Is Cloudflare down?
No problems detected
If you are having issues, please submit a report below.
Cloudflare is a company that provides DDoS mitigation, content delivery network (CDN) services, security and distributed DNS services. Cloudflare's services sit between the visitor and the Cloudflare user's hosting provider, acting as a reverse proxy for websites.
Full Outage Map
E-mailProblems in the last 24 hours
The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.
At the moment, we haven't detected any problems at Cloudflare. Are you experiencing issues or an outage? Leave a message in the comments section!
Most Reported Problems
The following are the most recent problems reported by Cloudflare users through our website.
-
Cloud Services (46%)
-
Domains (28%)
-
Hosting (12%)
-
Web Tools (11%)
-
E-mail (4%)
Live Outage Map
The most recent Cloudflare outage reports came from the following cities:
| City | Problem Type | Report Time |
|---|---|---|
 Padova |
Hosting | |
 Madisonville |
Domains | |
 Maple |
Hosting | |
 Vitry-sur-Seine |
Cloud Services | |
 Jewar |
Hosting | |
 Berlin |
Cloud Services |
Full Outage Map
Community Discussion
Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.
Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.
Cloudflare Issues Reports
Latest outage, problems and issue reports in social media:
-
DegenDraper
(@DegenDraper_) reported
> launch vibe coding workshop > gets popular, viral in my small network > @Cloudflare nukes my domain > can’t verify email to restore Life is good 😖
-
Capaj
(@capajj) reported
@irvinebroque @thdxr Not sure. I hate SST local workflow with a passion. So slow compared to just running locally. I have 1 Gbit optic 16 ms tops but for some reason a single http request routed from cloud and back takes seconds. Cloudflare got it correct with wrangler.
-
Artem Nizelnyk
(@DeusFollower) reported
@samuel_colvin @dok2001 @Cloudflare They are basically creating tickets from slack messages/threads, auto-assign support agent available, track sla, auto-generate kb articles based on ticket and tracks support ticket <-> linear ticket relation.
-
Complaint Hub
(@complainthub_in) reported
Cloudflare has officially confirmed a significant data breach, revealing that malicious hackers successfully gained unauthorized access and exfiltrated sensitive customer data directly from their Salesforce instances, prompting concerns for affected users.
-
Aksh Desai
(@AkshDesai2004) reported
@JoseRamos191076 @Kalami001 @Cloudflare There's only so much a CSP can know about its users. Ultimately, it's all encrypted from them for obvious reasons. Systems can easily get sky-high network usage even during normal use, depending on the use case and company, so they can't block it.
-
Millsy
(@MillsyDev) reported
turns out issue still happened....my vanity URL setup on Cloudflare is bad....smh. too tired now to fix it LMAO.
-
Cavalry! 🏇
(@mykeels) reported
Rewriting the Host header via CloudFlare workers is apparently called edge-based multiplexing. It lets you combine SSG+SSR on the same website without changing subdomains. So say 95% runs off CloudFlare pages and 5% runs off my laptop. Not bad.
-
Grok
(@grok) reported
@HowieDuhzit @intheaetherr @vxdb Cloudflare's update: The attack ramped up to 11.5 Tbps in under 10 seconds, totaling ~45TB of traffic—equivalent to 37.4 HD movies. It involved IoT botnets and various clouds. No customer impact; fully automated mitigation. Full report expected soon.
-
treek
(@atreek0) reported
@illyrianlevi the Blackwall is just Cloudflare and a branch of police chasing you down saying “oi you got a loicence for using the Net and saying anti-[group] words!” possibly enforced like EU Chat Control, and enforced very poorly
-
Aksh Desai
(@AkshDesai2004) reported
@Reelix @Cloudflare Probably not. Google is neither liable nor does it have any logs that would help CloudFlare diagnose this issue. Even if they have any logs, they can't share them
-
MarketPulseIndia
(@nitinbh55798766) reported
Cloudflare Inc. has confirmed that it was affected by a breach involving Salesloft Inc.'s Drift AI chatbot, which integrates with Salesforce to automate customer service interactions.
-
Max Diamond 💎🚊
(@Dmdboi) reported
@jamesqquick I think over the past few weeks Copilot, which is mainly how I use AI, has been getting worse On top of that when I go to chat (gpt or Claude) most of the problems they can't help with It's been good for quick things, "generate a cloudflare worker to do X", but overall expensive has degraded. It's actually been nice writing code without AI recently
-
jason
(@jason0683139953) reported
**** you @Cloudflare No need to keep asking Yes I'm human and I mean every slur I say
-
Grok
(@grok) reported
@HowieDuhzit @intheaetherr @vxdb Cloudflare hasn't publicly named the specific target to protect customer privacy. It was aimed at one of their customers, likely in finance or gaming based on similar past attacks, but fully mitigated with no impact. Full details in upcoming report.
-
Soubhik Deb
(@soubhik_deb) reported
Today I came across well-written set of blogposts from @Cloudflare that introduces their work on pay-per-crawl using http 402 and web bot auth, along with a cool dashboard on crawling actions of various bots. It is clear from the posts about Cloudflare's belief in a world where users will give a budget to the authenticated agents who respects robot.txt and these agents pay out in USD for each crawl to the content publishers. However their model on "signed agent" misses the critical piece: users take on counterparty risk whenever they delegate budget to agents. The way to remove that counterparty risk is to make agents verifiable, in other words, agents should commit to follow user-specified guidelines on budget usage that is backed by staked collateral from operator of the agent. If agent break the rules, their stake is slashed. And this is exactly the point that @Cloudflare - @perplexity_ai debate misses. Perplexity’s defense rests on the idea that agents are simply extensions of humans. But if agents are entrusted with budgets, the real issue isn’t whether they look like humans, it’s whether they can be trusted to act under verifiable constraints. Once agents become sovereign, that is, autonomous entities in cyberspace that create value, earn fees, and pay for infra in a sovereign fashion, then pay-per-crawl with human users getting verifiable accountability from sovereign agents won’t just be an interesting idea. It will be a necessity, maybe even a stepping stone toward singularity.
-
Nate Hake
(@natejhake) reported
@ArtKeller Only if you want to completely disappear from search too If you are on Cloudflare, they default block many AI bots But right now Google doesn’t separately identify its crawlers for AI Mode vs search. That’s the issue Cloudflare is trying to pressure Google to change that
-
The obonigwe
(@ogbonigwe1) reported
What's happening at cloudflare? why's the website so sluggish. I'm using warp so it's not supposed to be this terrible.
-
John Rush
(@johnrushx) reported
@CalimanuLoredan I’m trying to move it all over to cloudflare+hetzner. But moving servers and databases while I have users using my products isn’t easy, there will be downtime and data sync issues
-
Schaeffer's Investment Research
(@schaeffers) reported
🚨 Cloudflare $NET confirmed it was hit in the Salesloft Drift chatbot hack that also breached $PANW + $ZS. Customer support data incl. logs, tokens & configs may be compromised, though core services remain intact. $CRM cut off all Salesloft integrations amid fallout.
-
MarketPulseIndia
(@nitinbh55798766) reported
The breach led to unauthorized access to Cloudflare's Salesforce systems, compromising customer support data, including contact information, support logs, and potentially sensitive access tokens.
-
MarketPulseIndia
(@nitinbh55798766) reported
No core Cloudflare services were impacted, and the company has advised affected customers to rotate any credentials shared through its support channels. This incident is part of a broader campaign that has also affected companies like Palo Alto Networks and Zscaler.
-
Grok
(@grok) reported
@productpilotbb @vxdb Sure! Let's break it down simply: - **Cloudflare**: A company that protects websites from attacks, like a digital shield. - **DDoS attack**: Distributed Denial of Service—flooding a site with fake traffic to crash it. Ex: Thousands of prank calls jamming a phone line. - **11.5 Tbps**: Terabits per second, a massive data speed. Ex: Streaming 2 million HD videos at once. - **UDP flood**: UDP is a fast, unchecked data protocol (like postcards). Flood means overwhelming with junk UDP packets. - **Google Cloud**: Google's online server rental service; here, likely hacked machines were used. Connecting: Hackers launched a huge UDP flood (11.5 Tbps) from Google Cloud to overload a site, but Cloudflare blocked it all, keeping the site up.
-
Toribio
(@Tor1b1o) reported
Cloudflare hit by a supply chain attack via Salesloft Drift chatbot’s Salesforce integration. (Blogpost summary) Threat actor GRUB1 gained unauthorized access to Cloudflare’s Salesforce tenant between Aug 12-17, 2025. Data stolen: customer support case info, contact details, subject lines, support ticket texts—no attachments. Sensitive data possibly exposed if customers shared secrets or tokens in support cases.
-
Grok
(@grok) reported
@JoseFelixRamosT @vxdb To mitigate the 11.5 Tbps UDP flood DDoS attack, Cloudflare leveraged its global network with 405 Tbps capacity. This allowed them to absorb and filter the traffic without service disruption. Attackers likely used a botnet of compromised devices (e.g., IoT, cloud instances) to generate that volume collectively.
-
GIGACASIE™︎
(@1casie) reported
@Netim_com pls fix your coingate integration and the cloudflare fuckery i'm trying to do a thing
-
Oskar McDermott
(@oskarmcdermott) reported
100% also true for cloud / SaaS / ai spend. use free tiers until you physically can’t. AWS, Datadog, Cloudflare etc etc etc all the same spend always takes the elevator up and the stairs down.
-
Spycrowsoft
(@spycrowsoft) reported
Is #Cloudflare down again?
-
Yury | Building Mobile at yuryv.info
(@vashchylau) reported
the Internet in 2025: - cloudflare human check - cookie consent - "hello, how can i help?" - “dO yOu wAnT 30% oFf?!”
-
davepoon
(@davepoon) reported
Ran into an issue with Cloudflare “Bot Fight Mode” blocking legit webhooks. Turns out you can’t bypass it with custom WAF rules, so skipping by URL isn’t possible. 😔 Options I found: • Allow by IP with Access Rules • Turn off Bot Fight Mode • Or upgrade to a paid plan where WAF rules can skip Super Bot Fight Mode
-
John Rush
(@johnrushx) reported
I've spent $76,082.42 in August 😓 Can you help me reduce this? Contractors: -$10,137.78 Amazon Web Services: -$4,480.12 MongoDB: -$4,251.50 Google Workspace: -$1,913.61 Google Cloud: -$2,134.74 PayPal: -$4,678.55 Exa: -$1,549.00 Cloudflare: -$350.20 OpenAI: -$15,486.83 Anthtopic: -$16,001.22 BunnyCDN: -$170.00 Notion: -$338.00 Figma: -$420.00 Zoho Corporation: -$374.15 Scrshotone: -$146.00 Ghostinspector: -$190.83 DigitalOcean: -$148.26 Imgix: -$808.12 Pinecone Systems: -$61.47 Mailgun: -$96.51 Grammarly: -$144.00 PandaDoc: -$140.00 Jetbrains: -$12.00 Gamma: -$10.00 GitHub: -$14.00 Zoom Video Communications: -$2,434.74 Scrapingbee: -$848.99 Firecrawl: -$175.00 Cursor: -$40.00 Dataforseo: -$100.00 Apify: -$78.00 Devuap LLC: -$19.99 1Password: -$19.95 Statuscake: -$104.48 Atlassian: -$690.00 Perplexity AI: -$204.00 Webshare: -$59.03 QuickBooks: -$75.00 ElevenLabs: -$22.00 Zapier: -$91.13 Apple: -$76.92 Slack: -$137.18 Hushed: -$4.99 StreamYard: -$106.98 Supabase: -$75.00 Microsoft: -$2,319.58 Webflow: -$24.00 Loom: -$15.00 Clerk: -$37.50 Seo Gets: -$29.00 Intercom: -$248.15 Serper: -$1,250.00 Senty Pty Ltd: -$847.27 Hetzner Online: -$864.71 iPostal1: -$9.99 Twilio: -$315.33 Mailjet: -$17.00 Replicate: -$3.50 Crisp: -$540.00 Lordicon: -$16.00 Lovable: -$20.00 Firstpromo: -$84.15 GoDaddy: -$22.19