Tracked subprocessors 10 of 12 Subprocessor of 0 Third parties loaded 3 Loaded by 0
+ − ⟲
Not listed by any tracked vendor.
Not loaded by any published homepage.
12 third parties.
Name Purpose Location Listed since AWS Hosting and storage systems provider. Sep 27, 2026 Cloudflare Content distribution, security, abuse prevention and DNS services. Sep 27, 2026 Dagger Build logs and tracing. Sep 27, 2026 Front Customer support communications. Sep 27, 2026 Google Email and documentation storage. Sep 27, 2026 Grammarly, Inc. Grammar checker. Sep 27, 2026 PayPal Payment processor; access and storage of personal data as directed by the user. Sep 27, 2026 Sentry Error tracking. Sep 27, 2026 Stripe Payment card processor; access and storage of personal data as directed by the user. Sep 27, 2026 Synadia Hosted NATS for regional message/events. Sep 27, 2026 Terraform Infrastructure as Code. Sep 27, 2026 Typeform Partner applications. Sep 27, 2026
Craft CMS's homepage made 53 requests to 6 domains, and 3 services controlled by another company.
Other (3): Geolocation: MaxMind; Issue trackers: Better Stack; reviewed as Video players: Vimeo 3 third parties by category: 3
Third parties 3 · 26 requests
Vimeo vimeocdn.com, vimeo.com 40% of the page's requests 21 MaxMind MaxMind 4% of the page's requests 2
First party 1 · 27 requests
Craft CMS Cloudflare Craft CMS Flickity HSTS HTTP/3 LazySizes Open Graph PHP PWA Prism RSS SEOmatic Vimeo Yii jQuery 3.6.0 51% of the page's requests 27
2 tracked companies loaded by the homepage are not in Craft CMS's subprocessor list. A website can use a service without it processing customer data.
What public security catalogs list for Craft CMS, in their words.
Known exploited vulnerabilities 4 vulnerabilities in Craft CMS's software that CISA lists as exploited in the wild.
CVE Product Vulnerability Listed CVE-2025-32432 Craft CMS Craft CMS Code Injection Vulnerability Mar 20, 2026 CVE-2024-56145 Craft CMS Craft CMS Code Injection Vulnerability Jun 2, 2025 CVE-2025-35939 Craft CMS Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability Jun 2, 2025 CVE-2025-23209 Craft CMS Craft CMS Code Injection Vulnerability Feb 20, 2025
Source: CISA Known Exploited Vulnerabilities catalog (evidence )
Aug 15: no incident reported Aug 16: no incident reported Aug 17: 1 incident (1 minor) Aug 18: 1 incident (1 minor) Aug 19: no incident reported Aug 20: no incident reported Aug 21: no incident reported Aug 22: no incident reported Aug 23: no incident reported Aug 24: no incident reported Aug 25: no incident reported Aug 26: no incident reported Aug 27: no incident reported Aug 28: no incident reported Aug 29: no incident reported Aug 30: no incident reported Aug 31: no incident reported Sep 1: no incident reported Sep 2: no incident reported Sep 3: no incident reported Sep 4: 1 incident (1 no impact stated) Sep 5: no incident reported Sep 6: no incident reported Sep 7: no incident reported Sep 8: no incident reported Sep 9: 1 incident (1 major) Sep 10: no incident reported Sep 11: no incident reported Sep 12: no incident reported Sep 13: no incident reported Sep 14: no incident reported Sep 15: no incident reported Sep 16: no incident reported Sep 17: no incident reported Sep 18: no incident reported Sep 19: no incident reported Sep 20: no incident reported Sep 21: no incident reported Sep 22: no incident reported Sep 23: no incident reported Sep 24: no incident reported Sep 25: no incident reported Sep 26: no incident reported Sep 27: no incident reported Sep 28: no incident reported Sep 29: no incident reported Sep 30: no incident reported Oct 1: no incident reported Oct 2: no incident reported Oct 3: no incident reported Oct 4: no incident reported Oct 5: no incident reported Oct 6: no incident reported Oct 7: no incident reported Oct 8: no incident reported Oct 9: no incident reported Oct 10: no incident reported Oct 11: no incident reported Oct 12: no incident reported Oct 13: no incident reported Oct 14: no incident reported Oct 15: no incident reported Oct 16: no incident reported Oct 17: no incident reported Oct 18: no incident reported Oct 19: no incident reported Oct 20: no incident reported Oct 21: 1 incident (1 major) Oct 22: no incident reported Oct 23: 1 incident (1 major) Oct 24: no incident reported Oct 25: no incident reported Oct 26: no incident reported Oct 27: no incident reported Oct 28: no incident reported Oct 29: no incident reported Oct 30: no incident reported Oct 31: no incident reported Nov 1: no incident reported Nov 2: no incident reported Nov 3: no incident reported Nov 4: no incident reported Nov 5: no incident reported Nov 6: no incident reported Nov 7: no incident reported Nov 8: no incident reported Nov 9: no incident reported Nov 10: 1 incident (1 major) Nov 11: no incident reported Nov 12: no incident reported 90 days ago today
7 incidents in 90 days4 major or critical7 min typical time to resolve7 min longest majorBegan Incident Impact Lasted Nov 10, 2026 Spoke & Chain is down major 7 min Oct 23, 2026 console.craftcms.com is down major 7 min Oct 21, 2026 api.craftcms.com and plugins.craftcms.com are down major 7 min Sep 9, 2026 Craft Documentation is down major 7 min Sep 4, 2026 Random build failures across all regions no impact stated — Aug 18, 2026 Intermittent 404s minor 23 min Aug 17, 2026 GitHub Service Disruption minor 5 h 53 min Jul 24, 2026 api.craftcms.com, console.craftcms.com, and 3 other services are down major 15 min
Incidents per month 0 2 4 Jul 2026: 3 incidents (2 major, 1 minor) · partial: our history begins Jul 6 · typical time to resolve 42 min Aug 2026: 2 incidents (2 minor) · typical time to resolve 5 h 53 min Sep 2026: 2 incidents (1 major, 1 no impact stated) · typical time to resolve 7 min Oct 2026: 2 incidents (2 major) · typical time to resolve 7 min Nov 2026: 1 incident (1 major) · typical time to resolve 7 min Jul 2026 Aug Sep Oct Nov critical major minor no impact stated before or partly before our history
Components affected Component Incidents Bar Builds 2 Craft Documentation 1 Spoke & Chain 1 Web 1 api.craftcms.com 1 console.craftcms.com 1 plugins.craftcms.com 1
As Craft CMS's status page reports its own incidents (scheduled maintenance left out), read every few hours since Jul 6, 2026 (evidence )
25 reported incidents in the last 30 days, by 4 of the vendors Craft CMS lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Craft CMS was involved.
Date Company Incident Impact Lasted Nov 11, 2026 US issues feed throwing intermittent errors minor 51 min Nov 11, 2026 Account emails not being delivered major 42 min Nov 10, 2026 EU region replay ingestion latency minor 48 min Nov 10, 2026 Front mobile SSO login degraded major 4 h 21 min Nov 4, 2026 Ingestion delays across all data minor 1 h 10 min Nov 4, 2026 [us-west-1] High API latency currently causing delays minor 1 h 25 min Nov 3, 2026 Delays in spans and transactions processing major 1 h 45 min Nov 3, 2026 Sentry.io dashboard and API is down critical 1 h 32 min Nov 2, 2026 Sentry dashboard is down critical 4 h 21 min Nov 1, 2026 Elevated Instant Payouts failures no impact stated 2 h 5 min Oct 28, 2026 Elevated Issuing errors from 17:13 - 20:41 UTC minor 4 h 36 min Oct 24, 2026 Elevated Blik errors no impact stated 1 h Oct 22, 2026 Elevated Bancontact errors no impact stated 3 h 35 min Oct 22, 2026 Elevated Bancontact errors no impact stated 2 h 25 min Oct 21, 2026 Increased latency processing integration webhooks minor 20 min Oct 21, 2026 Sentry.io not loading in US region critical 59 min Oct 20, 2026 Sentry.io not loading major 3 h 17 min Oct 20, 2026 Issues with Superhuman Go not loading or showing error messages major 2 h 15 min Oct 20, 2026 Spike in cancellations and expired errors with PayByBank payments no impact stated 2 h 17 min Oct 20, 2026 Elevated Revolut Pay errors no impact stated 9 h 32 min Oct 19, 2026 Sentry is down critical 53 min Oct 15, 2026 Elevated declines on Mastercard no impact stated 2 h 18 min Oct 15, 2026 Elevated declines on Visa no impact stated 53 min Oct 15, 2026 Elevated Amazon Pay errors no impact stated 12 min Oct 14, 2026 Ingestion Halted for EAP data in EU major 2 h 33 min
Who is around them .
See the list as we read it on any date: Time machine
None since tracking began.
Craft CMS