Sep <var data-var='date'>11</var>, <var data-var='time'>14:20</var> UTC Resolved - This incident has been resolved. Sep <var data-var='date'>11</var>, <var data-var='time'>14:12</var> UTC Monitoring - A fix has been implemented and we are monitoring the results. Sep <var data-var='date'>11</var>, <var data-var='time'>14:04</var> UTC Investigating - We are observing higher than expected latency at our edge in some regions, primarily affecting 0.0175% of siteverify requests. Affected traffic is now being rerouted, and we expect latency to recover shortly.

Increased endpoint latency in some regions

Aug <var data-var='date'>27</var>, <var data-var='time'>12:27</var> UTC Resolved - Query service maintenance is now complete. Aug <var data-var='date'>27</var>, <var data-var='time'>12:10</var> UTC Investigating - The query service is currently under maintenance: some dashboard queries may load more slowly or be unavailable over the next 30 minutes. All other functions will be unaffected.

Enterprise: Analytics queries under maintenance

Jul <var data-var='date'>29</var>, <var data-var='time'>17:31</var> UTC Resolved - 429 rates on several networks briefly increased for approximately 60 seconds. This issue has now been resolved.

Increased 429 rates on several ASNs

May <var data-var='date'> 5</var>, <var data-var='time'>14:00</var> UTC Resolved - Between 14:15 UTC and 14:22 UTC, some loads of API assets returned 403s in some regions. This incident has now been resolved.

Increased error rate on API loads

Dec <var data-var='date'>19</var>, <var data-var='time'>15:00</var> UTC Resolved - We are monitoring sporadic latency impact related to network-level issues at an upstream WAF provider: https://www.cloudflarestatus.com/incidents/dz87vqwvl8wr This appeared to primarily affect some LATAM and EUR region POPs.

Increased latency on API calls in some regions

Oct <var data-var='date'>21</var>, <var data-var='time'>21:29</var> UTC Resolved - This notice is purely informational. There was zero impact to hCaptcha from the AWS us-east-1 outage that took down many other online services this week.

hCaptcha is completely unaffected by the AWS outages

Oct <var data-var='date'> 8</var>, <var data-var='time'>16:14</var> UTC Resolved - Maintenance is now complete. Oct <var data-var='date'> 8</var>, <var data-var='time'>16:05</var> UTC Monitoring - Passkey support is being updated; error rates for logins or 2FA verification on accounts using passkeys may increase for approximately 10 minutes.

Maintenance to Passkey support

Sep <var data-var='date'> 8</var>, <var data-var='time'>15:22</var> UTC Resolved - Due to an issue at an upstream edge CDN, P99 times in several regions, primarily GIG and GRU, were elevated between 14:15 UTC and 14:45 UTC.

Elevated P99 times in South America (Brazil) regions

Aug <var data-var='date'>21</var>, <var data-var='time'>19:47</var> UTC Resolved - We are no longer seeing elevated latency in IAD. Aug <var data-var='date'>21</var>, <var data-var='time'>19:39</var> UTC Monitoring - An upstream WAF provider is experiencing increased latency in the IAD region, which appears to be primarily affecting connections from AWS us-east to our API endpoints. Most traffic has been rerouted to nearby regions, so siteverify endpoints from servers connecting from AWS us-east regions that do not use our PrivateLink or Direct Routing options may see 20-50ms of increased latency until IAD is restored. Impact appears to be less than 0.005% of total requests, but may be concentrated on some network links.

Elevated latency in IAD region for connections from AWS us-east-1

Jun <var data-var='date'>12</var>, <var data-var='time'>20:45</var> UTC Resolved - Error rates for Google SSO appear to have returned to normal. Jun <var data-var='date'>12</var>, <var data-var='time'>19:01</var> UTC Identified - Due to an incident at Google, we are observing increased error rates on login authentication. Use GitHub SSO or contact support@hcaptcha.com if you need assistance with alternate methods. You may track status here: https://status.cloud.google.com/incidents/ow5i3PPK96RduMcb1SsW#2c2sBHWU84yPDJ8y1ar4

Increased error rates for Google SSO due to Google outage

Mar <var data-var='date'>11</var>, <var data-var='time'>11:58</var> UTC Resolved - Due to an issue at an upstream mail gateway, some inbound support emails may have been delayed or rejected earlier today. This did not affect outbound email, and the issue has now been resolved.

Inbound support email deliverability issues

Feb <var data-var='date'>20</var>, <var data-var='time'>00:21</var> UTC Resolved - This incident has been resolved. As a reminder, please confirm that you are loading the JS SDK only via the recommended host: https://js.hcaptcha.com/1/api.js Feb <var data-var='date'>19</var>, <var data-var='time'>22:49</var> UTC Monitoring - A fix has been implemented and we are monitoring the results.

Upstream CDN issues causing increased JS SDK load error rates

Oct <var data-var='date'>30</var>, <var data-var='time'>19:49</var> UTC Completed - The scheduled maintenance has been completed. Oct <var data-var='date'>30</var>, <var data-var='time'>19:39</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct <var data-var='date'>30</var>, <var data-var='time'>19:38</var> UTC Scheduled - Dashboard Analytics features and Stats API error rates may increase briefly while maintenance is performed on analytics services. Other features and components of the dashboard will be unaffected.

Analytics Service Under Maintenance: Dashboard Stats Error Rates May Increase

Jun <var data-var='date'>20</var>, <var data-var='time'>20:23</var> UTC Resolved - P99 latency has returned to norm as of 20:05 UTC. Jun <var data-var='date'>20</var>, <var data-var='time'>19:58</var> UTC Monitoring - Due to an incident at an upstream CDN provider starting at 18:00 UTC, we are observing elevated P99 latency (+100-200ms) on a minority of traffic in the Eastern US and Western Europe regions, caused by some traffic being rerouted to more distant POPs. We have put overrides in place and will continue to monitor performance; there is no impact to availability and no action is required.

Elevated P99 latency on some requests

Jun <var data-var='date'> 3</var>, <var data-var='time'>15:11</var> UTC Completed - The scheduled maintenance has been completed. Jun <var data-var='date'> 3</var>, <var data-var='time'>14:11</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jun <var data-var='date'> 3</var>, <var data-var='time'>14:10</var> UTC Scheduled - Some queries for very recent data will show a delay as updates are completed.

Analytics service under maintenance (Enterprise)

Jun <var data-var='date'> 3</var>, <var data-var='time'>01:44</var> UTC Completed - The scheduled maintenance has been completed. Jun <var data-var='date'> 3</var>, <var data-var='time'>00:44</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jun <var data-var='date'> 3</var>, <var data-var='time'>00:43</var> UTC Scheduled - While maintenance is performed to analytics subsystems, dashboard error rates for some graphs may increase. Other features will be unaffected.

Mar <var data-var='date'>22</var>, <var data-var='time'>03:30</var> UTC Resolved - At Mar 22 01:21:56 2024 GMT, some users of dedicated mainland China region endpoints experienced an expired certificate error on some endpoints. The root cause has been identified and addressed. Global traffic was unaffected.

China region endpoints: elevated error rates

Mar <var data-var='date'>15</var>, <var data-var='time'>04:00</var> UTC Resolved - hCaptcha APIs use several SSL certificate authorities, maintaining both primary and backup certificates; our CAA record is authoritative. We also automatically rotate certificates every three months as part of our security best practices. We received several reports today from customers running servers with outdated root CA entries. They either needed to update these after our most recent automatic certificate rotation, or had locked their validation for our endpoints to a specific certificate chain rather than relying on CA validation and our CAA records. Please ensure your servers calling the siteverify endpoint have an updated root CA store. This is an important security practice, as root CAs are occasionally compromised and removed from OS vendors' stores. Similarly, if you would like to enforce additional restrictions on validating our TLS certificates, please rely on the CAA record rather than hard-coding a specific intermediate chain.

Reminder: Please ensure your server's root CA certificates are up to date

Jan <var data-var='date'>19</var>, <var data-var='time'>16:56</var> UTC Completed - The scheduled maintenance has been completed. Jan <var data-var='date'>19</var>, <var data-var='time'>16:56</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jan <var data-var='date'>19</var>, <var data-var='time'>16:56</var> UTC Scheduled - SAML authentication services may experience elevated error rates for several minutes during initial login while dashboard maintenance is underway.

Updates to SAML Authentication for Enterprise Customers

Sep <var data-var='date'>12</var>, <var data-var='time'>23:00</var> UTC Resolved - Some sites consuming hCaptcha risk scores briefly experienced an elevated score distribution, affecting approximately 3% of traffic. This incident was fully resolved by 01:28 UTC. This issue and its root cause have now been addressed, and adjustments scheduled to prevent any similar incidents in the future.

Elevated scores for some traffic

Jun <var data-var='date'>16</var>, <var data-var='time'>18:55</var> UTC Resolved - This incident has been resolved. Jun <var data-var='date'>16</var>, <var data-var='time'>18:50</var> UTC Investigating - Login error rates will increase on dashboard logins in some regions during subsystem maintenance.

Dashboard under maintenance

May <var data-var='date'>20</var>, <var data-var='time'>23:30</var> UTC Completed - The scheduled maintenance has been completed. May <var data-var='date'>20</var>, <var data-var='time'>22:56</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. May <var data-var='date'>20</var>, <var data-var='time'>22:54</var> UTC Scheduled - Accounts services will be read-only for approximately 10-15 minutes as a core database migration is performed. This means that new account creation and updates to sitekey configurations, whether via the dashboard or API, will not be possible while the window is open.

Scheduled maintenance to accounts services

Apr <var data-var='date'>29</var>, <var data-var='time'>22:01</var> UTC Completed - The scheduled maintenance has been completed. Apr <var data-var='date'>29</var>, <var data-var='time'>18:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Apr <var data-var='date'>29</var>, <var data-var='time'>17:56</var> UTC Scheduled - Accounts services in several regions will be undergoing scheduled maintenance today. Latency or transient error rates on dashboards and management APIs may briefly increase as traffic is rerouted during upgrades.

Jan <var data-var='date'> 4</var>, <var data-var='time'>18:01</var> UTC Completed - The scheduled maintenance has been completed. Jan <var data-var='date'> 4</var>, <var data-var='time'>17:01</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jan <var data-var='date'> 4</var>, <var data-var='time'>17:00</var> UTC Scheduled - A metrics upgrade currently underway will cause a limited number of data artifacts in dashboard counts during the migration window, as some columns may be unavailable in drill-down analytics views. Stats APIs and other non-interactive systems will be unaffected.

Dashboard drill-down metrics upgrade in progress (Enterprise)

Dec <var data-var='date'>19</var>, <var data-var='time'>19:30</var> UTC Resolved - Token verification endpoint error rates increased for several minutes on approximately 0.1% of sites during a token-related update. This was most commonly visible in an increased probability of a sitekey mismatch error.

Is hCaptcha down?

hCaptcha status is UP

Lastest published events

Increased endpoint latency in some regions

Enterprise: Analytics queries under maintenance

Increased 429 rates on several ASNs

hCaptcha Services, Components and Regions

Recent hCaptcha events

Increased endpoint latency in some regions

Enterprise: Analytics queries under maintenance

Increased 429 rates on several ASNs

Increased error rate on API loads

Increased latency on API calls in some regions

hCaptcha is completely unaffected by the AWS outages