Cloudsmith Outage History

Status: Monitoring We have deployed the mitigations, and the API requests & Web App are returning to normal response times. We are actively monitoring results. Affected components Cloudsmith Web App (app.cloudsmith.com) (Operational) REST API (api.cloudsmith.io) (Operational)

Status: Monitoring Working with our infrastructure partners, we've received confirmation that the issue has been resolved. We are validating across our platform, and we'll provide another update with confirmation within the next hour. Affected components Cloudsmith Web App (app.cloudsmith.com) (Degraded performance) Legacy Web App (cloudsmith.io) (Degraded performance) Datadog (Degraded performance) Audit and Client Log Exports (Degraded performance)

Status: Monitoring The elevated download errors have been resolved, and all systems are running normally. Impact Windows (UTC): • us-west: 16:35 – 16:47 • us-east: 17:02 – 17:03 Affected components Package Downloads (Operational)

Status: Monitoring Error rates for the classic and new web apps have returned to normal levels. Our engineers are continuing to monitor to ensure stability. Affected components Cloudsmith Web App (app.cloudsmith.com) (Degraded performance) Legacy Web App (cloudsmith.io) (Degraded performance)

Status: Monitoring We’ve identified the issue. The main regions impacted were Australia and Japan. The engineering team has implemented a fix and is now monitoring the system. Affected components Package Uploads (Operational)

Status: Monitoring We have resolved the issue affecting session management. The underlying cause has been addressed and our engineers are continuing to monitor. Customers who were experiencing session timeouts should now be able to log in without issue, and any previously failed jobs should complete successfully on rerun. We apologize for any inconvenience this may have caused. Affected components Cloudsmith Web App (app.cloudsmith.com) (Degraded performance) OpenID Connect (Degraded performance)

Status: Monitoring Between 15:00 UTC on 12 May and 08:00 UTC on 13 May 2026, customers outside the EU may have experienced intermittent failures when pushing Docker packages. We have identified and resolved the cause and are continuing to monitor. Affected components Package Uploads (Degraded performance)

Status: Monitoring On Friday May 1st 2026, Cloudsmith introduced PEP 658-compliant metadata to Python indexes. Packages uploaded prior to this functionality being introduced (excluding upstream packages) were unable to have this metadata fetched. Package downloads themselves remained unaffected. However, Python-native clients such as uv and newer versions of pip treat metadata fetch failures as general failures, and refused to download the affected artifacts. Upstream fetches, non-wheel artifacts, and newly uploaded wheels were unaffected. For affected packages, the result was failed Python installs. We've now removed these metadata URLs from Python indexes while we backfill the data for packages that were missing it. Affected installs should now succeed on retry. We sincerely apologize for the disruption. Affected components Package Downloads (Partial outage)

Status: Monitoring Our engineering team continues to monitor the backlog of package evaluations. Affected components Enterprise Policy Manager (Early Access) (Degraded performance)

Status: Monitoring Our team has applied targeted fixes to the policies causing the evaluation queue to build up overnight. The backlog is now clearing and processing times are recovering steadily. All other Cloudsmith services are unaffected. We're monitoring closely until everything is back to normal. Affected components Enterprise Policy Manager (Early Access) (Degraded performance)

Status: Monitoring The queue continues to clear and we are actively monitoring. We will confirm once fully resolved. Affected components Enterprise Policy Manager (Early Access) (Degraded performance)

Status: Monitoring We are aware of a security incident that Vercel reported over the weekend (Official Vercel Bulletin: https://vercel.com/kb/bulletin/vercel-april-2026-security-incident). Our Security and Engineering teams are actively reviewing the situation. At this time, we have found no evidence to suggest that our infrastructure, services or data have been impacted by this event. However, we are closely following the ongoing situation & incident response guidance provided by Vercel and the security community. We have implemented the recommended precautionary measures to ensure the continued security of our systems. We will continue to monitor our environment closely and provide further updates if our assessment changes.

Status: Monitoring Enterprise Policy Manager is an Early Access feature. Between 22 April 10:00 AM - 23 April 10:00 AM (UTC), Enterprise Policy Manager decision logs were delayed in the UI/API. For policy evaluations that occurred in this period, around 50% of decision logs have been dropped and will not be available in the UI/API. At 23 April 11:00 AM (UTC), we purged any unprocessed decision logs from the system to allow new logs to be processed. During this time, all policy evaluations completed successfully. There was no impact on the outcome of policy decisions. However, for the period stated, some decision logs are missing in the UI/API. Affected components Enterprise Policy Manager (Early Access) (Degraded performance)

Status: Monitoring We’re seeing an elevated error rate for requests hitting EU-West. API and Web UI requests are impacted. Our engineers are monitoring. Affected components Security Scanning (Degraded performance) Enterprise Policy Manager (Early Access) (Degraded performance) Package Uploads (Degraded performance) Package Sync (Degraded performance) Upstreams (Degraded performance) Package Downloads (Degraded performance) Continuous Security (Early Access) (Degraded performance)

Status: Monitoring We have deployed a fix and are actively monitoring results. Affected components Upstreams (Partial outage) Package Downloads (Partial outage)

Status: Monitoring The issues causing increased latency in the EU West region have been mitigated. Service has been restored, and we are continuing to monitor the system health Affected components Package Uploads (Operational) Cloudsmith Web App (app.cloudsmith.com) (Operational) Broadcasts (Operational) Legacy Web App (cloudsmith.io) (Operational) Package Downloads (Operational) Security Scanning (Operational) Enterprise Policy Manager (Early Access) (Operational) Blog (cloudsmith.com/blog) (Operational) Package Sync (Operational) REST API (api.cloudsmith.io) (Operational) Help & Documentation (docs.cloudsmith.com) (Operational) Upstreams (Operational) Continuous Security (Early Access) (Operational)

Status: Monitoring Mitigation steps have been taken, and service has returned to normal operational levels. We are continuing to monitor while investigating the root cause. Affected components REST API (api.cloudsmith.io) (Degraded performance) Upstreams (Degraded performance) Package Downloads (Degraded performance)

Status: Monitoring Our engineers believe they have identified the issue causing increased error rates in US East and have implemented a fix. We continue to monitor the system. Affected components REST API (api.cloudsmith.io) (Degraded performance) Upstreams (Degraded performance) Package Downloads (Degraded performance)

Status: Monitoring Our engineers have identified the issue causing increased request latency in US East 2 and have implemented a fix. We are seeing request latency returning to normal levels. We continue to monitor the system. Affected components Continuous Security (Early Access) (Degraded performance) Package Uploads (Degraded performance) Cloudsmith Web App (app.cloudsmith.com) (Degraded performance) REST API (api.cloudsmith.io) (Degraded performance) Upstreams (Degraded performance) Legacy Web App (cloudsmith.io) (Degraded performance) Security Scanning (Degraded performance) Enterprise Policy Manager (Early Access) (Degraded performance) Package Sync (Degraded performance) Broadcasts (Degraded performance) Package Downloads (Degraded performance)

Status: Monitoring We were seeing an increase in request times across all package formats. From our monitoring systems, we could see an increase in Latency at 2:09 AM UTC. This was caused by the ongoing maintenance activity. We stopped the maintenance activity at 4:10 AM UTC, and the systems recovered post that. Affected components REST API (api.cloudsmith.io) (Degraded performance) Package Downloads (Degraded performance)

Status: Monitoring Our engineers have implemented a fix for the delay in policy evaluations and continue to monitor the backlog. Customers will see a delay in policy decision logs while our system processes the backlog. Affected components Enterprise Policy Manager (Early Access) (Partial outage)

Status: Monitoring Policy evaluations have returned to normal operation. While we process the remaining backlog of decision logs, customers may notice a temporary delay in log availability. Our team is monitoring the recovery. Affected components Enterprise Policy Manager (Early Access) (Partial outage)

Status: Monitoring We have resolved the incident affecting policy evaluations and are now monitoring the remaining backlog for EPM decision logs. Core services are fully operational Affected components Enterprise Policy Manager (Early Access) (Operational)

Status: Monitoring The remaining EPM decision log backlog is continuing to process successfully and is being actively monitored. New evaluations for EPM will have their decision logs processed as normal and will not be affected by the backlog. Core services are not affected. Affected components Enterprise Policy Manager (Early Access) (Operational)