under a custom or non-standard licence; Opengrep is written in OCaml under LGPL-2.1. Infisical has attracted 8% as many forks as stars, Opengrep 9%. Infisical was the more recently maintained of the two, and both are self-hostable with no licence fee.
Two open source projects, one decision. Both are free and self-hostable — the differences are community size, license terms, language stack and release pace.
← all 20902 open source comparisons
Side by side
| Infisical | Opengrep | |
|---|---|---|
| GitHub stars | ★ 30K | ★ 3.3K |
| License | Custom / other | LGPL-2.1 |
| Written in | TypeScript | OCaml |
| Last push | 2026-11-02 | 2026-11-02 |
| Forks | ⑂ 2.4K | ⑂ 287 |
| Self-hosting | Yes | Yes |
| Data ownership | Your server | Your server |
pick Infisical if
- You weight community size — 30K stars and counting
- You want the Custom / other license terms
- Your stack matches TypeScript
- You value the larger contributor base for long-term maintenance
pick Opengrep if
- You want the Opengrep feature set and don't need the biggest community
- You prefer the LGPL-2.1 license terms
- Your stack matches OCaml
- You evaluated both and Opengrep fits your workflow better
About Infisical
The open source secret management platform : Sync secrets/configs across your team/infrastructure and prevent secret leaks. Slack Infisical Cloud Self Hosting Docs Website Twitter Hiring (Remote/SF) Introduction Infisical is the open source security infrastructure platform that teams use for secrets, certificates, and privileged access management. We're on a mission to make security tooling more accessible to everyone, not just security teams, and that means redesigning the entire developer experience from ground up. Features Secrets Management: Centralize your application secrets and configuration across every…
read the full Infisical overview →
About Opengrep
Welcome to Opengrep, a fork of Semgrep, under the LGPL 2.1 license Opengrep is the most advanced open source SAST engine. Let's make secure software development a shared standard. Opengrep provides every developer and organisation with open and advanced static code analysis. Opengrep is backed by a consortium of AppSec organisations, including: Aikido, Amplify, Endor Labs, Kodem, and Orca Security. To learn more, read the manifesto at opengrep.dev. Why Opengrep? Opengrep was created when Semgrep moved critical features behind a commercial licence. We believe advanced static analysis should remain open and…
read the full Opengrep overview →
More in Security & Privacy
Related comparisons
More Application Security projects
Compare either of these against the rest of the Application Security field.
Frequently asked questions
Is Infisical or Opengrep more popular?
Infisical has 30,219 GitHub stars and Opengrep has 3,273. Infisical has the larger community by that measure.
Are Infisical and Opengrep free?
Both are open source. Infisical has no licence declared in this registry, and Opengrep is licensed under LGPL-2.1. Both are free to self-host.
What is the difference between Infisical and Opengrep?
Infisical is written in TypeScript and Opengrep in OCaml. The practical differences are community size, licence terms, language stack and release cadence — all compared in the table above.
Which should I choose, Infisical or Opengrep?
Choose Infisical if you want the larger community (30,219 stars) or its Custom / other licence terms. Choose Opengrep if its feature set, stack or LGPL-2.1 licence fits better. Both are self-hostable.