Cloudflare Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Sam (@Swgtct) reported 9 minutes ago

  @ODEONHelp some bizzare reason I have been cloudflare blocked on app and website any ideas or can I just never go to odeon again ?

• 
  Aaron Delasy (@aarondelasy) reported 10 minutes ago

  @jackfriks jack, here's my suggestion: if you want to be able to prompt from your phone, then I suggest using voice input apps like wispr flow, becuase typing on phone is super slow I wouldn't go as deep as actually coding from your phone because the screen is smalkk using Claude dispatch is a **** show because it's too limited, so the only real way ... a legal way is ... claude for web it basically runs your project in cloud vm spun up by Anthropic. the only pre-req is to create a setup script OR use session-start hook server specs are 4 vCPUs, 16 GB of RAM, 30 GB of disk space the flow then becomes like this: you start the session, claude sets up your VM, then you prompt, Claude does everything for you and it pushes its branch to GitHub you review the diff on GitHub, leave inline comments and send a message to address your feedback this way you can paste images in a nice chat, still be able to review the code Claude produces and steer it you can use something like ngrok or cloudflare tunnels to create preview links to test the new changes

• 
  Tyler (@TylerChud) reported 10 minutes ago

  @Cloudflare **** you for making my X account stuck and unable to login after I get a bullshit restriction for a bad goy post

• 
  Ayush Chugh (@aayushchugh) reported 11 minutes ago

  A few days ago, our login API experienced a DDoS attack. This triggered a high volume of SMS notifications, resulting in unexpected operational costs. Although we had IP-based rate limiting in place, the attack was highly coordinated, utilizing rotating IP addresses and phone numbers to bypass our initial defenses. To mitigate the immediate financial impact, we temporarily disabled our notification micro-service. We have since implemented a frontend CAPTCHA to verify requests before they reach the server. Additionally, we are configuring advanced Cloudflare rules to better protect our infrastructure against future incidents.

• 
  Prajwal Tomar (@PrajwalTomar_) reported 15 minutes ago

  Vibe coders are getting sued. People are shipping apps with real users and skipping the boring stuff that kills them. A 20+ year dev shared the pre-launch checklist every AI builder needs. I added what I learned after shipping 60+ apps at the agency. Don't skip this: 1. Protect yourself, not just your app. The moment you collect user data you're in legal territory (GDPR, CCPA). Have a privacy policy. Know where user data lives. 2. Row Level Security. Without RLS, anyone can open DevTools and read your entire database. Supabase → Auth → Policies. Zero policies means your app is naked. 5 min to fix. 3. Test the failure path, not just the happy path. Wrong password 5x. Reset for an email that doesn't exist. Verification link clicked twice. Signup with an existing email. Catches 80% of auth bugs. 4. Security baseline in 2 min. Prompt your AI: "Review my app as a security specialist and make sure I have strong security headers and a solid baseline security posture." 5. OWASP. Prompt: "Review my app against OWASP standards and highlight vulnerabilities." This is where SQL injection, XSS and auth bugs actually get caught. 6. Client-side validation is UX, not security. Attackers disable JS and hit your API directly. Validate again on the server. Every time. 7. AI code leaks data in 3 spots: .env values in the frontend, API responses returning too much, secrets in logs. Prompt: "Check my app for credential or sensitive data leaks in frontend or API routes." 8. API keys in the frontend means game over. If it's in the browser, assume it's already taken. Move it server-side or proxy it. 9. Rate limits before someone burns your API bill. Cap every endpoint hitting a paid API. I've watched a Supabase bill jump from $20 to $200 in a day. 10. CAPTCHA on public forms (Cloudflare Turnstile is free) plus CORS locked to your domain. 10 min, kills bot floods. 11. Error messages that don't leak. "User not found", not "SELECT * FROM users failed". Log full errors server-side, show users generic messages. Build fast. Just don't ship naked. (full breakdown in my article below)

• 
  Dr. Gonzo (@N3DrGonzo) reported 18 minutes ago

  @AnisDrawn PSN goes down more often than CloudFlare. And CloudFlare has an outage QUOTA. But yes, please tell me how an all digital ecosystem for a console is a good thing.

• 
  Jason Karns (@jasonkarns) reported 22 minutes ago

  @Cloudflare @Cloudflare so i go to set a password. and I can't set a password without providing an old password. WHICH I DON"T HAVE. **** YOU CLOWNS

• 
  Grigori Karapetyan (@GregKara6) reported 23 minutes ago

  @59thProfile first of all, i think that also went over your head, my whole premise is that i have exhausted my ego and accepted llms into every part of my workflow. if i had an ego id be the other side of the argument. don't confuse me calling an llm a tool for some type of strength you have over me, that's cute and hilarious. also i don't know what's wrong with you, but my memory of our interaction is completely different, i remember mentoring you, putting you on the right track, validating your work, telling you good job, and also praising you in the cloudflare post and calling your sandbox implementations better than theirs, do you not remember that? do you not remember me teaching you about propper kernel isolation? do you not remember me putting you on the right track when you were trying to hand bake sandboxing by hand? do you not remember me telling you that if you take that approach you are making a weaker sandbox because you can never handle all the edge cases yourself? do you not remember me telling you to use microVMs instead? to me that was a positive interaction. very concerning my friend.

• 
  Muhammad Tahir (@Ta56980T) reported 25 minutes ago

  @Cloudflare we have to stop solving problems for sake of problems, but focus on how to Never let those problems even happen (find out of box solution that why it even happens? how to make such technologies which are resilient to such attacks by their architecture.

• 
  Name Groove (@Name__Groove) reported 27 minutes ago

  @SpaceshipStatus Site appears down to me - cloudflare errors

• 
  Colin Son (@txmedai) reported 33 minutes ago

  @ptremblay Yes Cloudflare is very good. And free tier is amazingly generous. Isnt quiet idiot proof (why do I have independent turnon AI gateway or R2 or all these individual features) but at least there’s not a million layers of IAM. GCP and AWS are fine

• 
  Kevin Gray (@graykevinb) reported 33 minutes ago

  There are a ton of open fall internships rn. You should go apply. Google jobs sucks. Check companies directly. Also checkout handshake. Cloudflare and Tesla are hiring fall interns. You should apply ASAP. I will as usual be skipping this round but if you want help with your resume lmk. I have a somewhat decent success with applicant tracking algorithm manipulation. If you need money some are even 40hrs a week and pay $50/hr

• 
  Panat (@ptaranat) reported 33 minutes ago

  @LevJampolsky @Teknium you're better off implementing a simple version of this. give each trust tier its own hermes profile with toolsets stripped in config (platform_toolsets, agent.disabled_toolsets). then you expose only the api_server, and let ur own app authenticate the user and broker ever call. hermes' shared API key reads every session on the instance so it never accepts a session ID from a client. you'll want to map the user to the session in a DB and translate server side. and also put a Cloudflare Tunnel + Access service token in front so the agent host doesn't open any inbound ports. something like this took me one afternoon.

• 
  lacking branding (@cutetopop) reported 35 minutes ago

  I built it for work so I don’t think I can just host it but hey maybe I’ll ask the IT guys. I think I could make it a Cloudflare worker real easy and throw on the never used art site.

• 
  Xoge (@ClassyXoge) reported 35 minutes ago

  The only self custody is complete ownership of code, node and wallet. To ensure your ip is not logged, to ensure no down server or cloudflare reroute can stop you. Be your own bank, has never been more real than madlab