Security
Breaches, attacks and emergency patches, quoted from each provider's status page.
Days without a breach
Days since the last breach anywhere was resolved.Breaches, 12 mo
Someone got in or secrets got out: unauthorized access, leaked credentials, keys to rotate. Adds 600 points.Attacks, 12 mo
DDoS, abuse or malicious traffic that hurt the service. Graded by impact like any outage.Patches, 12 mo
Downtime from fixing a vulnerability: emergency reboots, CVE mitigations. Graded by impact.Oct 20261 incident
Oct 16PATCHSEV 2Fly.io · Platform Wide Rolling Host RebootsFly.io rebooted hosts fleet-wide as a mitigation for a Linux kernel vulnerability (CVE-2026-99999). Each host was down 15-20 minutes, so Machines, volumes and MPG clusters went offline in rolling phases over about 19 hours. MPG saw elevated primary-standby switchovers. A small number of hosts stayed degraded afterward.Hosting · source12h 53m