grafbase.com

Live preview

This site sends "X-Frame-Options: DENY", which blocks embedding it here.

Since grafbase.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

public, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self';script-src 'self' https://vercel.live https://*.vercel-scripts.com https://*.googletagmanager.com https://*.g.doubleclick.net cdn.syftdata.com chat.cdn-plain.com snap.licdn.com 'unsafe-eval' 'unsafe-inline' bugcrowd.com assets.bugcrowdusercontent.com app.cal.com;worker-src 'self' blob:;style-src 'self' 'unsafe-inline' https://vercel.live https://fonts.googleapis.com;img-src 'self' https://vercel.live https://vercel.com https://www.gravatar.com data: blob: https://*.linkedin.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.s3.amazonaws.com https://*.youtube.com https://*.ytimg.com;connect-src 'self' https://vercel.live wss://ws-us3.pusher.com https://api.rudderstack.com https://rs.grafbase.com https://rs-dataplane.grafbase.com https://api.github.com https://*.sentry.io https://*.linkedin.com https://*.plain.com https://event.syftdata.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com api.grafbase.com https://*.algolia.net https://*.algolianet.com https://*.algolia.io;frame-src 'self' https://vercel.live https://td.doubleclick.net https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://youtube.com bugcrowd.com assets.bugcrowdusercontent.com app.cal.com;font-src 'self' https://fonts.gstatic.com https://vercel.live https://assets.vercel.com https://cal.com chat.cdn-plain.com;object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests

Strict-Transport-Security

max-age=63072000; includeSubDomains; preload

X-Frame-Options

DENY

X-Content-Type-Options

Not sent

Referrer-Policy

Not sent

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://grafbase.com/HTTP 308

   → https://grafbase.com/

2. 2.https://grafbase.com/HTTP 200

Meta tags

Title

Enterprise-grade governance, control, and observability for your APIs - Grafbase

Description

Grafbase provides secure, self-hosted deployment options, unmatched query speed, and unified data access for reliable, enterprise-grade GraphQL API management.

Canonical

https://grafbase.com

Robots

Not set

Generator

Not set

Open Graph title

Enterprise-grade governance, control, and observability for your APIs - Grafbase

Open Graph description

Grafbase provides secure, self-hosted deployment options, unmatched query speed, and unified data access for reliable, enterprise-grade GraphQL API management.

Open Graph image

https://grafbase.com/preview.png

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Enterprise-grade governance, control, and observability for your APIs - Grafbase

Twitter image

https://grafbase.com/preview.png

robots.txt

Disallow rules (User-agent: *)

0

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  Found "_next/static/" in the page's HTML

Related domains