Settings management functionality has been fully restored. Reading and updating WAF settings, including IP allow and block lists, is working normally again through both the API and the Management Dashboard.
Traffic protection was unaffected for the duration of this incident and all sites remained online.
If you made IP list changes between September 16, 6:30 PM UTC and September 17, 2:30 PM UTC, please verify they were applied and re-submit any that were not. We apologize for the inconvenience.
Posted Sep 17, 2026 - 14:25 UTC
Update
Our team is still actively working on this issue and restoring settings management. Traffic protection remains unaffected and all sites are online and serving normally.
Posted Sep 17, 2026 - 14:15 UTC
Update
Work continues on restoring full settings management functionality. Traffic protection is unaffected and all sites remain online and serving normally.
Posted Sep 17, 2026 - 13:44 UTC
Update
We are continuing to work on restoring settings management. Traffic protection remains unaffected and all sites are online and serving normally.
Posted Sep 17, 2026 - 12:53 UTC
Update
Our engineering team is continuing to investigate and is working to restore full settings management functionality. Traffic protection remains unaffected and all sites are online and serving normally.
Posted Sep 17, 2026 - 12:08 UTC
Investigating
We are seeing an elevated level of failures when reading or updating WAF settings, including IP allow and block lists, through both the Expedited WAF API and the Management Dashboard. Requests may fail or lists may appear empty.
Traffic protection is not affected. All sites remain online and continue to be protected and served normally.
Posted Sep 17, 2026 - 10:31 UTC
This incident affected: Expedited WAF API and Expedited WAF Management Dashboard.