Cloudflare CEO Details What Led to the Massive global Outage | Find a Way

Cloudflare CEO details what led to the massive global outage

The company had detailed what happened in a new blog post.

By 

Matthews Martins

 on November 19, 2025

Credit: Algi Febri Sugita / SOPA Images / LightRocket via Getty Images

A Cloudflare outage took out a large swathe of the internet on Tuesday, with users unable to access numerous sites and services such as X, ChatGPT, Spotify, YouTube, and Uber. The cybersecurity company has now published a blog post detailing exactly what happened.

SEE ALSO:Why does the internet keep crashing so often? First Google Cloud, then AWS, now Cloudflare.

Cloudflare co-founder and CEO Matthew Prince apologised in the post late Tuesday, stating that this outage was the worst the company has experienced since 2019.

"[I]n the last 6+ years we've not had another outage that has caused the majority of core traffic to stop flowing through our network," said Prince. "On behalf of the entire team at Cloudflare, I would like to apologize for the pain we caused the Internet today."

Recommended Deals For You

Apple AirPods Pro 3 Noise Cancelling Heart Rate Wireless Earbuds — $219.99 (List Price $249.00)

Apple iPad 11" 128GB Wi-Fi Retina Tablet (Blue, 2025 Release) — $279.00 (List Price $349.00)

Amazon Fire HD 10 32GB Tablet (2023 Release, Black) — $69.99 (List Price $139.99)

Sony WH-1000XM5 Wireless Noise Canceling Headphones — $248.00 (List Price $399.99)

Blink Outdoor 4 1080p Security Camera (5-Pack) — $159.99 (List Price $399.99)

Fire TV Stick 4K Streaming Device With Remote (2023 Model) — $24.99 (List Price $49.99)

Bose Quiet Comfort Ultra Wireless Noise Cancelling Headphones — $298.00 (List Price $429.00)

Shark AV2511AE AI Robot Vacuum With XL Self-Empty Base — $249.99 (List Price $599.00)

Apple Watch Series 11 (GPS, 42mm, S/M Black Sport Band) — $349.99 (List Price $399.00)

WD Elements 14TB Desktop External USB 3.0 Hard Drive — $169.99 (List Price $279.99)

Products available for purchase through affiliate links. If you buy something through links on our site, Mashable may earn an affiliate commission.

Prince explained that the Cloudflare outage had been caused by an issue with the system it uses to protect websites from DDoS attacks.

Cloudflare's outage, explained

Cloudflare's Bot Management system is a service which protects websites against malicious bot attacks. These include DDoS attacks that flood websites with excessive traffic, content scraping attacks which gather data from websites without authorisation, and autonomous credential stuffing attacks which try to gain access to websites by using leaked login details from other sites.

Mashable Light Speed

Want more out-of-this world tech, space and science stories?

Sign up for Mashable's weekly Light Speed newsletter.

By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.

This Bot Management system includes an AI model which scores traffic requests. Whenever there's an attempt to access a website protected by Cloudflare's Bot Management, the AI generates a score to determine if it's likely to have been from a bot. In order to do so, the AI considers various features of the request, which are held in a "feature file."

The feature file is where the issue occurred. This file refreshes every five minutes to keep up to date with evolving bot behaviours, and is used across Cloudflare's entire cybersecurity network. However, the company implemented a change to the underlying query that generated the file, which caused it to duplicate information a large number of times. This made the feature file larger than typical, triggering an error in the Bot Management system.

As a result, attempting to access websites which use Cloudflare's Bot Management system resulted in an error code. Cloudflare states that its network began experiencing significant failures about 15 minutes after the feature file generation update was implemented.

Cloudflare initially suspected the outage was a malicious attack, particularly as its status page went down despite being independent from the company's infrastructure. However, Prince stated that this turned out to be a coincidence.

---

Related Stories

---

• Cloudflare CTO apologizes to the internet as a whole after global outage
• Cloudflare down: What we know about the outage so far
• Cloudflare outage cause revealed: This is what happened.
• What is Cloudflare?
• Cloudflare outage list: X, OpenAI, Canva, Spotify, more impacted

"The issue was not caused, directly or indirectly, by a cyber attack or malicious activity of any kind," Prince stressed. "After we initially wrongly suspected the symptoms we were seeing were caused by a hyper-scale DDoS attack, we correctly identified the core issue and were able to stop the propagation of the larger-than-expected feature file and replace it with an earlier version of the file."

When previously reached by Mashable prior to the blog post, a Cloudflare spokesperson also emphasised that "there [was] no evidence that [the outage] was the result of an attack or caused by malicious activity."

Cloudflare's services were largely restored within three hours, and fully restored after approximately five hours. Prince stated that the company is already planning measures to prevent similar outages in the future, including stopping error reports from being able to overwhelm its systems.

Topics Apps & Software