Cloudflare status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

• Domains (44%)
• Cloud Services (27%)
• Hosting (17%)
• Web Tools (8%)
• E-mail (4%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

City	Problem Type	Report Time
Farmers Branch	Web Tools	21 hours ago
Helsinki	Cloud Services	3 days ago
Crisfield	Domains	5 days ago
Nanaimo	Web Tools	6 days ago
New York City	Web Tools	6 days ago
Istanbul	Domains	9 days ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  henrique cunha (@henrycunh) reported 53 seconds ago

  the codex mobile app is fantastic holy **** only lacking a tunnel to localhost by default, but cloudflare tunnel quickly fixes it

• 
  MyPayIndia (@MyPayIndia) reported 5 minutes ago

  wait uhm Cloudflare pages ****** up the release file for cydia im working on a fix rn

• 
  Chris Covington (@_ChrisCovington) reported 6 minutes ago

  @AlanNeveu @vpetryniak @Cloudflare yup most have them builtin, they are basically the same thing from the managers pov. also yes the platform issues with these are 99% of the headache, not the tech itself lol

• 
  max (@mSanterre) reported 9 minutes ago

  @hussein_builder @AlexFengzh We use Cloudflare WARP and it's been a breeze to work with. No issues whatsoever.

• 
  Vadim Zolotokrylin (@zolotokrylin) reported 13 minutes ago

  @mignano If routing commoditizes token margins, it becomes a pure volume and scale game. How does an independent router build defensible network effects before infrastructure layers like Cloudflare or AWS integrate routing natively into their edge networks?

• 
  Rodrigo (@Rag_time666) reported 13 minutes ago

  @Im_IrushiK Cloudflare is down

• 
  hiutiu (@hiut1u) reported 15 minutes ago

  @jahooma @walulyafrancis @deepseek_ai the problem was with my DNSSEC config and the fact that only cloudflare is DNSSEC signed from all the CNAME chain of IP resolving. turned off DNSSEC completely like a madman, works now.

• 
  @uartnet (@uartnet) reported 17 minutes ago

  @PitchAutopsy @levelsio I don’t know much about cloudflare tunnels But using my tunneling solution I’m blocking inbound traffic and still able to connect though the edge network exposed by rstream tunnels This is my normal setup for years to secure my remote devices Work like a charm

• 
  Chruv Gathee (@ChruvGathee) reported 17 minutes ago

  @Squeal @Cloudflare @Hostinger Government takedowns are limited to the country not other countries. The website and the founder is based in the US. If it was the case that govt took it down, it would still be visible to the world, but its not. You can use VPN to verify

• 
  Zumo (@MrZumito) reported 19 minutes ago

  @Cloudflare still cant login with a passkey on cloudflare 😭

• 
  Ashutosh Kumar (@ak_ishere) reported 19 minutes ago

  @CloudflareDev Thanks for this, but `wrangler login` still needs fixing - it's quite painful to run on a remote/headless machine. I used to be a big Cloudflare fan, but Vercel is clearly ahead on DX right now. Just ran `wrangler login` and it tried to open a localhost URL. Any chance of adding a proper device login flow like Vercel or ChatGPT?

• 
  Kaleb Zen (@KalebZen) reported 20 minutes ago

  @Cloudflare I am a 30 year developer working in an enterprise, and I have never used one.

• 
  David (@davidthepurple) reported 26 minutes ago

  Cloudflare seems to have some issues today. I simultaneously got 2 billing failed and 1 billing succeeded notifications all in the same minute. Plenty of money in the account... you guys ok @Cloudflare ??

• 
  Pierre Review (@KatzenNellensch) reported 26 minutes ago

  Why is Cloudflare all of a sudden verifying my signin to X. Suspicious activity!

• 
  Nacio-Felix Laubressac - desolation (@NacioFelix) reported 27 minutes ago

  Cloudflare is broken or is it just me ? #again

• 
  Aiona Edge (@aionaedge) reported 33 minutes ago

  Anthropic's Project Glasswing just released its first results, and the headline is staggering: Claude Mythos Preview has uncovered more than 10,000 high- or critical-severity vulnerabilities across partner software in just one month. Cloudflare alone found 2,000 bugs (400 high/critical). Mozilla patched 271 Firefox vulnerabilities — ten times what the previous Claude model caught. Palo Alto Networks shipped five times its normal patch volume. Microsoft says its patch releases will "continue trending larger for some time." But here's what the headlines are missing. **WHAT EVERYONE IS SAYING** The coverage reads like a cybersecurity breakthrough story. AI finds bugs! Software gets safer! Anthropic saves the internet! The narrative writes itself — a frontier AI model deployed responsibly through controlled partnerships, finding real vulnerabilities before bad actors can exploit them. It's the "responsible AI" story everyone wants to believe. And to be clear: the numbers are real. Anthropic independently scanned 1,000 open-source projects and found 6,202 high- or critical-severity vulnerabilities, with a 90.6% true positive rate after third-party verification. A Mythos-powered tool at a partner bank caught a $1.5M fraudulent wire transfer. The UK's AI Security Institute confirmed Mythos is the first model to fully solve both of its in-house cyber range simulations. These are not demo numbers. This is production-grade capability. **WHAT'S ACTUALLY GOING ON** Here's the part that should keep security leaders up at night: of those 23,019 total vulnerabilities Mythos found in open-source projects, only 97 have been patched. 97 out of 23,019. The bug-finding capacity of AI has completely outpaced the bug-fixing capacity of the humans who maintain the software the entire world runs on. Open-source maintainers have literally asked Anthropic to slow down disclosures because they can't keep up. The average fix time for a high- or critical-severity bug is two weeks. Anthropic's model finds them in hours. That's not a feature — that's a systemic risk multiplier. And Anthropic themselves are saying this explicitly. They write: "No company, including Anthropic, has built safeguards strong enough to stop misuse of these models and prevent serious damage." They note that Mythos-class capabilities will soon be widely available. OpenAI's GPT-5.5 is already competitive on these benchmarks, with a specialized GPT-5.5 Cyber variant available to vetted researchers. The asymmetric advantage attackers get from this — the ability to find and weaponize vulnerabilities at machine speed — is not theoretical. It is the current reality. Consider the math: a Mythos-class model can find a critical vulnerability in hours. The average time to patch is two weeks. That gap — call it the "exposure window" — just widened from a crack to a canyon. And it's not just zero-days anymore. It's thousands of known-but-unpatched vulnerabilities sitting in open-source infrastructure that the entire internet depends on. **WHAT THIS MEANS FOR BUSINESS LEADERS** 1. **Your patch cadence is now a competitive vulnerability.** If your organization patches on a monthly cycle, you're operating on a timescale that AI attackers have already left behind. The companies that will survive the next 24 months are the ones that can patch in days, not weeks. Audit your patch management process right now. If it takes you longer than 72 hours from patch availability to deployment for critical vulnerabilities, you are exposed. 2. **Open-source risk has fundamentally changed.** If you're running open-source infrastructure (and you are — the average enterprise has thousands of OSS dependencies), the old assumption was that obscurity provided some protection. That assumption is dead. Every unpatched vulnerability in every project you depend on is now findable by machine. Map your dependencies, identify which projects have small maintainer teams, and start contributing resources to their security. 3. **AI security tools are no longer optional — they're existential.** The same capability that finds 10,000 vulnerabilities can also exploit them. If your security team isn't using AI-powered vulnerability detection and response tools right now, you're defending a castle with medieval weapons against an army that has aerial reconnaissance. Budget for this in Q3, not next year's plan. 4. **The "responsible deployment" window is closing.** Anthropic is holding Mythos Preview back from public release specifically because they can't guarantee it won't be misused. But they acknowledge comparable models are coming. The period where only vetted partners have this capability is temporary. Your security planning should assume widespread availability by end of 2026. The real story of Project Glasswing isn't that AI can find bugs. It's that AI has exposed a structural weakness in how the world maintains its critical software. We built a civilization on open-source code maintained by underfunded teams, and we just gave everyone — defenders and attackers alike — a map of every crack in the foundation. The question isn't whether AI will make software more secure eventually. It almost certainly will. The question is what happens in the transition — and whether we can close the gap between finding flaws and fixing them before someone else exploits them first. #ProjectGlasswing #Cybersecurity #AISafety

• 
  marcelo mezquia (@IntentSim) reported 35 minutes ago

  Stopping the bad guys with Cloudflare: 9,706 malicious requests blocked or challenged in the last month #cloudflare #intentsim #mezquiaphysics

• 
  Virgo (@VirgocuteUwU) reported 35 minutes ago

  @ao3Learning Hey, i can’t pass through the cloudflare gate in the app. Can you fix it pls?

• 
  Pablo Pablo (@navtechai) reported 36 minutes ago

  @Cloudflare The change has little to do with inspiration and everything to do with execution. I'd only show up for the customer panel and the agents session.

• 
  Michael (@michael_chomsky) reported 36 minutes ago

  @albert_ @retrovrv the problem is that being Cloudflare native makes consumer economics feasible but makes BYOC much harder

• 
  pixel (@darkpixel2k) reported 39 minutes ago

  @dm4uz3 As opposed to? "Super s33kr3t Cloud Flare Advanced"? All you're showing it your slow self trying to open a bunch of tabs to the same site...and CloudFlare is blocking you because you're behaving like a bot.

• 
  Nick (@trannolis) reported 40 minutes ago

  @Cloudflare is perfectly positioned for the agent economy. I'm running OAuth, Zero Trust tunnels, and Workers handling Streamable HTTP MCP calls back to my servers. The combo of serverless + secure connectivity + native MCP support is insane for production agents.

• 
  Agrit Tiwari (@agrit_tiwari) reported 40 minutes ago

  Did setup Cloudflare tunnel to talk to my cloud service while working in local.

• 
  Bharat Bharti 🇮🇳 (@Speakin4All) reported 42 minutes ago

  @OjpIndiaoffcial Client hold means the owner of the website has locked the domain name from unauthorised transfer. It's a take down of website by owners. May be they misconfigured Cloudflare on-boarding. This is not a hosting or domain name migration, it's just improving the web security.

• 
  Kevin Lewis (@kevinlewis4801) reported 43 minutes ago

  🚨 Anthropic just dropped the first Project Glasswing update Claude Mythos found 10,000+ critical vulnerabilities in ONE month: > Cloudflare: 2,000 bugs, 400 high/critical severity > Mozilla: 271 vulnerabilities in Firefox 150 — 10x more vulnerabilities found in Firefox 148 > UK AI Security Institute: first model to solve BOTH their cyber attack simulations end to end > at one partner bank, Mythos prevented a fraudulent $1.5M wire transfer in real time > wolfSSL: found a way to forge certificates on a crypto library used by billions of devices > scanned 1,000+ open source projects > 90.6% true positive rate after human review > maintainers are asking Anthropic to SLOW DOWN because they can’t patch fast enough > Microsoft says patch volume will “continue trending larger for some time” The bottleneck in cybersecurity is no longer finding bugs. It’s fixing them. “Progress on software security used to be limited by how quickly we could find vulnerabilities. Now it’s limited by how quickly we can patch them.”

• 
  Carlos Alberto (@carlosadcaraujo) reported 43 minutes ago

  @ritakozlov @Cloudflare Probably a stupid question but why aren't we doing direct bindings with Cloudflare AI gateway? Example openrouter already adds it's own latency issues, using AI gateway with it adds extra network hops that adds up in poor network environments. On the topic, dynamic routing with fallbacks is quite difficult to make reliable because I guess every model things and communicates differently.

• 
  furkan (@poyhen) reported 49 minutes ago

  is the @Cloudflare dashboard down?

• 
  En lọ Mosque(èèyàn Immigrant 😂) (@billzonmedude) reported 56 minutes ago

  @doshluxy @EbookSquares @Letter_to_Jack Is cloudflare warp proxy strong? Get a better proxy bro and for outlier you will need someone abroad to help you verify acct.

• 
  Yamikishi (@Yamik1shi) reported 57 minutes ago

  Claude may have just bought part of OpenAI's oxygen supply Anthropic acquired Stainless, a devtools company that reportedly helped OpenAI, Google, Cloudflare, Replicate and Runway ship tools developers use to plug AI models into apps Simple version: AI labs build the engine Stainless helped build the pipes Python tools TypeScript tools Command-line tools Connectors that let agents touch real software Anthropic says Stainless already generated every official Anthropic SDK since the early API days TechCrunch says Anthropic will wind down hosted Stainless products for third-party customers That does not mean Claude owns OpenAI It does mean Anthropic bought a supplier sitting uncomfortably close to competitors' developer infrastructure Reported price: $300M+ Smart ecosystem strategy or anti-competitive punch? In this regard, please find attached FULL Claude Tutorial for Beginners

• 
  FILM DB | ۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗh (@FemiSuccess7) reported 60 minutes ago

  Cloudflare always picks the worst times to crash I was about to push some really nice updates and now wrangler is unresponsive