Product walkthrough

Recall on one tenant

Semantic (VSEARCH): send a query vector, get cosine neighbors. Trailing MIN_SCORE, EF, SPACE, WITHDOCS, FILTER_CONTAINS.

Similar-to-id (VSIM): load that stored row, exclude self, same ANN. “More like this memory” without re-embedding.

Named spaces (VFUSE): late-fuse cosine hits across SPACE graphs with caller WEIGHTS. Missing ids score 0. Send the floats your model produced; DBX does not run CLIP or MiniLM. The playground may MiniLM-encode text in the browser for a 384-d demo only.

A named space hashes to its own .vec file in the same tenant directory. Backup, quota, and shred still hit one customer.

Marketing site

Start at the homepage. The certified profile is 100 tenants/node, 100k vectors/tenant, durable strings + vectors. Isolation is a directory, a WAL, and an HNSW index — not a key prefix.

The isolation bench (acme / harbor / lumen) is an in-browser sketch. Type AUTH harbor, SET session:1 intake, then AUTH acme and GET: acme cannot see harbor’s session. The sketch also accepts VADD, VSEARCH, VSIM, and VFUSE as read/write theatre — it is not a live node. Click a cabinet to inspect that tenant. Pause / Replay controls the scripted loop.

Then walk Product → Features (including the recall surface), Architecture, Get started, Performance; Docs; Pricing; Security; Contact. ⌘K / Ctrl+K is the command palette.

Features that have to stay true

Tenant is a first-class object: provision, backup, restore, export/import, hibernate/wake, delete. State and vectors live in one engine. Cost is meant to track active tenants (SQ8 mmap). Self-host is a single binary. Isolation Kernel on Linux strict is own process + Landlock + encrypted WAL/meta/graph.

Honest limits: default make run-dev is inprocess (shared Go runtime, not the security USP). SQ8 .vec rows stay mmap plaintext. Raft, cluster, tiering, and non-string RESP mutations fail closed. Hibernate/wake are control-plane HTTP APIs; the dashboard today exposes backup from tenant Overview. Certified ANN p50 on the published profile is 2.304 ms — not sub-millisecond.

How to run it

Dashboard/control plane on :8000. Public RESP on :6380. First data-plane command is AUTH tenant:key_id secret. On Linux/macOS, orchestrator-managed engines bind Unix sockets; the public port is still :6380.

Local demo used in the video:

make site          # http://127.0.0.1:8765
make run-dev       # http://127.0.0.1:8000  (admin / adminadminadmin)

Self-host is free under BSL 1.1, including inside your own SaaS. Paid only if you sell managed DBX. Contact until MX exists: GitHub issues — dbxdb.io is NXDOMAIN, so hello@dbxdb.io cannot receive mail yet.

Operator dashboard

The dashboard is compiled into dbx-orchestrator. It is not hosted on GitHub Pages. Sign in, provision a tenant (name + id, replicas = none for the certified path), open it, then Tenant keys → Mint key as writer. The secret is shown once. Application clients AUTH that pair on :6380. The in-dashboard Console uses the operator JWT against /t/{id}/query — it is not a substitute for AUTH on the public port.

Operations

Console: PING, SET session:42 onboarding, GET session:42, VADD memories doc:1 0.1 0.2 0.9, VSEARCH memories 0.1 0.2 0.8 5, VSIM memories doc:1 5, VFUSE memories SPACE text 0.1 0.2 SPACE image 0.3 0.4 5 WEIGHTS 0.6,0.4.

Data Explorer: list keys, inspect a string, add another key.

Vector Playground: Semantic / Similar-to-id / Multimodal tabs. Browser MiniLM is 384-d only and is a demo encoder — prefer Console VADD with your own floats in production. Failures surface; the UI does not substitute random vectors.

Overview: live ops/memory, point-in-time backup.

Runtime: Hardware, Storage, Network, Hosting. Control plane: Settings, Security, Replication (async WAL replicas; not Raft).