Cloudflare Outage Map
The map below depicts the most recent cities worldwide where Cloudflare users have reported problems and outages. If you are having an issue with Cloudflare, make sure to submit a report below
The heatmap above shows where the most recent user-submitted and social media reports are geographically clustered. The density of these reports is depicted by the color scale as shown below.
Cloudflare users affected:
Cloudflare is a company that provides DDoS mitigation, content delivery network (CDN) services, security and distributed DNS services. Cloudflare's services sit between the visitor and the Cloudflare user's hosting provider, acting as a reverse proxy for websites.
Most Affected Locations
Outage reports and issues in the past 15 days originated from:
| Location | Reports |
|---|---|
| Paris, Île-de-France | 1 |
| New York City, NY | 1 |
| Manchester, England | 1 |
| Angers, Pays de la Loire | 1 |
| London, England | 1 |
Community Discussion
Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.
Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.
Cloudflare Issues Reports
Latest outage, problems and issue reports in social media:
-
Rovshan (@mrboldpineapple) reportedI still don't get how people merge PRs into main without a real review. I enjoy building with AI, but I read every line. Most of it is fine — but there's almost always some hidden logic worth a second look. Example: I'd never integrated a Cloudflare captcha into an API before. I could absolutely just ask AI to "add cApTcHa, mAkE iT sAfE" and it would work. But then I'd have no idea how my own app actually works, and the bugs pile up fast. So I try to understand every line — and half the time I end up finding a better solution along the way. Yea I'm pretty damn slow, but at least I'm learning along the way and my app is reliable. And features are very expensive, especially if your core functionality is ***
-
Salina Mendoza (@inababi) reported@Cloudflare can you talk to your customers here? This is such a bad look for the feature that is only meant to be used as an emergency. There is zero reason to have this on 100% of the time and it seems they cannot figure out how to turn it off
-
Dr. Jaime Alnassim, M.S. (@JaimeAlnassim) reported@DerekAshauer And the cheap shared hosting back then could support alot of these WP sites. For $10 a month you could have 100 light WP sites. No one carried if a site was slow back then too. Now just use a static page and host of cloudflare for free
-
Nico Szerman ⛵ (@nicoszerman) reportedcloudflare's bot-protection is ruining the internet with checkboxes and will be totally useless soon. furthermore blocking bots from fetching your page is almost always a bad idea and should not be enabled by default by cloudflare.
-
Apple Chomping Unc (@CigSmokingMill) reportedEvery social media app is throwing the Flock hysteria in your face. No one is getting banned, de-monetized, groups shut down, deflockdotorg shut down by cloudflare or ICANN, etc. That alone tells you all you need to know
-
Lorenzo Price (@lorenzo_madeit) reported@lennysan The ElevenLabs integration inside an active Chrome profile is impressive. Most background agents break the second they hit a Cloudflare challenge or an expired cookie, so running uninterrupted for 46 minutes without asking for help is wild
-
WIV Reports — Uncensored (@WIVReports) reportedGab sends an email admitting they just tightened API security and rate limits to fight a bot farm draining compute. Yet when a long-term paying customer gets caught in those same new edge rules with an explicit Cloudflare 429 Too Many Requests error, support claims "it's an incorrect assumption," tells them to buy a VPN, and dumps a partial refund. Andrew, if you're going to ask users to fund independent infrastructure, your support team needs to know how to distinguish real paying members from the bots you're trying to block.
-
Jacob Hands (@jachands) reported@dok2001 Fix the Cloudflare codemode MCP server to properly request scopes for all APIs - I had to stop using it because it's missing auth for so many APIs.
-
Citedy (@citedycom) reportedCloudflare Dashboard is temporarily unavailable. Claude down. What next. Aliens?
-
Dane Knecht 🦭 (@dok2001) reportedTwice in nine days. OpenAI's models chained a zero-day to get out of an eval environment. Anthropic just found three incidents of the same shape. This is what capable models do. Every reachable path is an invitation. Credit to both for publishing. We rebuilt Cloudflare OS, our internal agent platform, assuming exactly this. Sandboxes have no network path out. Agents don't get every MCP tool up front, each workspace gets only what it needs. And instead of stopping for every approval until someone gives up and enables auto-approve, the platform simulates pending actions so the agent keeps working, then queues the real ones for review at the end. The app side goes further. Apps carry no auth code at all, the sandbox provides it, so there is no auth logic to get wrong. Multi-document apps are isolated per document, so a bug can't leak between separately shared items. Anyone viewing an app must have direct permission to each of its data sources, so a dashboard on sensitive data can't overshare. Actions need the user's own permission or an approval from someone who has it, so an app can't escalate its author's privileges. And everything an app does is logged, even when the service it calls doesn't support logging. Most companies are about to point agents at real systems. Build for what the models actually do. We will open source this next week!
-
Min Yoi (@yoi_minmin) reported@FuneralsR4 @Cloudflare Same.. getting the same crap for the past week. #FuckCloudflare
-
Jarno (@onefinalprompt) reported@darylginn @Cloudflare Good customer service still exists apparently. Noted.
-
Dhanji Bhagat (@BhagatDhanji) reportedHey @Cloudflare @eastdakota A huge number of Indian developers and creators want to use Cloudflare Registrar and paid services but payment friction is holding us back. Adding UPI and RuPay support would make Cloudflare seamless for millions of devs in India 🇮🇳 Please consider integrating UPI payments! #Cloudflare #DevCommunity #IndiaTech
-
bnistordev (@bnistordev) reportedI recommended using @Cloudflare Neurons within Handy because it’s a win-win situation. The problem is that it keeps generating an endless number of errors of different kinds, and Cloudflare’s API returns a vast array of models. I spent at least 30 minutes trying to get everything working, but in the end, I couldn’t, so I switched to DeepSeek.
-
eddiebro (@EddiebroRon) reportedI decided to write an iOS shortcut that will encrypt a message before sending it over iMessage and then decrypt it by only the person that has the correct 256 bit key, read it and then reply to me using the same process BUT I’m using the same type of Double Ratchet protocol Signal uses so that every message has a different encryption key and if someone were to gain access to one of the participants private key, they would not be able to do anything with it as it changes each message. Anyway, I am in the process of auditing my shortcut because iOS 27 adds features to use AI to write your shortcut for you and then also auditing and I was writing the audit and so excited that I was within five minutes of testing all of this that I just spent hours doing, and I go to open the door and walk inside with the dogs and then look down at the Shih Tzu and she look like a Christmas tree with cockleburs as decorations and I wanted to cry. It’s hard to believe that I’ve actually pulled more off of her in the past, but this was still pretty bad. And now I shall go test my shortcut yay. If it works as intended I might put it up in the gallery and then I will post a link here. The method to get a private key bound to someone else (using a temp key they provide to you from the same page) is a website that I threw up real quick on Cloudflare and then the key and all processing is done on device using JavaScript so technically anyone could use it without risk of me or anyone else being capable of decrypting any messages 🤷