--- title: Introducing Infisical PAM: Secure, Fast Access to... description: Infisical launched a new Privileged Access Management (PAM) product that grants temporary, scoped access to sensitive infrastructure like databases, servers,... canonical: https://daily.dev/posts/introducing-infisical-pam-secure-fast-access-to-production-infrastructure-qwkhferir twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Introducing Infisical PAM: Secure, Fast Access to Production Infrastructure | daily.dev og:description: Infisical launched a new Privileged Access Management (PAM) product that grants temporary, scoped access to sensitive infrastructure like databases, servers,... og:url: https://daily.dev/posts/introducing-infisical-pam-secure-fast-access-to-production-infrastructure-qwkhferir og:image: https://api.daily.dev/og/posts/QWkhFeRiR.png og:image:alt: Introducing Infisical PAM: Secure, Fast Access to Production Infrastructure og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Introducing Infisical PAM: Secure, Fast Access to Production Infrastructure **[Infisical](https://daily.dev/sources/infisical)** · 6 min read · 1 upvotes · 0 comments ## Summary Infisical launched a new Privileged Access Management (PAM) product that grants temporary, scoped access to sensitive infrastructure like databases, servers, and cloud accounts without standing credentials or per-target agents. It uses a single lightweight gateway per network to reach PostgreSQL, MySQL, MS SQL, MongoDB, SSH, Kubernetes, Windows/AD, AWS IAM, GCP service accounts, and Azure. Access is just-in-time, expires automatically, and every session is recorded with a full audit trail. Policies can require justification or approval depending on resource sensitivity, and a Discovery feature scans existing systems (starting with Active Directory) to find and import privileged accounts already in use. The product runs on the same Infisical Cloud or self-hosted platform used for secrets and certificate management. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is privileged access management (PAM) and why do engineering teams need it? Privileged access management grants temporary permissions to sensitive resources like servers, databases, or cloud accounts that are normally restricted for security reasons. Teams need it because manually managing access via Slack messages or shared admin credentials doesn't scale, creates audit blind spots, and makes credential rotation unreliable, especially during incidents when an on-call engineer needs fast, scoped access. _Teams weighing PAM options can track infrastructure access tooling news on daily.dev._ ### How does Infisical PAM avoid installing an agent on every server or database? Infisical PAM uses a single lightweight gateway deployed once per network, making outbound connections to Infisical, rather than requiring an agent on each protected target. This gateway covers everything behind it, including PostgreSQL, an internal admin panel, and production servers over SSH, so newly spun-up infrastructure doesn't require a separate agent deployment to be reachable. _Engineers comparing agent-based versus gateway-based access tools can follow this space on daily.dev._ ### What infrastructure types and access methods does Infisical PAM support? It supports PostgreSQL, MySQL, MS SQL, MongoDB, SSH, Kubernetes, Windows and Windows AD over RDP, plus AWS IAM roles, GCP service accounts, and Azure via a service principal. Databases, SSH, AWS, and Windows get a browser-based connection from the dashboard, while everything else runs through a CLI that starts a local proxy so engineers connect with existing clients like psql, kubectl, or gcloud against localhost. _Developers evaluating access tooling for multi-cloud infrastructure can keep up with releases like this on daily.dev._ ## Similar posts on daily.dev - [PIM vs PAM Security: Which Approach Better Protects Your Enterprise?](https://daily.dev/posts/pim-vs-pam-security-which-approach-better-protects-your-enterprise--aacpdyacf) · Netguru · 0 upvotes · 0 comments - [Tailscale PAM beta: Just-in-time access, session auditing, and more](https://daily.dev/posts/tailscale-pam-beta-just-in-time-access-session-auditing-and-more-qwiynntod) · Tailscale · 0 upvotes · 0 comments - [Always-on privileged access is pervasive — and fraught with risks](https://daily.dev/posts/always-on-privileged-access-is-pervasive-and-fraught-with-risks-pvlw6ry4b) · CSO Online · 0 upvotes · 0 comments - [Why VPNs Are No Longer Enough for Secure Remote Access](https://daily.dev/posts/why-vpns-are-no-longer-enough-for-secure-remote-access-2t4huxvkq) · Security Boulevard · 0 upvotes · 0 comments - [Working Towards Improved PAM: Widening The Scope And Taking Control](https://daily.dev/posts/working-towards-improved-pam-widening-the-scope-and-taking-control-sauqc3njg) · GitGuardian · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#devops](https://daily.dev/tags/devops), [#secrets-management](https://daily.dev/tags/secrets-management) [View this post on daily.dev](https://daily.dev/posts/introducing-infisical-pam-secure-fast-access-to-production-infrastructure-qwkhferir) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Introducing Infisical PAM: Secure, Fast Access to Production Infrastructure","url":"https://daily.dev/posts/introducing-infisical-pam-secure-fast-access-to-production-infrastructure-qwkhferir","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/introducing-infisical-pam-secure-fast-access-to-production-infrastructure-qwkhferir"},"datePublished":"2026-10-04T06:43:22.584Z","dateModified":"2026-10-04T06:43:47.333Z","description":"Infisical launched a new Privileged Access Management (PAM) product that grants temporary, scoped access to sensitive infrastructure like databases, servers,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4373788cc64d80896ad2d0cbf6be87fb?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4373788cc64d80896ad2d0cbf6be87fb?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Infisical","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Infisical","logo":"https://media.daily.dev/image/upload/s--cBUOmyKi--/f_auto/v1791096186/squads/35883724-c141-4779-850e-50db106017fd?_a=BAMAMicg0","url":"https://daily.dev/squads/infisical"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/introducing-infisical-pam-secure-fast-access-to-production-infrastructure-qwkhferir","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,devops,secrets-management","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Infisical","item":"https://daily.dev/squads/infisical"},{"@type":"ListItem","position":3,"name":"Introducing Infisical PAM: Secure, Fast Access to Production Infrastructure"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/introducing-infisical-pam-secure-fast-access-to-production-infrastructure-qwkhferir#faq","mainEntity":[{"@type":"Question","name":"What is privileged access management (PAM) and why do engineering teams need it?","acceptedAnswer":{"@type":"Answer","text":"Privileged access management grants temporary permissions to sensitive resources like servers, databases, or cloud accounts that are normally restricted for security reasons. Teams need it because manually managing access via Slack messages or shared admin credentials doesn't scale, creates audit blind spots, and makes credential rotation unreliable, especially during incidents when an on-call engineer needs fast, scoped access. Teams weighing PAM options can track infrastructure access tooling news on daily.dev."}},{"@type":"Question","name":"How does Infisical PAM avoid installing an agent on every server or database?","acceptedAnswer":{"@type":"Answer","text":"Infisical PAM uses a single lightweight gateway deployed once per network, making outbound connections to Infisical, rather than requiring an agent on each protected target. This gateway covers everything behind it, including PostgreSQL, an internal admin panel, and production servers over SSH, so newly spun-up infrastructure doesn't require a separate agent deployment to be reachable. Engineers comparing agent-based versus gateway-based access tools can follow this space on daily.dev."}},{"@type":"Question","name":"What infrastructure types and access methods does Infisical PAM support?","acceptedAnswer":{"@type":"Answer","text":"It supports PostgreSQL, MySQL, MS SQL, MongoDB, SSH, Kubernetes, Windows and Windows AD over RDP, plus AWS IAM roles, GCP service accounts, and Azure via a service principal. Databases, SSH, AWS, and Windows get a browser-based connection from the dashboard, while everything else runs through a CLI that starts a local proxy so engineers connect with existing clients like psql, kubectl, or gcloud against localhost. Developers evaluating access tooling for multi-cloud infrastructure can keep up with releases like this on daily.dev."}}]} ```