Resurface website screenshot

Resurface

Resurface (now Graylog API Security) is an API runtime security and observability platform that captures and analyzes complete API request and response payloads in real time. It provides full API call logging, threat detection, data leak prevention, and compliance auditing for API traffic without sampling or aggregation. Acquired by Graylog and integrated into the Graylog SIEM platform.

Resurface publishes 5 APIs on the APIs.io network. Tagged areas include API Analytics, API Compliance, API Logging, API Observability, and API Security.

The Resurface catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.

Resurface’s developer surface includes documentation, engineering blog, GitHub presence, pricing, support, and 8 more developer resources.

42.1/100 developing ▬ flat Agent 3/100 human only Full breakdown ↓
scored 2026-08-05 · rubric v0.9.1
AccessFreemium
5 APIs
API AnalyticsAPI ComplianceAPI LoggingAPI ObservabilityAPI SecurityData Leak PreventionRuntime SecuritySIEMThreat Detection

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-05 · rubric v0.9.1
Composite quality — 42.1/100 · developing
Contract Quality 6.9 / 25
Developer Ergonomics 3.0 / 20
Commercial Clarity 12.6 / 20
Operational Transparency 4.8 / 13
Governance 8.3 / 12
Discoverability 6.5 / 10
Agent readiness — 3/100 · human only
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/resurface: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 5

Individual APIs this provider publishes, each with its own machine-readable definition.

Resurface Platform

Resurface captures complete API request and response data in real time, providing full-payload API call logging with no sampling. Security teams use it to detect threats, identi...

Resurface Logger for Go

Open-source Go library for logging API requests and responses to the Resurface database. Integrates with gorilla/mux and other Go HTTP frameworks.

Resurface Logger for eBPF

eBPF-based kernel-level API call logger that captures HTTP traffic without application code changes for zero-instrumentation observability.

Resurface Containers

Official Helm charts and container images for deploying the Resurface API security database on Kubernetes.

Resurface Trino Connector

Connector for querying Resurface API call data via Trino distributed SQL query engine.

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

Resurface Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Resurface Context

5 classes · 10 properties

JSON-LD

Spectral Rules 1

Spectral governance rulesets for linting and validating these APIs.

Resurface API Rules

5 rules · 4 warnings 1 info

SPECTRAL

JSON Schema 1

Standalone JSON Schema definitions for this provider's data models.

Resurface API Call Log

12 properties

JSON SCHEMA

JSON Structure 1

JSON Structure definitions describing this provider's data shapes.

Resurface Api Call Log Structure

0 properties

JSON STRUCTURE

Security Posture 1

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Resurface Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Resources

Get Started 1

Portal, sign-up, and the first successful call

Documentation 1

Reference material describing how the API behaves

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

Build 1

SDKs, sample code, and the tooling you integrate with

Access & Security 1

Authentication, authorization, and security posture

Operate 1

Status, limits, changes, and where to get help

Commercial 1

Pricing, plans, and the legal terms of use

Company 4

The organization behind the API

Other 2

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: resurface
name: Resurface
description: Resurface (now Graylog API Security) is an API runtime security and observability platform that captures and
  analyzes complete API request and response payloads in real time. It provides full API call logging, threat detection, data
  leak prevention, and compliance auditing for API traffic without sampling or aggregation. Acquired by Graylog and integrated
  into the Graylog SIEM platform.
type: Index
accessModel:
  pricing: freemium
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Freemium
  confidence: medium
  source:
  - plans
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/resurface.png
tags:
- API Analytics
- API Compliance
- API Logging
- API Observability
- API Security
- Data Leak Prevention
- Runtime Security
- SIEM
- Threat Detection
url: https://raw.githubusercontent.com/api-evangelist/resurface/refs/heads/main/apis.yml
created: '2026-03-26'
modified: '2026-05-02'
specificationVersion: '0.19'
apis:
- aid: resurface:resurface-platform
  name: Resurface Platform
  description: Resurface captures complete API request and response data in real time, providing full-payload API call logging
    with no sampling. Security teams use it to detect threats, identify data leaks, and ensure compliance across all API traffic
    using a custom columnar database and SQL query interface.
  humanURL: https://resurface.io
  tags:
  - API Compliance
  - API Logging
  - API Observability
  - API Security
  - Runtime Security
  - Threat Detection
  properties:
  - type: Documentation
    url: https://resurface.io/docs
  - type: GettingStarted
    url: https://resurface.io/docs/getting-started
  - type: HelmChart
    url: https://artifacthub.io/packages/helm/resurfaceio/resurface
  - type: GitHub
    url: https://github.com/resurfaceio
  - type: JSONSchema
    url: https://raw.githubusercontent.com/api-evangelist/resurface/refs/heads/main/json-schema/resurface-api-call-log-schema.json
- aid: resurface:resurface-logger-go
  name: Resurface Logger for Go
  description: Open-source Go library for logging API requests and responses to the Resurface database. Integrates with gorilla/mux
    and other Go HTTP frameworks.
  humanURL: https://github.com/resurfaceio/logger-go
  tags:
  - Go
  - Integration
  - Logger
  - SDK
  properties:
  - type: GitHub
    url: https://github.com/resurfaceio/logger-go
- aid: resurface:resurface-logger-ebpf
  name: Resurface Logger for eBPF
  description: eBPF-based kernel-level API call logger that captures HTTP traffic without application code changes for zero-instrumentation
    observability.
  humanURL: https://github.com/resurfaceio/logger-ebpf
  tags:
  - eBPF
  - Integration
  - Kubernetes
  - Logger
  properties:
  - type: GitHub
    url: https://github.com/resurfaceio/logger-ebpf
- aid: resurface:resurface-containers
  name: Resurface Containers
  description: Official Helm charts and container images for deploying the Resurface API security database on Kubernetes.
  humanURL: https://resurfaceio.github.io/containers/
  tags:
  - Containers
  - Docker
  - Helm
  - Kubernetes
  properties:
  - type: Documentation
    url: https://resurfaceio.github.io/containers/
  - type: HelmChart
    url: https://artifacthub.io/packages/helm/resurfaceio/resurface
  - type: GitHub
    url: https://github.com/resurfaceio/containers
- aid: resurface:resurface-trino-connector
  name: Resurface Trino Connector
  description: Connector for querying Resurface API call data via Trino distributed SQL query engine.
  humanURL: https://github.com/resurfaceio/trino-connector
  tags:
  - Analytics
  - Integration
  - SQL
  - Trino
  properties:
  - type: GitHub
    url: https://github.com/resurfaceio/trino-connector
common:
- type: DomainSecurity
  url: security/resurface-domain-security.yml
- type: Website
  url: https://resurface.io
- type: Documentation
  url: https://resurface.io/docs
- type: Blog
  url: https://resurface.io/blog
- type: GitHub
  url: https://github.com/resurfaceio
- type: Pricing
  url: https://resurface.io/pricing
- type: Support
  url: https://resurface.io/support
- type: Login
  url: https://resurface.io/login
- type: Twitter
  url: https://twitter.com/resabordeio
- type: LinkedIn
  url: https://www.linkedin.com/company/resurfacelabs
- type: HelmChart
  url: https://artifacthub.io/packages/helm/resurfaceio/resurface
- type: AcquiredBy
  url: https://graylog.org
- type: Vocabulary
  url: https://raw.githubusercontent.com/api-evangelist/resurface/refs/heads/main/vocabulary/resurface-vocabulary.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com