marketaiguide
weaviate.io

Weaviate

A BSD-3 licensed vector database written in Go, with managed shared and dedicated cloud tiers alongside self-hosted deployment.

Free to self-host under BSD-3. Managed cloud has a free sandbox, then billing based on total stored vector dimensions plus object and backup storage, split into a pay-as-you-go tier and a prepaid contract tier. Open source Named by Claude in 1 list this week

How Claude rates Weaviate.

Each score below is the model's own, on the rubric it wrote for that list, from what it already knows about Weaviate. Nothing here is edited by us.

The best vector databases for RAG

#4 this week, scoring 7.6 out of 10. Best for Teams needing flexible deployment options with strong semantic search capabilities and hybrid search features.

Query performance 8
Fast HNSW-based queries with good performance, though not quite as optimized as specialized commercial options.
Ease of deployment 7
Cloud option is straightforward but self-hosting requires more setup; GraphQL API adds learning curve.
Metadata filtering 8
Strong filtering capabilities with where clauses that work well alongside vector search without major performance degradation.
Scalability & cost 7
Self-hosted option is cost-effective at scale, though requires infrastructure management; cloud pricing is competitive.
Ecosystem integration 8
Well-integrated with major RAG frameworks and has dedicated modules for popular embedding models.

Rank by week:

#4#6#4

Want a better score? How to improve your AEO.

Security headers

What Weaviate's website sends to your browser.

Scanned 2026-08-25. Grade headers F, scoring 25 out of 100.

− No Content-Security-Policy, so no defence in depth against cross-site scripting
+ Strict-Transport-Security is set
− No X-Content-Type-Options, so MIME sniffing is not disabled
− No X-Frame-Options and no CSP frame-ancestors, so clickjacking is possible
− No Referrer-Policy, so full URLs may leak to third parties
− No Permissions-Policy, so powerful browser features are not restricted
− No Cross-Origin-Opener-Policy
− No Cross-Origin-Resource-Policy
+ No server-version or X-Powered-By disclosure

This is one narrow, automated check of the HTTP response headers on the vendor's own website. It says nothing about how the product itself is built, how it stores your data, or whether it has ever been audited. A good grade here is a small signal that somebody was paying attention.

Visit Weaviate