Security
Breaches, attacks and emergency patches, quoted from each provider's status page.
Days without a breach
Days since the last breach anywhere was resolved.Breaches, 12 mo
Someone got in or secrets got out: unauthorized access, leaked credentials, keys to rotate. Adds 600 points.Attacks, 12 mo
DDoS, abuse or malicious traffic that hurt the service. Graded by impact like any outage.Patches, 12 mo
Downtime from fixing a vulnerability: emergency reboots, CVE mitigations. Graded by impact.Oct 20263 incidents
Oct 24PATCHNOT COUNTEDCloudinary · Notice regarding recently-reported Ruby regular expression vulnerabilities (CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, CVE-2026-110264)Cloudinary notice on Ruby regular expression vulnerabilities (four CVEs) fixed upstream October 23, 2026. Cloudinary upgraded its own platform the same day, found no exploitation or customer impact, and says no action is needed for Cloudinary. Customers using Ruby in their own apps should update to a patched release.Dev APIs · source0m
Oct 21PATCHNOT COUNTEDCloudinary · Notice regarding recently-reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619Dev APIs · source0m
Oct 16PATCHSEV 2Fly.io · Platform Wide Rolling Host RebootsFly.io rebooted hosts fleet-wide as a mitigation for a Linux kernel vulnerability (CVE-2026-99999). Each host was down 15-20 minutes, so Machines, volumes and MPG clusters went offline in rolling phases over about 19 hours. MPG saw elevated primary-standby switchovers. A small number of hosts stayed degraded afterward.Hosting · source12h 53m