May <var data-var='date'>15</var>, <var data-var='time'>14:03</var> PDT Resolved - This incident has been resolved. Monitoring has confirmed that service has returned to normal operation, and threat detections are processing as expected. May <var data-var='date'>15</var>, <var data-var='time'>12:25</var> PDT Monitoring - The root cause of the issue affecting a subset of threat detections has been identified, and corrective actions have been taken. We are currently monitoring to ensure full resolution and will provide additional updates as needed. May <var data-var='date'>15</var>, <var data-var='time'>09:49</var> PDT Update - We are continuing to investigate the root cause of the issue affecting a subset of threat detections. Our team remains actively engaged, and we will provide additional updates as more information becomes available. May <var data-var='date'>15</var>, <var data-var='time'>08:10</var> PDT Investigating - Monitoring has detected a recurrence of the issue impacting a subset of threat detections, and investigation has resumed. We are actively investigating and will provide further updates as our investigation progresses.

Subset of Detections Delayed

May <var data-var='date'>15</var>, <var data-var='time'>07:47</var> PDT Resolved - A fix to address an issue resulting in detection and alerting delays for a subset of threat detections has been deployed. Telemetry and post fix validation confirm a return to normal service operation. May <var data-var='date'>15</var>, <var data-var='time'>07:05</var> PDT Investigating - We are currently investigating an issue impacting a subset of threat detections and resulting in delayed alerting for impacted detections

Subset of detections delayed

Mar <var data-var='date'>11</var>, <var data-var='time'>07:34</var> PDT Resolved - A fix to address the issue of "Not Found" errors being displayed upon attempt to load Obsidian Environments has been released, and telemetry and post fix validation confirm a return to normal service operation. Mar <var data-var='date'>11</var>, <var data-var='time'>07:07</var> PDT Update - We are currently investigating an issue that is resulting in users encountering a "Not Found" / HTTP-404 error when attempting to access Obsidian environments. Mar <var data-var='date'>11</var>, <var data-var='time'>07:05</var> PDT Investigating - We are currently investigating an issue that is resulting in users encountering a "Not Found" / HTTP-404 error when attempting to access Obsidian environments.

Not Found  ( HTTP-404) Errors when attempting to access Obsidian Environment

Mar <var data-var='date'>11</var>, <var data-var='time'>04:47</var> PDT Resolved - This incident has been resolved. Mar <var data-var='date'>11</var>, <var data-var='time'>04:23</var> PDT Update - The backfill process is nearing completion, and activity data is now mostly up to date. We will continue to monitor the system as the remaining backfill completes Mar <var data-var='date'>11</var>, <var data-var='time'>01:59</var> PDT Monitoring - The activity data is catching up, and we are closely monitoring the system's performance. We will provide another update once the system is fully up to date with the activity data. Mar <var data-var='date'>11</var>, <var data-var='time'>01:57</var> PDT Update - The issue has been identified and a fix is being implemented. Mar <var data-var='date'>11</var>, <var data-var='time'>00:51</var> PDT Investigating - We have identified an issue that may result in delayed event population within the activity module. Our teams are currently working to mitigate the issue and any updates will be posted on this incident notification.

Activity timeline delay

Mar <var data-var='date'> 1</var>, <var data-var='time'>02:00</var> PST Completed - The scheduled maintenance has been completed. Feb <var data-var='date'>27</var>, <var data-var='time'>02:00</var> PST In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Feb <var data-var='date'>23</var>, <var data-var='time'>14:17</var> PST Scheduled - We will be undergoing scheduled maintenance during this time.

Infrastructure component upgrade for AU region

Feb <var data-var='date'> 9</var>, <var data-var='time'>14:50</var> PST Resolved - We have fully resolved the issue that was impacting the US environment. System performance and operation have returned to normal levels, and all services are functioning as expected. Our team will continue to monitor the environment closely, but no further impact is anticipated at this time. Thank you for your patience while we work to restore normal operation. Feb <var data-var='date'> 9</var>, <var data-var='time'>14:37</var> PST Monitoring - We have implemented mitigation actions to address the issue impacting the US / live environment, and we are seeing improved performance at this time. Our engineering team is actively monitoring the system to ensure stability and will continue to take additional corrective steps as needed. We will provide another update in 1 hour, or sooner, if there are any significant changes. Feb <var data-var='date'> 9</var>, <var data-var='time'>14:06</var> PST Update - We are continuing to investigate an issue currently impacting the US environment and resulting in intermittent or slow page loads when accessing the Obsidian UI. At this time, all other environments remain operational and unaffected. Our engineering team is actively working to isolate the underlying root cause and mitigate impact. We will provide a further update in 1 hour, or sooner, as more information becomes available. Thank you for your patience while we work to restore normal operation. Feb <var data-var='date'> 9</var>, <var data-var='time'>13:06</var> PST Investigating - We are currently investing an issue resulting in intermittent issues loading the Obsidian admin console and modules within.

Intermittent failures when loading Obsidian admin console

Feb <var data-var='date'> 9</var>, <var data-var='time'>11:00</var> PST Resolved - We see US region got UI response slowness. Team identified it related to a backend issue. A fix was applied. The issue is resolved at 11:20AM

Web UI slowness for US region

Jan <var data-var='date'>19</var>, <var data-var='time'>01:00</var> PST Completed - The scheduled maintenance has been completed. Jan <var data-var='date'>18</var>, <var data-var='time'>21:00</var> PST In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jan <var data-var='date'> 8</var>, <var data-var='time'>16:47</var> PST Scheduled - We will be undergoing scheduled maintenance during this time.

Infrastructure component upgrade for US region

Jan <var data-var='date'> 5</var>, <var data-var='time'>05:04</var> PST Resolved - After monitoring system performance and fully confirming the previously deployed fix to be effective, we are now marking this incident as resolved. All affected functionality has been fully restored, and customers should no longer encounter "An error has occurred" when loading these modules. Thank you for your patience while we worked through and resolved this incident. Jan <var data-var='date'> 4</var>, <var data-var='time'>22:35</var> PST Monitoring - A fix has been implemented and we are monitoring the results. Jan <var data-var='date'> 4</var>, <var data-var='time'>21:27</var> PST Update - We have identified the root cause of the issue impacting the threat, activity, dashboards, and objects modules in the US region and are currently implementing a fix. Impacted customers may still encounter "An error has occurred" when loading these modules while the fix is being rolled out. We will provide another update once the deployment is complete and we have validated full restoration of service. Jan <var data-var='date'> 4</var>, <var data-var='time'>18:30</var> PST Update - Update to Scope of Impact: Our ongoing investigation into this issue and identification of cause has resulted in a clarification on the scope of impact. Impact resulting from this issue is now scoped to the threat, activity, dashboards, and objects modules, including APIs underlying these modules Impacted customers will encounter "An error has occurred" error upon attempt to load these impacted modules. Our engineering team is currently working to address the underlying issue, and any updates will be posted on this incident notification. Jan <var data-var='date'> 4</var>, <var data-var='time'>18:26</var> PST Identified - Update to Scope of Impact: Our ongoing investigation into this issue and identification of cause has resulted in a clarification on the scope of impact. Impact resulting from this issue is now scoped to the threat and activity modules, including APIs underlying these modules Impacted customers will encounter "An error has occurred" error upon attempt to load these impacted modules. Our engineering team is currently working to address the underlying issue, and any updates will be posted on this incident notification. Jan <var data-var='date'> 4</var>, <var data-var='time'>17:46</var> PST Update - We are continuing to investigate this issue. Jan <var data-var='date'> 4</var>, <var data-var='time'>17:44</var> PST Investigating - Our systems have detected an issue impacting threat that may result in "No Data" being displayed for a subset of settings. Our engineering team is currently working to address the underlying issue, and any updates will be posted on this incident notification.

Service partially down(threat, activity) for US region

Dec <var data-var='date'> 5</var>, <var data-var='time'>01:22</var> PST Resolved - This incident has been resolved. Our monitoring is no longer showing elevated error rates and all components across the Obsidian platform are fully operational. Dec <var data-var='date'> 5</var>, <var data-var='time'>01:07</var> PST Investigating - Obsidian is aware of and tracking the widespread issues with Cloudflare which may be impacting access to the Administration UI. We will post additional updates as we learn of recovery and next steps.

Obsidian Administration UI Access - Cloudflare Outage

Nov <var data-var='date'>18</var>, <var data-var='time'>10:27</var> PST Resolved - This incident has been resolved. Our monitoring is no longer showing elevated error rates and all components across the Obsidian platform are fully operational. Nov <var data-var='date'>18</var>, <var data-var='time'>09:39</var> PST Monitoring - Following additional mitigation efforts by the Cloudflare team, our monitoring and telemetry reflect a return to normal error rates across the Obsidian platform. Obsidian will continue monitoring this incident to ensure full resolution. Nov <var data-var='date'>18</var>, <var data-var='time'>07:47</var> PST Identified - On-going monitoring following a fix applied by Cloudflare indicate a continuation of intermittent issues accessing the Administration UI. Additional mitigation efforts are underway and further updates will be provided as those efforts progress. Nov <var data-var='date'>18</var>, <var data-var='time'>06:53</var> PST Monitoring - Cloudflare has implemented a fix and we are now observing a return to normal operation of the Administration UI. Obsidian will continue monitoring this incident to ensure full resolution. Nov <var data-var='date'>18</var>, <var data-var='time'>04:16</var> PST Identified - Obsidian is aware of and tracking the widespread issues with Cloudflare which may be impacting access to the Administration UI. We will post additional updates as we learn of recovery and next steps.

Nov <var data-var='date'>13</var>, <var data-var='time'>06:56</var> PST Resolved - This incident has been resolved. We have released a permanent fix in the Obsidian Browser Extension version ver. 1.13.4, which is now rolling out via auto‑update. What to expect: The updated extension will install automatically as it propagates to users. Next steps: If you previously disabled Phishing Detections as a workaround, you may re‑enable it once your environment has received version 1.13.4. Scope: No other Browser Extension capabilities were affected. Support: For help confirming rollout status or re‑enabling Phishing Detections, contact Obsidian Support at support@obsidiansecurity.com or your Technical Account Manager. Thank you for your patience while we worked to resolve this issue. Nov <var data-var='date'>12</var>, <var data-var='time'>17:14</var> PST Identified - A root cause has been identified for the issue impacting the Obsidian Browser extension that is resulting in a subset of customers experiencing browser performance degradation when the Obsidian Browser Extension analyzes certain pages for Phishing Detections. Scope and impact Issue onset has been observed with ver. 1.13.x and up Other Browser Extension capabilities remain unaffected. Temporary mitigation (workaround) Administrators can temporarily disable the Phishing Detections component to prevent the behavior while a permanent fix is prepared. How to apply the workaround Sign in to the Obsidian admin console, then open Browser Extension settings. Locate Phishing Detections and set the Phishing Status to “Disabled.” Save changes, wait a few minutes for propagation, then refresh affected browsers. Next steps A new extension version with a permanent fix is being prepared and will roll out via auto‑upgrade. After the fixed version is deployed in your environment, re‑enable Phishing Detections to restore full protection. Support For assistance determining whether to apply this mitigation, contact Obsidian Support at support@obsidiansecurity.com or your Technical Account Manager. Nov <var data-var='date'>12</var>, <var data-var='time'>11:12</var> PST Investigating - We are currently investigating reports from a subset of customers reporting page unresponsive messages for a subset of webpages under Google Chrome and Microsoft edge when running version 1.13.x of the Obsidian browser extension. Additional updates will be posted on this incident notification as our investigation into the root cause of this issue progresses

Obsidian Browser Extension ver. 1.13.x Page Unresponsive Errors

Nov <var data-var='date'> 6</var>, <var data-var='time'>11:39</var> PST Resolved - This issue has been resolved. A fix addressing the underlying issue was implemented and authentication services have returned to normal operation. Nov <var data-var='date'> 6</var>, <var data-var='time'>11:35</var> PST Identified - The issue has been identified and a fix is being implemented. Nov <var data-var='date'> 6</var>, <var data-var='time'>11:35</var> PST Update - We have identified the root cause of the issue resulting in users encountering a "No access granted" error when attempting to authenticate to the Obsidian platform, and are in the process of taking mitigation actions. Additional updates will be posted on this incident notification. Nov <var data-var='date'> 6</var>, <var data-var='time'>11:03</var> PST Investigating - We are currently investigating an issue with our Admin portal authentication service which might prevent users from successfully authenticating to the Obsidian platform. Impacted users will encounter an error indicating "No access granted" when attempting to authenticate. Our teams are currently investigating the issue and any updates will be posted on this incident notification.

Errors when authenticating to the Obsidian admin portal

Aug <var data-var='date'>28</var>, <var data-var='time'>16:05</var> PDT Resolved - The issue has been resolved and impacted Salesforce posture rules now reflect the correct status. We appreciate your patience and understanding during this time, and if you experience any further issues, please do not hesitate to reach out. Aug <var data-var='date'>28</var>, <var data-var='time'>09:06</var> PDT Identified - We have identified an issue impacting a subset of Salesforce posture rules. Impacted customers may find that the rule IDs noted below will have unexpectedly moved from a failing to passing state. In the course of addressing the underlying cause, and rules being reverted to their proper state, posture drift alerts may be received. Environments Impacted: US, EU, AU SalesforceInactivePrivilegedAccounts SalesforceSystemAdmins SalesforcePrivilegedUsersFromLowReputationDomains SalesforceGhostAdmins SalesforceUsersWithCreatePublicLinks SalesforceWeakerProfilePasswordSettings SalesforceExternalUserObjectAccess SalesforceUsersWaivedMFA SalesforceGuestUserObjectAccess SalesforceUsersNoMFA SalesforceIntegrationUsersWithSysAdminProfile SalesforceRiskyGuestUsers SalesforceFieldLevelAccessForEncryptedData SalesforceWeakerProfileSessionSettings SalesforceFieldLevelAccessForComplianceData SalesforceAppsExcessivePermissions Additional updates will be provided via this posting as our investigation progresses and the issue is mitigated.

Subset of Salesforce posture rule unexpectedly changed to passing

Aug <var data-var='date'> 7</var>, <var data-var='time'>09:22</var> PDT Resolved - This incident has been resolved. Fixes addressing UI visibility for threat alerts and historical activity data have each been deployed, and post fix validation confirms each to have been fully mitigated. Aug <var data-var='date'> 6</var>, <var data-var='time'>16:07</var> PDT Update - The scope of impact for this issue has been updated: A fix for the issue resulting in threat alerts not being visible within the administrator UI threat module has been deployed and verified. During the process of development and deployment, it was additionally found that for a subset for customers within our US environment, a subset of historical activity is not visible within the activity module. The impact of this secondary issue is isolated solely to the ability for the underlying data to be displayed within the UI, with no interruption to threat detections or action policies. A fix for this secondary issue is being prepared and tested, and further updates will be provided once it has been fully deployed and issue mitigation validated. Aug <var data-var='date'> 6</var>, <var data-var='time'>12:53</var> PDT Identified - We have identified the cause of the underlying issue resulting in alerts not being visible within the administrator UI threat module, and are currently implementing a fix. Further updates will be provided once the fix has been fully deployed and issue mitigation validated. Aug <var data-var='date'> 6</var>, <var data-var='time'>07:48</var> PDT Investigating - We are are currently investigating an issue resulting in threat alerts not being visible within the administrator UI threat module. Our teams are actively working to resolve the issue, and we'll provide updates on this incident as they become available.

Threat alerts and a subset of historical activity not visible within administrator UI

Jul <var data-var='date'>18</var>, <var data-var='time'>14:31</var> PDT Resolved - This incident has been resolved. Actions to mitigate the conditions resulting in lag on streaming detections within the US environment have been taken and telemetry has confirmed the issue to been fully mitigated. Jul <var data-var='date'>17</var>, <var data-var='time'>12:13</var> PDT Investigating - Our monitoring has identified an issue within our US environment resulting in increased lag on streaming detections for a subset of customers. While no direct impact has been identified at this time, there is the possibility that alerts resulting from detections designated as streaming might be delayed as time progresses. We will post additional updates as we continue our investigation and mitigation efforts.

Increased Streaming Detection Lag and Potential Threat Alert Generation Delay

Jul <var data-var='date'>15</var>, <var data-var='time'>06:08</var> PDT Resolved - Obsidian periodically reviews and updates its data sub-processor list to ensure that we work with trusted partners who share our commitment to data security and privacy. These sub-processors play a crucial role in providing our services to you, and we take their selection very seriously. We are pleased to inform you that we have made some updates to our data sub-processor list, which will come into effect on August 14th, 2025. These updates have been carefully considered to enhance the security and efficiency of our services. We are adding the following data sub-processor: Vendor Name - Catalyst Data Processing Location - United States Data Processed - Customer contact information, metadata, usage and activity data related to your use of our services Please contact security@obsidiansecurity.com on or before August 14th, 2025 for raising any objections to this change. Please note that if we do not receive any objections within the specified period, we will consider your consent to the updated data sub-processor list as implied. If you have any questions or require additional information about the changes to our data sub-processor list, please do not hesitate to contact us on the same email address above. Thank you for your continued trust and partnership with Obsidian Security. We remain dedicated to safeguarding your data and providing you with the highest level of service

[System Notice] Data Sub-Processor Change/Update

Jul <var data-var='date'> 8</var>, <var data-var='time'>08:16</var> PDT Resolved - This incident has been resolved. We have identified the root cause of the issue resulting in a "No Routes" error being encountered when attempting to onboard oAuth based connections. A fix has now been deployed to all environments, and post fix validation and telemetry have confirmed the issue has been fully mitigated. If you encounter any further issues, please reach out to our support team. Jul <var data-var='date'> 8</var>, <var data-var='time'>07:30</var> PDT Investigating - We are currently investigating an issue resulting in a "No Routes" error message being encountered when attempting to onboard connections leveraging oAuth authentication. Examples of such connections include Microsoft Graph and Slack. Additional updates will be provided via this posting as our investigation progresses and the issue is mitigated.

No Routes error message encountered when onboarding oAuth based connections

Jul <var data-var='date'> 1</var>, <var data-var='time'>08:00</var> PDT Resolved - This incident has been resolved. Jul <var data-var='date'> 1</var>, <var data-var='time'>07:59</var> PDT Update - This issue has been resolved. A permanent fix addressing the underlying issue was implemented, and on-going monitoring has shown no further outbound notification / action delays following deployment of the fix. Jun <var data-var='date'>23</var>, <var data-var='time'>15:05</var> PDT Identified - Our monitoring identified an issue within our action policy framework that could have resulted in outbound notifications / actions to have not intermittently triggered on time for a subset of generated alerts starting June 17th 2025. We have put in measures to mitigate the impact and are monitoring closely. As a result of these measures, the missed notifications/actions are going to be retroactively generated, which may present itself as a delayed notification / action. Please reach out to our support team should you have additional questions

Intermittent Delays In Outbound Alert Notifications

Jun <var data-var='date'>14</var>, <var data-var='time'>01:00</var> PDT Completed - The scheduled maintenance has been completed. Jun <var data-var='date'>13</var>, <var data-var='time'>21:00</var> PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jun <var data-var='date'> 6</var>, <var data-var='time'>14:01</var> PDT Scheduled - We will be undergoing scheduled maintenance during this time.

Jun <var data-var='date'>12</var>, <var data-var='time'>05:32</var> PDT Resolved - This incident has been resolved. Jun <var data-var='date'>12</var>, <var data-var='time'>05:31</var> PDT Update - This issue has been resolved. A fix addressing the underlying issue was implemented and streaming alert generation has returned to normal. Jun <var data-var='date'>11</var>, <var data-var='time'>11:52</var> PDT Update - We have further scoped the identified issue with one of the underlying components responsible for alert generation, and for the subset of potentially impacted customers found that any alert generation delay will be limited to those alerts designated as "Streaming" within the threat catalog. We will post additional updates as we continue our investigation. Jun <var data-var='date'>11</var>, <var data-var='time'>11:21</var> PDT Identified - Our monitoring has identified a potential issue with one of the underlying components responsible for alert generation. Although we have not identified a direct impact at this time, for a subset of customers, there is a possibility that alerts generated might be delayed as time progresses. We will post additional updates as we continue our investigation.

Potential Threat Alert Generation Delay

Jun <var data-var='date'> 5</var>, <var data-var='time'>10:00</var> PDT Completed - The scheduled maintenance has been completed. Jun <var data-var='date'> 5</var>, <var data-var='time'>08:00</var> PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. May <var data-var='date'>30</var>, <var data-var='time'>08:56</var> PDT Scheduled - We will be undergoing scheduled maintenance during this time.

Jun <var data-var='date'> 3</var>, <var data-var='time'>10:03</var> PDT Resolved - This incident has been resolved. All activity event processing and alerting queues have returned to normalized levels. If you encounter any further issues, please reach out to our support team. Jun <var data-var='date'> 2</var>, <var data-var='time'>06:35</var> PDT Monitoring - We have identified and resolved an issue that resulted in delayed event population for Microsoft connections between 5/30/2025 4:00 pm PDT and 6/1/2025 9:30 pm PDT. As a result of the delay in event collection, customers may additionally observe a delay in threat alert triggering during the impact window for Microsoft connections.

Delayed Activity Collection and Threat alerting for Microsoft Connections

Jun <var data-var='date'> 1</var>, <var data-var='time'>16:00</var> PDT Completed - The scheduled maintenance has been completed. Jun <var data-var='date'> 1</var>, <var data-var='time'>14:00</var> PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jun <var data-var='date'> 1</var>, <var data-var='time'>03:43</var> PDT Update - We will be undergoing scheduled maintenance during this time. Jun <var data-var='date'> 1</var>, <var data-var='time'>03:34</var> PDT Update - We will be undergoing scheduled maintenance during this time. Jun <var data-var='date'> 1</var>, <var data-var='time'>03:24</var> PDT Scheduled - We will be undergoing scheduled maintenance during this time.

Infrastructure Component Upgrade in EU Region

May <var data-var='date'>12</var>, <var data-var='time'>21:00</var> PDT Update - Verification is currently underway for the maintenance items. May <var data-var='date'>12</var>, <var data-var='time'>21:00</var> PDT Completed - The scheduled maintenance has been completed. May <var data-var='date'>12</var>, <var data-var='time'>18:00</var> PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. May <var data-var='date'>12</var>, <var data-var='time'>18:00</var> PDT Scheduled - We will be performing emergency maintenance to back end infrastructure components to address a recently discovered issue that could potentially cause data loss.

Is Obsidian Security down?

Obsidian Security status is UP

Lastest published events

Subset of Detections Delayed

Subset of detections delayed

Not Found ( HTTP-404) Errors when attempting to access Obsidian Environment

Obsidian Security Services, Components and Regions

Recent Obsidian Security events

Subset of Detections Delayed

Subset of detections delayed

Not Found ( HTTP-404) Errors when attempting to access Obsidian Environment

Activity timeline delay

Infrastructure component upgrade for AU region

Intermittent failures when loading Obsidian admin console

Get your FREE account now,
5 monitors included!

Is Obsidian Security down?

Obsidian Security status is UP

Lastest published events

Subset of Detections Delayed

Subset of detections delayed

Not Found ( HTTP-404) Errors when attempting to access Obsidian Environment

Obsidian Security Services, Components and Regions

Recent Obsidian Security events

Subset of Detections Delayed

Subset of detections delayed

Not Found ( HTTP-404) Errors when attempting to access Obsidian Environment

Activity timeline delay

Infrastructure component upgrade for AU region

Intermittent failures when loading Obsidian admin console

Get your FREE account now,5 monitors included!

Get your FREE account now,
5 monitors included!