surrealdb.com

HTML metadata

Title: SurrealDB | The context layer for AI agents
Description: SurrealDB is the context layer for AI agents. One database for documents, graphs, vectors, and time-series. One transaction from storage to memory. No middleware.
Language: en-GB
Canonical: https://surrealdb.com

Open Graph

url: https://surrealdb.com
title: SurrealDB | The context layer for AI agents
site name: SurrealDB
description: SurrealDB is the context layer for AI agents. One database for documents, graphs, vectors, and time-series. One transaction from storage to memory. No middleware.

Technology

CDN: Vercel
CMS: Gatsby

Social

Registration

Registrar

Name.com, Inc.

Created

2016-04-11

Expires

2027-04-11 327 days left

Updated

2026-04-09

Name servers

ns-1456.awsdns-54.org
ns-2025.awsdns-61.co.uk
ns-398.awsdns-49.com
ns-724.awsdns-26.net

DNS records live

NS

ns-1456.awsdns-54.org
ns-2025.awsdns-61.co.uk
ns-398.awsdns-49.com
ns-724.awsdns-26.net

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 18 TXT records

seobility=a8315ef245e2e9798fb02aee4a2fff14
hubspot-domain-verification=MGZiODJjZTktNTk0ZC00OTRmLTgwMTQtMGE5ZTZhYzFjNWRh
figma-domain-verification=a3d6495669a96f2c9e30aea0c8b430af06b6bb3c18cc66f98081e797f8a6d380-1769544705
openai-domain-verification=dv-7IZ7f56IQUC9twmPpSewP0uL
cursor-domain-verification-q0tyan=WFwTtSgz4JNgCdzpoQn3Wndzpatlassian-domain-verification=EAvjvj/GdvcyakGxdtsQ3ULY/iLnpWjB1bq3BWk/hvLXanpZss8J2g1ZNhrQ7RDM
google-site-verification=azCR1TDBXHWIfshPEBCMt4gMpB7dfKW09RjceiQ97U0
google-site-verification=PVNhRsHqCYEmmdzTpWMZL0qR_oeyWnwYqXh8nLXxhK8
MS=ms41683607
apple-domain-verification=Y6j0EiY6VDPLGZgAoJEEqhMWuhxMOcHUcxpoTuOi3Tg
notion-domain-verification=8J11XnD0wA1NaBq3Pc4LmioTqT6xRvuQPc3dkWLWp2w
central-9451
1password-site-verification=QKQHIIJ7RREQTFQZVUE4VNU74U
stripe-verification=92A935D74A4D98780482797F9926D5721E5D3A4E300C68F89381AC1FA76C0059
dropbox-domain-verification=z0839yca02jn
linear-domain-verification=mw5r2aeb5nuq
slack-domain-verification=wfRAW0x0MPxAqjP1ZDZTB24aUhXzPopNZr6x3GjF
OSSRH-91006
apple-domain-verification=YtVA7NYYnvBQqjoI

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:mailgun.org include:sendersrv.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; fo=1; ri=3600; sp=reject; adkim=r; aspf=r; rua=mailto:e89d0ffc@dmarc.mailgun.org,mailto:138314e1@inbox.ondmarc.com,mailto:postmaster@surrealdb.com; ruf=mailto:e89d0ffc@dmarc.mailgun.org,mailto:138314e1@inbox.ondmarc.com;

policy: reject (enforced) · sp=reject

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+14xN0tN/bUxnq/hvYcfaTdqGcxDLniYunAtE0n9RB04/QHYtaDJo3QHoclB2D7IGLCGN2gJ3+dVlIZQhSC…

selectors probed

Certificate (current)

R12

from 2026-03-24 to 2026-06-22

Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://surrealdb.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=*, geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' cdn.surrealdb.com *.intercom.io *.intercomcdn.com *.surreal.cloud; script-src 'self' cdn.surrealdb.com 'unsafe-eval' 'wasm-unsafe-eval' 'sha256-7PO9Sf8E8Z6CI+XugBIVArS8kyVNIn7bMXYo4t7CPBk=' 'sha256-emqBgr3x/toLEoCAcqjyBbyaxxFuxwPI9L1RlbodxwU=' tag.unifyintent.com *.intercom.io *.intercomcdn.com cdn.cr-relay.com js.hsforms.net static.ads-twitter.com snap.licdn.com *.vimeo.com embed.sequel.io *.youtube.com youtube.com static.reo.dev *.googletagmanager.com; script-src-elem 'self' cdn.surrealdb.com 'sha256-KDbxcgtFUNQqWpoQ3iz+nWCd2kv0gZmIfB/Bmo2Xcvs=' 'sha256-emqBgr3x/toLEoCAcqjyBbyaxxFuxwPI9L1RlbodxwU=' tag.unifyintent.com *.intercom.io *.intercomcdn.com cdn.cr-relay.com js.hsforms.net static.ads-twitter.com snap.licdn.com *.vimeo.com embed.sequel.io *.youtube.com youtube.com static.reo.dev *.googletagmanager.com; style-src 'self' cdn.surrealdb.com 'unsafe-inline' fonts.googleapis.com *.intercomcdn.com embed.sequel.io; img-src 'self' cdn.surrealdb.com blob: data: images
strict-transport-security: max-age=63072000