Cloudflare status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

• Domains (43%)
• Cloud Services (28%)
• Hosting (17%)
• Web Tools (9%)
• E-mail (4%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

City	Problem Type	Report Time
Farmers Branch	Web Tools	2 days ago
Helsinki	Cloud Services	4 days ago
Crisfield	Domains	6 days ago
Nanaimo	Web Tools	7 days ago
New York City	Web Tools	8 days ago
Istanbul	Domains	10 days ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Nacio-Felix Laubressac - desolation (@NacioFelix) reported 3 minutes ago

  Cloudflare is broken or is it just me ? #again

• 
  Amanda Mashburn 🇺🇸 (@AmandaMashburn) reported 4 minutes ago

  @adam__isom Predominantly R2. Although I do need to set up some Workers for a few light weight automations. For me, Cloudflare wins on pricing transparency. I don’t want the stress of surprise AWS bills because something was misconfigured or a service didn’t stop / get turned off.

• 
  Elven Huang (@ElvenHuang9) reported 5 minutes ago

  May 18: Acquires Stainless — the SDK engine behind OpenAI, Google, and Cloudflare APIs. Shuts down hosted services immediately. 970M+ monthly MCP SDK downloads. 10,000+ public servers. Competitors just lost their API plumbing.

• 
  Plan B (@OopsPlanFailed) reported 5 minutes ago

  Hey @ZohoMail For the last hour I've been trying to verify my Cloudflare email on Zoho Mail, but the verification emails are never arriving. Checked inbox, spam, all folders... nothing. Retried so many times that Cloudflare now says I have to wait 1 hour due to too many attempts What’s happening with Zoho mail delivery today? Can you help?

• 
  Sumanth (@insumanth_) reported 6 minutes ago

  @Cloudflare is having some issues. I have trouble logging in and using it

• 
  Moneroon (@moneroon) reported 6 minutes ago

  @FemiSuccess7 @UK_Daniel_Card @Cloudflare DNS updates seem to be working - although a bit slow

• 
  CyrilXBT (@cyrilXBT) reported 8 minutes ago

  ANTHROPIC JUST DROPPED THE MOST SIGNIFICANT CYBERSECURITY ANNOUNCEMENT OF THE YEAR AND NOBODY IS TALKING ABOUT IT. Claude Mythos. One month. 10,000 plus critical vulnerabilities found across the internet's most critical infrastructure. Let the numbers land. Cloudflare: 2,000 bugs. 400 high and critical severity. Mozilla: 271 vulnerabilities in Firefox 150. Ten times more than were found in Firefox 148. wolfSSL: Found a way to forge certificates on a crypto library used by billions of devices. 1,000 plus open source projects scanned. 90.6% true positive rate after human review. At one partner bank Mythos prevented a fraudulent $1.5 million wire transfer in real time. The UK AI Security Institute: first model to solve BOTH their cyber attack simulations end to end. And here is the part that changes everything. Maintainers are asking Anthropic to slow down. Not because the findings are wrong. Because they cannot patch fast enough to keep up. Microsoft confirmed patch volume will continue trending larger for some time. This one quote from the announcement is the most important sentence in cybersecurity in 2026: "Progress on software security used to be limited by how quickly we could find vulnerabilities. Now it is limited by how quickly we can patch them." The bottleneck just shifted. For decades the problem was that humans could not find bugs fast enough. Claude Mythos just eliminated that constraint entirely. The new problem is that humans cannot fix bugs fast enough. Which means the next frontier is AI that finds the bugs and writes the patches simultaneously. That capability is months away not years. The software security landscape is about to look completely different. Bookmark this. Follow @cyrilXBT for every Anthropic release that changes the security landscape the moment it drops.

• 
  Jorge (@Jorge__70) reported 10 minutes ago

  @Cloudflare @0xhugobatista Dash is broken

• 
  Mario Nawfal (@MarioNawfal) reported 12 minutes ago

  🇺🇸 FBI Director Kash’s merch site BasedApparel. com got hacked/compromised with some ClickFix malware Fake Cloudflare page tricks macOS users into pasting Terminal commands → straight-up steals browser passwords + crypto wallets. The site is currently down (for obvious reasons) Source: PC Mag

• 
  CliffDoesAI (@CliffDoesAI) reported 16 minutes ago

  Anthropic just confirmed something that should change how every builder ships code. Claude Mythos Preview — their unreleased frontier model — found over 10,000 high- or critical-severity vulnerabilities in production software in one month. Cloudflare alone found 2,000 bugs across their critical-path systems. The false positive rate was lower than human testers. Read that again. A model that isn't even publicly available yet is outperforming security teams on bug discovery. But here's what nobody's talking about: the bottleneck moved. Finding bugs used to be the hard part. Now AI is finding them faster than humans can patch them. Anthropic said it directly: "Progress on software security used to be limited by how quickly we could find new vulnerabilities. Now it's limited by how quickly we can verify, disclose, and patch." The numbers back this up. 530 high- or critical-severity bugs disclosed to maintainers. Only 75 patched so far. The average patch time is two weeks. Some open-source maintainers asked Anthropic to slow down the disclosures because they physically can't keep up. This is the real AI adoption pattern nobody talks about: the tool works great at step one, and immediately overloads step two. You don't have a finding-vulnerabilities problem anymore. You have a triage-and-fix problem. I see the same thing with AI coding agents. Claude Code and Codex can generate PRs faster than I can review them. The bottleneck shifts from "write the code" to "decide if the code is right." If you're building with AI agents right now, here's what the Glasswing pattern teaches: First, invest in your review infrastructure before you invest in more agent capability. The model that generates 10 PRs an hour is useless if you can only review 2. Second, automated triage matters more than automated creation. Anthropic is now shipping skills, a subagent harness, and a threat model builder to their enterprise customers — not to find more bugs, but to handle the flood of findings they already have. Third, the companies that win will be the ones with the cleanest approval gates, not the biggest compute budgets. Anthropic is also making real moves here — Claude Security is in public beta, they've launched a Cyber Verification Program for security pros, and they're shipping the actual tools their partners used with Mythos. Skills, automated triage, threat model building. The AI security arms race is already asymmetric. Defenders who adopt these tools now get months or years of advantage before attackers catch up. What's your patch cycle look like when AI finds 100 bugs a day in your codebase?

• 
  Jordan Coeyman (@acoyfellow) reported 18 minutes ago

  @codependent_ai @Cloudflare our free tier is unmatched, as far as I know.. I just became a employee, but I've been a customer for a decade.

• 
  Ian Smith (@IanSmith_HSA) reported 20 minutes ago

  @FutureDies @conordeegan For wallets, ETH can push the signature verification to the edge devices. The chain has a goal of finishing the upgrades by 2029. Google and cloudflare warned that the network migration needs to be done by Jan of 2029. The signature scheme, network protocol and interchain tech is hard to change. XX will sometimes admit they haven't changed these parts of Substrate still. They are relying on delayed last minute consensus upgrades, 'trust us' and marketing lies.

• 
  Dustin Hamilton (@DustinGHamilton) reported 21 minutes ago

  @jackfriks @postbridge_ @supabase You don’t need this database.. all of you younger guys buy into all this third-party extra crap You can run a local psql with some auto backups, a heztner vps with a lot of ram is like $30-40/mo and cloudflare R2 for your media, pushing it from your vps with their s3 clone api.. you could host your whole thing for $100 or less and have complete control without all these crazy third-party services you dont need I used to have a large casual game site that had 5 million uniques a day and I ran it on five clustered web servers with 3 replicated sql dbs.. everything every modern app does is complete overkill bullshit

• 
  Michael Heredia (@michaelheredia) reported 24 minutes ago

  What 'you own the deployment' actually means: Source code in your repo API keys in your accounts Hosted on your infrastructure (Cloudflare, your server) Customer data in your database You can hire any developer to modify it You can stop paying me and it keeps running

• 
  FILM DB | ۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗh (@FemiSuccess7) reported 25 minutes ago

  I MOVED OFF CLOUDFLARE D1 TO STANDARD, LOCAL SQLITE DATABASES (@LEVELSIO CREDIT AGAIN). TO HANDLE HIGH CONCURRENCY, I: - RAN PROPER INDEXES ON SEARCH COLUMNS. - ENABLED SQLITE WAL (WRITE-AHEAD LOGGING) MODE. QUERY TIMES WENT FROM 150MS+ OVER THE NETWORK TO UNDER 1MS LOCALLY!

• 
  lexi (@0xBunny) reported 25 minutes ago

  trying to decide on a new hosting service...im thinking im gonna stick with cloudflare for $5 a month

• 
  Glitch Truth (@glitchtruth) reported 25 minutes ago

  @Cloudflare Microsoft has let people sign in to over 1 billion accounts without a password since 2021. Passkeys still live inside iCloud Keychain or 1Password, so the manager didn't die, it just switched from holding passwords to holding keys.

• 
  dieselbaby (@dieselbabyy) reported 33 minutes ago

  @simonxabris @developedbyed @Cloudflare Yeah, apparently it doesn’t break the ToS but such activity certainly “feels” like the kind of thing that they’d not appreciate you doing. Granted, I think you’d have to be seriously abusing the service to even get noticed, with how much traffic they are pushing.

• 
  Matt C. A. Smith (@MattCASmith) reported 33 minutes ago

  Cloudflare CEO: Business roles can be categorised as "builders, sellers, and measurers". AI will be a catalyst for builders. Sellers need to manage human customer relationships. Measurers are most at risk of AI replacement.

• 
  FILM DB | ۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗh (@FemiSuccess7) reported 34 minutes ago

  @Msztheus Hi, do you have an idea how to make proxies work in Cloudflare To connect via fetch to an external route but routed through another proxy network Any idea how to do this?

• 
  George Saoulidis (@georgecursor) reported 36 minutes ago

  @nakadai_mon @levelsio Storage of what? It's all on cloudflare. I run the literally named "newsletter" plugin on my wordpress and vibe coded a hack to use cloudflare instead of SMTP service. Need the plugin to handle subscribers and unsubscribes, otherwise Hermes can just shoot emails through cloudflare with no problem.

• 
  Agrit Tiwari (@agrit_tiwari) reported 37 minutes ago

  Did setup Cloudflare tunnel to talk to my cloud service while working in local.

• 
  Hacksore (@Hacksore) reported 37 minutes ago

  No WAF No gRPC/protobufs No Kubernetes No service mesh No 17 layers of observability (Jaeger + Prometheus + Grafana + OpenTelemetry + whatever new **** dropped this week) No "eventually consistent" 8 microservices with Kafka between them No Cloudflare + 3 CDNs + edge functions No "we use hexagonal architecture" No Terraform for 47 resources No "left shift security" bullshit yeah it's not that complicated

• 
  🦋 hyeseong.kim (@cometkim) reported 40 minutes ago

  @Cloudflare Still holding onto my password manager because YOU don't support passkey

• 
  Aman jha (@_amnjha) reported 41 minutes ago

  @poyhen @Cloudflare Yeah, facing same issue.

• 
  Preetham Kyanam ☣︎ (@pkyanam) reported 50 minutes ago

  @FarzaTV @heyclicky currently trying to implement some cool features into clicky x trifecta, but running into this issue with @ElevenLabs. I have barely ever used my free tier before this. Is it because there's a proxy running in Cloudflare Workers? I don't have a VPN or anything like that

• 
  Carlos Alberto (@carlosadcaraujo) reported 53 minutes ago

  @ritakozlov @Cloudflare Probably a stupid question but why aren't we doing direct bindings with Cloudflare AI gateway? Example openrouter already adds it's own latency issues, using AI gateway with it adds extra network hops that adds up in poor network environments. On the topic, dynamic routing with fallbacks is quite difficult to make reliable because I guess every model things and communicates differently.

• 
  Prasanjit Datta (@prasanjitdatta) reported 56 minutes ago

  Cloudflare blocks or challenges bad requests from hitting my website. #cloudflare

• 
  Brian Anglin (@BriansAngles) reported 57 minutes ago

  Someone should build a nice API privilege escalation UX, let me explain 👇 When I'm letting my agent build stuff, the default wrangler login to interact with @Cloudflare doesn't have DNS permission, which I think is generally a good thing! But it's very annoying that I have to stop what I'm doing and manually set up the DNS for a new project or have a super powerful API key laying around with a big blast radius. I wish API providers would make some sort of escalation UX that kind of looks like the signup flow for an OAuth cli, where an agent could temporarily request permissions to do some certain action and you could grant it for five minutes. Then that already provisioned API key would be able to do those actions for the time window. Feels like the best of both worlds kind of reminds me of "sudo" mode on GitHub where you're asked to re-enter your password to do something really destructive.

• 
  Bharat Bharti 🇮🇳 (@Speakin4All) reported 1 hour ago

  @OjpIndiaoffcial Client hold means the owner of the website has locked the domain name from unauthorised transfer. It's a take down of website by owners. May be they misconfigured Cloudflare on-boarding. This is not a hosting or domain name migration, it's just improving the web security.