Cloudflare Outage Map
The map below depicts the most recent cities worldwide where Cloudflare users have reported problems and outages. If you are having an issue with Cloudflare, make sure to submit a report below
The heatmap above shows where the most recent user-submitted and social media reports are geographically clustered. The density of these reports is depicted by the color scale as shown below.
Cloudflare users affected:
Cloudflare is a company that provides DDoS mitigation, content delivery network (CDN) services, security and distributed DNS services. Cloudflare's services sit between the visitor and the Cloudflare user's hosting provider, acting as a reverse proxy for websites.
Most Affected Locations
Outage reports and issues in the past 15 days originated from:
| Location | Reports |
|---|---|
| Istanbul, Istanbul | 1 |
| Greater Noida, UP | 2 |
| Paris, Île-de-France | 1 |
| Crisfield, MD | 1 |
| Noida, UP | 2 |
| Augsburg, Bavaria | 1 |
| Bengaluru, KA | 1 |
| Montataire, Hauts-de-France | 1 |
| London, England | 1 |
| Attleborough, England | 1 |
| Colima, COL | 1 |
| Leuven, Flanders | 1 |
| New Delhi, NCT | 2 |
| Mâcon, Bourgogne-Franche-Comté | 1 |
| Amsterdam, nh | 1 |
| Ashburn, VA | 1 |
| Rosario, SF | 1 |
| Merlo, BA | 1 |
| Frankfurt am Main, Hesse | 1 |
| Birmingham, AL | 1 |
| Dayton, OH | 1 |
| Miami, FL | 1 |
| Osnabrück, Lower Saxony | 1 |
| Bulandshahr, UP | 1 |
| A Coruña, Galicia | 1 |
| Easton, PA | 1 |
| Guayaquil, Guayas | 1 |
| El Port de Sagunt, Valencia | 1 |
| Medellín, Antioquia | 2 |
| Padova, Veneto | 1 |
Community Discussion
Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.
Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.
Cloudflare Issues Reports
Latest outage, problems and issue reports in social media:
-
Ash Nallawalla (@ashnallawalla) reported@gaganghotra_ Great reminder. Most geo-blocking plugins and CDN rules need a specific exemption for known crawler IP ranges. Cloudflare and Wordfence both support this, but it's rarely enabled by default — so it's worth checking even on sites that seem to be working fine.
-
Shimazu.S (@ShimazuSystems) reportedThe reality is that people will continue using it, because (just like cloudflare) it brings down costs. The more individual/unique apps & sites pop up, the less likely it is that anyone will pay for them, so why would you not cut costs where possible? I don't use either, but I do see why people do & will continue to + I cannot see any kind of human verification *not* being invasive - now the pandoras box is open, it is inevitable people request walled gardens free from AI. At this point what do you do?
-
Transform Labs (@TransformLabsHQ) reportedCloudflare just eliminated 1,100 support roles while posting record revenue. This is the moment AI stops being your copilot and starts replacing the headcount. 🧵
-
**** Zuo (@wang_zuo) reportedWhy does the cloudflare challenge fail in an electron webview even after manual verification, how to fix it? @CloudflareDev
-
Saurav (@snipextt) reported@ayushagarwal @dodopayments @Cloudflare Love this Ayush. Genuinely curious though, got anything in the pipeline for the "no one knows my product exists" problem? Asking for a friend 🫠
-
Dystopic Winter (@dystopicwinter) reportedCloudflare just laid off 1,100+ employees. Their reason? Internal AI usage jumped 600% in 3 months. They said it themselves — they don't just sell AI, they ARE their own most demanding customer. Here's what nobody wants to admit: this is the playbook. Every tech company watching Cloudflare is taking notes. Not because they want to, but because the math forces them to. When your own AI agents can do what 1,100 humans did, you don't keep the humans and feel good about it. You cut. And the ones who don't cut fast enough get eaten by the ones who do. This isn't a Cloudflare problem. It's a preview. The question isn't if your employer replaces you with AI. It's whether you're the one building the AI or the one being replaced by it. Build leverage or become leverage.
-
James Q Quick (@jamesqquick) reported@EmmettNaughton @Cloudflare Yep, that's totally fair and I feel that myself even being an employee lol That's something I'd like to help simplify for people. Partially the intent of the original tweet lol
-
buildwithjay (@shipwithjay) reportedSpent 3 weeks debugging "slow API" on my biggest app. It was Vercel cold starts on the hobby plan. Moved one function to Cloudflare Workers. Latency dropped from 1.4s to 90ms. Same code.
-
Pyromonkey ⛏️🔥 (@Pyromonkey360) reported@SentientTtv the issue rn is that if cloudflare falls everyone will switch to the qr code google thing, so it might be wise to get rid of that first
-
Baby Ruckus (@bally44025) reported@pokiegoat @olascobimson @chi87675 Nahh It's cus cloudflare is down at the moment And that's what powers the website and many other websites
-
Iarimas (@Iarimas7) reported@IdleIrkutsk @gelbooru @Cloudflare Platforms are free to enforce their personal rules however they wish to. 2 problems with this instance: 1. Cloudflare is claiming it's against, "Foreign laws" which Gelbooru from what I understand is stationed in US where the law is not against this material.
-
Solo (@projectsolo) reportedAt Consensus 2026, the hottest panel was titled "How to Prove You're Human in an AI World." Cloudflare and former U.S. officials on stage. 20,000 attendees. Proof of humanity is no longer a niche problem. It's the question the whole industry is now answering.
-
Eli Edelkind (@eliedelkind) reportedFourth, cyber is a trust wedge into the enterprise. If a lab helps Cisco, Cloudflare, Microsoft, JPMorgan, Linux Foundation maintainers, or major software vendors reduce high-severity bugs, that buys credibility with the people who block or approve AI adoption. It is not just “sell a scanner”; it is “prove our agents can be allowed near your crown-jewel code and infrastructure.” Anthropic’s launch-partner list includes major cloud, software, finance, security, and infrastructure organizations; OpenAI lists major security organizations as Daybreak partners. Fifth, this helps with the coding-agent TAM, which is much larger than AppSec alone. Vulnerability discovery, patching, testing, repo comprehension, and dependency reasoning are all subskills of valuable software-engineering agents. The output may be marketed as “cyber,” but the learning loop improves the same capabilities needed for code migration, refactoring, testing, code review, and autonomous software maintenance. So, is there a better use of funds/time? For pure revenue maximization, probably yes: broad enterprise workflow automation, coding agents, customer support, analytics, office automation, and vertical business-process automation are larger markets. I do not think either lab is betting the company on AppSec. But as a strategic wedge, cyber is rational because it offers a rare combination: high buyer urgency, measurable outcomes, government relevance, safety justification, strong demos, and a proving ground for autonomous agents. The risk is that the marketing outruns the operational reality. CISOs should evaluate these tools as high-context AppSec/research accelerators, not as replacements for SAST, DAST, SCA, fuzzing, secure design review, human product-security judgment, or vulnerability-management governance. OpenAI itself still says SAST remains important and positions Codex Security around turning “this looks suspicious” into “this is real, here is how it fails, and here is a fix.” My bottom line: you are right to be skeptical of the hype; wrong to dismiss it as merely SAST. The commercial cybersecurity market is not the endgame. The endgame is proving, governing, and selling frontier agents that can safely operate inside the software-development and infrastructure stack.
-
Ryan Daigle (@rwdaigle) reported@ritakozlov @Cloudflare Great stuff. Would love aome way to bind/tunnel a browser instance to a local URL or service binding so it can operate on non public URLs while still being secured via the normal CF service to service security model. Any options for that use case?
-
D3FAULT (@d3fault_sh) reportedCloudflare onboarding, protection layers and infrastructure verification have now been completed successfully. Full platform scans were performed and no security issue was detected anywhere on the D3FAULT infrastructure. Global propagation and reputation refreshes may still take some time, but the warning should disappear automatically once systems fully update.