Company
Surmado, Inc. is a Delaware C Corporation founded in 2025, headquartered in Phoenix with offices in San Diego and Los Angeles.
Founded by Luke F. Walton, Founder and CEO.
Luke F. Walton is the founder and CEO of Surmado, a company building managed AI web presence for small businesses. His work spans software, music, and AI ethics, with a recurring focus on how language becomes infrastructure: systems that shape what people see, decide, trust, and do.
That background matters to Surmado: the company treats small-business web presence not as a dashboard or template, but as ongoing authored work, something with taste, standards, maintenance, and a person accountable for the result.
As a writer and independent researcher, Luke F. Walton works on authorship, answerability, and AI-mediated decisions. Surmado brings those threads together by helping real businesses get found, understood, and served online without making the owner become a full-time web operator.
What We Do
Surmado builds AI for small business. Our AI runs the research: how AI talks about your brand, what's wrong with your site, and what to do about it. AI Visibility, Site Audit, Strategy, Code Review, and managed websites. Reports in ~15 minutes. Surmado explains what matters in plain English.
Our Methodology
AI outputs are hypotheses, not guarantees. We show our methodology, export raw data, and encourage independent verification for high-stakes decisions. Surmado explains the reasoning. You decide what to act on.
How We Build
We believe in lean, auditable systems over black boxes. Surmado is built on a modern, open-source foundation including FastAPI, Google Cloud Run, and PyTorch.
By the Numbers
Data & Security
We do not sell your data and minimize what we collect.
We do not store passwords. Surmado uses Clerk for all identity management, authentication, and session control.
- Password handling: Surmado does not store plaintext passwords. Authentication and session management are handled by Clerk.
- Compliance: Our identity provider, Clerk, maintains SOC 2 Type II and ISO 27001 controls.
- Protection: Active specialized defense against credential stuffing, session fixation, and brute-force attacks.
To request data deletion, email legal@surmado.com.
View our Terms and Privacy Policy.
Contact
General: hi@surmado.com
Legal: legal@surmado.com