# Security

Learn how to secure your SurrealDB deployment with authentication, authorization, and security best practices.

SurrealDB provides a layered security model that covers how users and systems prove their identity, what they are allowed to do once authenticated, and the operational practices that keep a deployment safe.

This section is organised into three areas:

- [Authentication](/docs/learn/security/authentication/overview.md) - signing in with credentials, record-based access, and third-party identity providers.
- [Authorization](/docs/learn/security/authorization/permissions-and-row-level-security.md) - controlling access at the table, field, and row level with the `PERMISSIONS` clause and JWTs.
- [Best practices](/docs/learn/security/best-practices/security-best-practices.md) - guidance on secure configuration, token handling, network exposure, and common pitfalls.