Northflank incident

Security incident

Major

Ongoing since 01:40 PM UTC, affecting Northflank Platform (Networking) and Northflank Platform (Certificates) and 1 more.

identified Oct 30, 2026, 01:58 PM UTC

Assume all environment variables have been decrypted. Disable/rotate all keys.

Started
Oct 30, 2026, 01:40 PM UTC
Resolved
Ongoing
Duration
● 49m
Detected by Pingoru
Oct 30, 2026, 01:40 PM UTC

Affected components

Northflank Platform (Networking)Northflank Platform (Certificates)Northflank Platform (Services)Northflank Platform (Addons)Northflank Platform (Jobs)Northflank Platform (Builds)Northflank Platform (Logs and Metrics)

Update timeline

  1. investigating Oct 30, 2026, 01:40 PM UTC

    Rotate environment variables immediately. 11:43 UTC: Wiz threat alert 11:44 UTC: Northflank engineers review the alert 12:02 UTC: Initial network policy patch 12:50 UTC: Additional patching deployed 13:00 UTC: Wiz CIRT support requested 13:05 UTC: Additional patching deployed 13:05 UTC: Additional patching deployed

  2. identified Oct 30, 2026, 01:58 PM UTC

    Assume all environment variables have been decrypted. Disable/rotate all keys.

Your product runs on more than Northflank

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →