ThreatLocker incident
Degraded performance affecting Agent APIs for Instance B, C, D, E, F, G, & H and Portal for Instance B, C, D, E, F, G, H. DNS Servers US-East and US-West are down
ThreatLocker experienced a notice incident on November 6, 2025 affecting Portal [Instance A] and API [Instance B] and 1 more component, lasting 1d 5h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Nov 06, 2025, 02:09 PM UTC
We are currently investigating this issue.
- investigating Nov 06, 2025, 03:04 PM UTC
We are continuing to investigate this issue.
- investigating Nov 06, 2025, 03:09 PM UTC
We are currently investigating this issue. Instance E & F are now operational.
- investigating Nov 06, 2025, 03:23 PM UTC
We are currently investigating reports of degraded performance affecting Agent APIs for Instance B, C, D, G, & H and Portal for Instance B,C,D,E,F,G,H. Our team is working to identify the cause and implement a fix. Updates will be provided every 30 minutes. If you are having issues logging into International Instances, please select your instance in the dropdown.
- investigating Nov 06, 2025, 03:38 PM UTC
We are currently investigating reports of degraded performance affecting Agent APIs for Instance B, C, D, E, F, G, & H and Portal for Instance B,C,D,E,F,G,H. Our team is working to identify the cause and implement a fix. Updates will be provided every 30 minutes. If you are having issues logging into International Instances, please select your instance in the dropdown.
- investigating Nov 06, 2025, 03:45 PM UTC
We are currently investigating reports of degraded performance affecting Agent APIs for Instance B, C, D, E, F, G, & H and Portal for Instance B,C,D,E,F,G,H. Our team is working to identify the cause and implement a fix. Updates will be provided every 30 minutes. If you are having issues logging into International Instances, please select your instance in the dropdown.
- investigating Nov 06, 2025, 04:09 PM UTC
We are currently investigating reports of degraded performance affecting Agent APIs for Instance B, C, D, E, F, G, & H and Portal for Instance B, C, D, E, F, G, H. Our team is working to identify the cause and implement a fix. Updates will be provided every 30 minutes. If you are having issues logging into International Instances, please select your instance in the dropdown.
- investigating Nov 06, 2025, 04:26 PM UTC
We are isolating parts of the system to determine a possible DDOS source.
- investigating Nov 06, 2025, 05:07 PM UTC
We have had reports of successful logins to the portal sporadically.
- investigating Nov 06, 2025, 05:48 PM UTC
The Portal for Instances B, C, D, E, F, G, & H are back operational. We are currently investigating reports of degraded performance affecting Agent APIs for Instance B, C, D, G, & H. DNS Servers US-East and US-West are down. Our team is working to identify the cause and implement a fix. Updates will be provided every 30 minutes.
- investigating Nov 06, 2025, 06:13 PM UTC
We have isolated the suspected network and are prioritizing giving our customers access. If you need faster access, please contact Support.
- investigating Nov 06, 2025, 07:32 PM UTC
We have isolated the suspected network and are prioritizing giving our customers access. If you need faster access, please contact Support.
- investigating Nov 06, 2025, 08:02 PM UTC
We have isolated the suspected network and are prioritizing giving our customers access. We are continuing to add IP addresses over time. If you need faster access, please contact Support.
- investigating Nov 06, 2025, 08:37 PM UTC
We have isolated the suspected network and are prioritizing giving our customers access. We are continuing to add IP addresses over time. If you need faster access, please contact Support.
- investigating Nov 06, 2025, 08:53 PM UTC
APIs for Instance F are back operational. We have isolated the suspected network and are prioritizing giving our customers access. We are continuing to add IP addresses over time. If you need faster access, please contact Support.
- investigating Nov 06, 2025, 09:29 PM UTC
APIs for Instance E & F are back operational. We have isolated the suspected network and are prioritizing giving our customers access. We are continuing to add IP addresses over time. If you need faster access, please contact Support.
- investigating Nov 06, 2025, 09:50 PM UTC
APIs for Instances D, E, & F are back operational. We have isolated the suspected network and are prioritizing giving our customers access. We are continuing to add IP addresses over time. If you need faster access, please contact Support.
- investigating Nov 06, 2025, 10:09 PM UTC
APIs for Instances D, E, F, & G are back operational. We have isolated the suspected network and are prioritizing giving our customers access. We are continuing to add IP addresses over time. If you need faster access, please contact Support.
- investigating Nov 06, 2025, 11:14 PM UTC
APIs for Instances D, E, F, G, & H are back operational. We have isolated the suspected network and are prioritizing giving our customers access. We are continuing to add IP addresses over time. If you need faster access, please contact Support.
- investigating Nov 06, 2025, 11:15 PM UTC
APIs for Instances C, D, E, F, & G are back operational. We have isolated the suspected network and are prioritizing giving our customers access. We are continuing to add IP addresses over time. If you need faster access, please contact Support.
- monitoring Nov 06, 2025, 11:28 PM UTC
APIs for Instances B, C, D, E, F, & G are back operational. We are now monitoring to ensure stability
- monitoring Nov 07, 2025, 12:25 AM UTC
We are continuing to monitor for any further issues. If you are experiencing any issues please contact Support.
- monitoring Nov 07, 2025, 01:29 PM UTC
We are continuing to monitor for any further issues. Portal, API and DNS should be fully functional. If you are experiencing any issues please contact Support.
- resolved Nov 07, 2025, 08:49 PM UTC
This Incident has been resolved