Security

Breaches, attacks and emergency patches, quoted from each provider's status page.

Days without a breachDays since the last breach anywhere was resolved.
–
Breaches, 12 moSomeone got in or secrets got out: unauthorized access, leaked credentials, keys to rotate. Adds 600 points.
0
Attacks, 12 moDDoS, abuse or malicious traffic that hurt the service. Graded by impact like any outage.
3
Patches, 12 moDowntime from fixing a vulnerability: emergency reboots, CVE mitigations. Graded by impact.
2

Oct 20261 incident

Oct 1ATTACKSEV 2Ably · Elevated API ErrorsA DDoS attack caused elevated token-request errors with 503 responses in all Ably Realtime regions for about six minutes on October 1, 2026. Ably restored service by adding capacity and deployed traffic-blocking and rate-limiting rules. ably.com was also intermittently unavailable.Dev APIs · postmortem · source27m

Aug 20262 incidents

Aug 17ATTACKSEV 1Stytch · Emails not being deliveredAbuse of free-tier email sending exhausted quota with the primary email provider. Failover to the secondary provider reported success but did not deliver mail. All outbound email, including magic links, OTPs and password resets, failed from 09:15 to 12:15 UTC on 17 August. Malicious accounts were banned and new safeguards added. Sender reputation may cause some legitimate mail to land in spam for a while.Dev APIs · postmortem · source3h 33m
Aug 11ATTACKSEV 2Mailgun · Click and Open Tracking Degraded (US Regions)A denial-of-service attack hit Mailgun's click and open tracking servers in US regions from about 05:32 to 07:07 UTC on 11 August 2026. Some tracking requests timed out or failed. A fix was implemented and the incident was resolved.Dev APIs · source1h 35m