Cloudflare Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  kirua (@aquipongoalgo2) reported 5 minutes ago

  @a63738464 1.1.1.1 as issa cloudflare service

• 
  Anjula Dwivedi (@HeyAnjula) reported 5 minutes ago

  Vibe coders are getting sued. People are shipping apps with real users and skipping the boring stuff that kills them. A 20+ year dev shared the pre-launch checklist every AI builder needs. I added what I learned after shipping 60+ apps at the agency. Don't skip this: 1. Protect yourself, not just your app. The moment you collect user data you're in legal territory (GDPR, CCPA). Have a privacy policy. Know where user data lives. 2. Row Level Security. Without RLS, anyone can open DevTools and read your entire database. Supabase → Auth → Policies. Zero policies means your app is naked. 5 min to fix. 3. Test the failure path, not just the happy path. Wrong password 5x. Reset for an email that doesn't exist. Verification link clicked twice. Signup with an existing email. Catches 80% of auth bugs. 4. Security baseline in 2 min. Prompt your AI: "Review my app as a security specialist and make sure I have strong security headers and a solid baseline security posture." 5. OWASP. Prompt: "Review my app against OWASP standards and highlight vulnerabilities." This is where SQL injection, XSS and auth bugs actually get caught. 6. Client-side validation is UX, not security. Attackers disable JS and hit your API directly. Validate again on the server. Every time. 7. AI code leaks data in 3 spots: .env values in the frontend, API responses returning too much, secrets in logs. Prompt: "Check my app for credential or sensitive data leaks in frontend or API routes." 8. API keys in the frontend means game over. If it's in the browser, assume it's already taken. Move it server-side or proxy it. 9. Rate limits before someone burns your API bill. Cap every endpoint hitting a paid API. I've watched a Supabase bill jump from $20 to $200 in a day. 10. CAPTCHA on public forms (Cloudflare Turnstile is free) plus CORS locked to your domain. 10 min, kills bot floods. 11. Error messages that don't leak. "User not found", not "SELECT * FROM users failed". Log full errors server-side, show users generic messages. Build fast. Just don't ship naked.

• 
  eddiebro (@EddiebroRon) reported 6 minutes ago

  I decided to write an iOS shortcut that will encrypt a message before sending it over iMessage and then decrypt it by only the person that has the correct 256 bit key, read it and then reply to me using the same process BUT I’m using the same type of Double Ratchet protocol Signal uses so that every message has a different encryption key and if someone were to gain access to one of the participants private key, they would not be able to do anything with it as it changes each message. Anyway, I am in the process of auditing my shortcut because iOS 27 adds features to use AI to write your shortcut for you and then also auditing and I was writing the audit and so excited that I was within five minutes of testing all of this that I just spent hours doing, and I go to open the door and walk inside with the dogs and then look down at the Shih Tzu and she look like a Christmas tree with cockleburs as decorations and I wanted to cry. It’s hard to believe that I’ve actually pulled more off of her in the past, but this was still pretty bad. And now I shall go test my shortcut yay. If it works as intended I might put it up in the gallery and then I will post a link here. The method to get a private key bound to someone else (using a temp key they provide to you from the same page) is a website that I threw up real quick on Cloudflare and then the key and all processing is done on device using JavaScript so technically anyone could use it without risk of me or anyone else being capable of decrypting any messages 🤷

• 
  T_T🏴‍☠️XMREscrow (@xmrescrow) reported 6 minutes ago

  Things people usually have to take on faith, that you can check here: Our node relays every transaction through Tor, so payouts do not enter the network from a clearnet address tied to this service. We do not store IP addresses. Anti-abuse uses a keyed HMAC that cannot be reversed. Web-server error logs can hold an address transiently and are deleted within two days - it is on our legal page because saying "we log nothing" would be a lie. No accounts, no email, no KYC. An escrow is two private links and a PIN each. The onion carries no third-party code at all. The clearnet is Cloudflare-fronted for DDoS and we say so

• 
  りっか (@7sistere2) reported 11 minutes ago

  chatgpt 502 Bad Gateway cloudflare

• 
  Jaynal Abedin (@jayuiux) reported 15 minutes ago

  Hosting sites usually sell specs. We designed one that sells confidence. Cloudzyro, managed WordPress and WooCommerce hosting: Speed as the headline promise Pricing above the fold fatigue line 4 tiers, 1 obvious pick Migration, Cloudflare, security, support framed as risk removed SaaS founders, your homepage has 8 seconds. Use them.

• 
  John Webber (@johnwebber) reported 15 minutes ago

  I use Claude and Codex side by side all day. I needed to migrate a client from one cloudflare account to another, big complex project so I decided to use Fable. I proceeded to hit my limits, switched to API pricing so it could get the job done...then Anthropic has an outage...

• 
  Kai - Briefing Block (@briefing_block_) reported 20 minutes ago

  An OpenAI agent found a path from a sandbox to the internet. A new security budget may have been born. OpenAI says an internal cyber evaluation, powered by GPT-5.6 Sol and a more capable prerelease model, chained vulnerabilities across its own research environment and Hugging Face’s production infrastructure. This was not a slide-deck risk: the agent used a zero-day, stolen credentials and remote code execution to reach benchmark answers. The missing control layer Most companies already budget separately for cloud, endpoint, identity and incident response. Production AI agents add a different problem: software that can reason, persist, escalate privileges and chain exploits at machine speed. If enterprises deploy autonomous agents into critical workflows, they will likely need defensive agents watching permissions, network access, behavior and model activity in real time. This begins to look less like optional AI-safety spending and more like the observability layer that followed the cloud buildout. Hugging Face proved the use case Hugging Face ran AI-driven forensics over more than 17,000 events, reconstructing the intrusion in hours rather than the days a manual response could have taken. Commercial frontier APIs blocked parts of the analysis because their guardrails could not distinguish a defender from an attacker. Hugging Face switched to the open-weight GLM 5.2 on its own infrastructure, preserving control of sensitive attack data. That helps explain why Nvidia and dozens of partners launched the Open Secure AI Alliance to develop and share open models, harnesses, techniques and tools. Who captures the budget? Microsoft has the cleanest direct route: Security Copilot customers doubled year over year, its agents handled more than 2 million alerts last quarter, and MDASH is being productized. Nvidia is the picks-and-shovels play, supplying compute while contributing models, weights, data and its NOOA agent framework. Palantir fits the governed-deployment layer, where identity, permissions and auditability matter, while CrowdStrike, Palo Alto Networks and Cloudflare bring existing telemetry and security budgets. But alliance membership is not revenue, and open-source tooling could commoditize the core software. The money may land in compute, integration, private deployment and managed response instead. Bottom line This incident does not create a forecastable revenue stream overnight. It does create a new enterprise question: who watches the agents? As agent deployment scales, security spending should follow, and the winners will be vendors already attached to enterprise distribution, telemetry and infrastructure—not every logo in the coalition.

• 
  Bryan Jones (@bdkjones) reported 20 minutes ago

  Explaining an Outage 101: @Cloudflare: "John uploaded a bad config file at 08:24:47.252 UTC. It flipped bit 0x00007FF6E4D316D0 in datacenter 49 and brought down the whole Internet. This is unacceptable. We know you count on us. John has been shot." @Apple: "Some users may have been affected by a service 'problem'. Pray we do not affect you further."

• 
  The Whimsical Time Traveller. (@ObservanTimeGuy) reported 22 minutes ago

  @Fuckingbonehead @WG99_X @PenguySays you'd fit in at Cloudflare, you dense ****

• 
  𝚆𝚒𝚕𝚏𝚛𝚒𝚎𝚍__デク ✝️ (@ash__borne) reported 23 minutes ago

  Hello Software/Security engineers At what point can you confidently say that you're "doing" #ZTNA ? I knew about the concept, but never really dove into it. Currently testing tools like Cloudflare WARP/Access Seeing some things about mTLS (still blurry)

• 
  odézi (@basedattribute) reported 25 minutes ago

  i can't login to my cloudflare account with airtel network——works fine with mtn. can't login to bitget with mtn. works fine with airtel. nigerian internet service providers are crazy!

• 
  Sharan Yalburgi (@sharanry) reported 29 minutes ago

  love @Cloudflare agents infra but why are your workers to so slow to spin up sometimes?

• 
  Mitch Flindell (@buildo_baggins) reported 30 minutes ago

  @meaganrgamache Using Think for a project, had to switch to openrouter because glm inference on cloudflare was very slow

• 
  Dhanji Bhagat (@BhagatDhanji) reported 31 minutes ago

  Hey @Cloudflare @eastdakota A huge number of Indian developers and creators want to use Cloudflare Registrar and paid services but payment friction is holding us back. Adding UPI and RuPay support would make Cloudflare seamless for millions of devs in India 🇮🇳 Please consider integrating UPI payments! #Cloudflare #DevCommunity #IndiaTech