Abnormal Security incident

Security Orchestration and Automation Response Service Disruption

Critical Resolved View vendor source →

Abnormal Security experienced a critical incident on November 20, 2025 affecting Security Orchestration, Automation Response API (SOAR API), lasting 1h 3m. The incident has been resolved; the full update timeline is below.

Started
Nov 20, 2025, 11:44 AM UTC
Resolved
Nov 20, 2025, 12:48 PM UTC
Duration
1h 3m
Detected by Pingoru
Nov 20, 2025, 11:44 AM UTC

Affected components

Security Orchestration, Automation Response API (SOAR API)

Update timeline

  1. identified Nov 20, 2025, 11:44 AM UTC

    Starting at 10:22 UTC, Abnormal began to experience an issue with Security Orchestration, Automation Response functionality. Customers may experience delays or failures when using automated security workflows and response actions. Abnormal's engineering team has identified the root cause and is actively working on resolution. The next update will be provided in 1 hour or when further information is obtained.

  2. resolved Nov 20, 2025, 12:48 PM UTC

    As of 12:40 UTC, Abnormal has implemented a fix and engineers are observing Security Orchestration, Automation Response traffic as expected. The service disruption affecting automated security workflows and response actions has been fully resolved. Please reach out to [email protected] if you experience any further issues.