Duo Security

duo.com · Part of Cisco

Duo Security declares 13 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and Salesforce. No published changes since we first read it on Nov 7, 2026. 7 tracked vendors name Duo Security as a subprocessor, including Aha Labs, EasyPost and Claranet.

Documents marked from Cisco are Cisco's.

Subprocessors CSV of Duo Security's subprocessors · Atom feed of Duo Security's subprocessors DORA draft CSV of Duo Security's subprocessors as declared by Duo Security what's this? · 

13 third parties.

NamePurposeLocationListed since
Amplitude Analyze feature usage and product functionalityUS (Virginia, Ohio, Oregon, California)
AWS Cloud based infrastructure and hosting, analytics, data storageUS (California, Oregon), Canada, Ireland, Germany, Australia, Japan, Singapore, the United Kingdom, India, and the UAE; US (Ohio), Germany, UK, Australia, and Japan
Bandwidth Inc. Telephone and SMS for authenticationUS (California, Oregon, Virginia)
Clickatell, Inc. Telephone and SMS for authenticationUS (California, Oregon, Virginia)
Datadog Data Storage and analyticsUS (Virginia)
Google Push notifications for authenticationUS (California, Nevada, Ohio, Virignia), Ireland
Marketo Automated account managementUS (California, Virginia)
Mulesoft Assist with Salesforce integrationUS (California, Oregon, Virginia)
Nexmo Inc. Telephone and SMS for authenticationUS (California, Oregon, Virginia)
Salesforce Deliver, support, and improve the servicesUS (Arizona, Texas)
Sentry Error ReportingUS (Iowa)
Snowflake Analytics and data storage; Data Storage and analyticsCo-located with AWS account US (Virginia); US (Virginia)
Twilio, Inc. Telephone and SMS for authenticationUS (Oregon, Virginia)

Web TechnologiesCSV of Duo Security's web technologies · Atom feed of Duo Security's web technologies

Duo Security's homepage made 282 requests to 48 domains, 28 services controlled by another company, and 4 domains not identified.

Advertising (9): Google Cloud, The Trade Desk, Inc., Microsoft, Metadata, Reddit, Inc., Spotify AB; usually detected as Advertising: Xandr, Magnite, Inc., X Corp.Analytics (8): Adobe, Contentsquare, TikTok, LinkedIn, Meta, ZoomInfo, Cloudflare, TikTokTag managers (1): TealiumMarketing automation (1): 6Sense Insights, Inc.Live chat (1): Qualified.com, Inc.A/B Testing (1): OptimizelyCookie compliance (1): OneTrustOther (5): Documentation: TechTarget, Inc.; Geolocation: ipify; usually detected as Issue trackers: Sentry; reviewed as Miscellaneous: Yahoo; Video players: WistiaUnclassified (1): no technology detected from them: Oracle

28 third parties by category: Advertising 9Analytics 8Tag managers 1Marketing automation 1Live chat 1A/B Testing 1Cookie compliance 1Other 5Unclassified 1

Third parties 28 · 216 requests
Qualified.com, Inc. Qualified 14% of the page's requests 40
Google Cloudsubprocessor DoubleClick Floodlight Google Analytics Google Tag Manager 10% of the page's requests 29
Tealium Tealium 10% of the page's requests 28
6Sense Insights, Inc. 6sense 6% of the page's requests 17
Wistia Wistia 5% of the page's requests 15
OneTrust OneTrust 4% of the page's requests 11
Adobe Adobe Marketo Measure 4% of the page's requests 10
The Trade Desk, Inc. theTradeDesk 3% of the page's requests 9
Contentsquare Contentsquare 3% of the page's requests 8
Microsoft Microsoft Advertising 2% of the page's requests 7
TikTok TikTok Pixel 2% of the page's requests 6
Metadata Metadata.io 1% of the page's requests 4
Oracle eloqua.com, en25.com 1% of the page's requests 4
LinkedIn Linkedin Insight Tag 1% of the page's requests 3
Meta Facebook Pixel 2.9.438 1% of the page's requests 3
Optimizely Optimizely 1% of the page's requests 3
Reddit, Inc. Reddit Ads 1% of the page's requests 3
Spotify AB Spotify Pixel 1% of the page's requests 3
ZoomInfo Zoominfo 1% of the page's requests 3
Xandr adnxs.com <1% of the page's requests 2
Cloudflare Cloudflare Browser Insights <1% of the page's requests 1
Magnite, Inc. rubiconproject.com <1% of the page's requests 1
Sentrysubprocessor sentry.io <1% of the page's requests 1
TechTarget, Inc. TechTarget <1% of the page's requests 1
TikTok TikTok Pixel <1% of the page's requests 1
X Corp. twitter.com <1% of the page's requests 1
Yahoo yahoo.com <1% of the page's requests 1
ipify ipify <1% of the page's requests 1
Affiliates 1 · 12 requests
Cisco cisco.com 4% of the page's requests 12
Unknown 4 · 4 requests

d1il5533o350rp.cloudfront.netkrxd.netqscripts.s3.amazonaws.comquorum.works

First party 1 · 50 requests
Duo Security Adobe Analytics Adobe Audience Manager Adobe Experience Platform Identity Service Amazon CloudFront Amazon Web Services Eloqua HSTS LottieFiles 5.13.0 Open Graph Priority Hints Sentry core-js 3.32.2 jQuery 3.7.1 jQuery UI 1.14.1 18% of the page's requests 50

14 tracked companies loaded by the homepage are not in Duo Security's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (7)CSV of the companies listing Duo Security · Atom feed of the companies listing Duo Security

7 companies
  • Aha Labs aha.io
  • Bluebeam bluebeam.com Multi‑factor authentication service for user access to Bluebeam systems.
  • Claranet claranet.co.uk Multi-factor-authentication (MFA)
  • EasyPost easypost.com Security Software
  • HorizonIQ horizoniq.com Duo Security is a vendor of cloud-based, two-factor authentication services.
  • Lightedge lightedge.com Products & Services – Security
  • Presidio presidio.com Multi-Factor Authentication

Service statusCSV of Duo Security's status page incidents · Atom feed of Duo Security's status page incidents

Aug 15: no incident reportedAug 16: no incident reportedAug 17: no incident reportedAug 18: no incident reportedAug 19: no incident reportedAug 20: no incident reportedAug 21: no incident reportedAug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: no incident reportedAug 26: no incident reportedAug 27: no incident reportedAug 28: no incident reportedAug 29: no incident reportedAug 30: no incident reportedAug 31: no incident reportedSep 1: no incident reportedSep 2: no incident reportedSep 3: 1 incident (1 minor)Sep 4: no incident reportedSep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: no incident reportedSep 9: no incident reportedSep 10: no incident reportedSep 11: no incident reportedSep 12: no incident reportedSep 13: no incident reportedSep 14: no incident reportedSep 15: no incident reportedSep 16: no incident reportedSep 17: no incident reportedSep 18: no incident reportedSep 19: no incident reportedSep 20: no incident reportedSep 21: no incident reportedSep 22: no incident reportedSep 23: no incident reportedSep 24: no incident reportedSep 25: no incident reportedSep 26: no incident reportedSep 27: no incident reportedSep 28: no incident reportedSep 29: no incident reportedSep 30: no incident reportedOct 1: no incident reportedOct 2: no incident reportedOct 3: no incident reportedOct 4: no incident reportedOct 5: no incident reportedOct 6: no incident reportedOct 7: no incident reportedOct 8: no incident reportedOct 9: no incident reportedOct 10: no incident reportedOct 11: no incident reportedOct 12: no incident reportedOct 13: no incident reportedOct 14: no incident reportedOct 15: no incident reportedOct 16: no incident reportedOct 17: no incident reportedOct 18: no incident reportedOct 19: no incident reportedOct 20: no incident reportedOct 21: no incident reportedOct 22: no incident reportedOct 23: no incident reportedOct 24: no incident reportedOct 25: no incident reportedOct 26: no incident reportedOct 27: no incident reportedOct 28: no incident reportedOct 29: no incident reportedOct 30: no incident reportedOct 31: no incident reportedNov 1: no incident reportedNov 2: no incident reportedNov 3: no incident reportedNov 4: no incident reportedNov 5: no incident reportedNov 6: no incident reportedNov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: no incident reportedNov 11: no incident reportedNov 12: no incident reported

90 days agotoday

  • 1 incident in 90 days
  • 0 major or critical
  • 1 h 19 min typical time to resolve
BeganIncidentImpactLasted
Duo - Partial Hardware Token Authentication Issues - United Statesminor1 h 19 min
New Signups Unavailableno impact stated2 h 12 min
Duo Phone Call Authentication Failures - United Statesminor2 h 54 min
VoIP and SMS Delivery Issues in Israelminor4 days
Duo - Phone call and SMS authentication issues - Australiaminor15 h 46 min
UAE Telephony SMS issueminor10 h 22 min
AI Assistant Service Disruption in US-W1minor1 h 17 min
All US Deployments: AI Assistant failuresminor1 h 53 min

Incidents per month

0 3 6 Dec 2025: 2 incidents (1 major, 1 no impact stated) · partial: our history begins Dec 1 · typical time to resolve 3 h 4 min Jan 2026: 3 incidents (1 major, 2 minor) · typical time to resolve 1 h 54 min Feb 2026: 6 incidents (5 minor, 1 no impact stated) · typical time to resolve 6 h 16 min Mar 2026: 4 incidents (1 critical, 1 minor, 2 no impact stated) · typical time to resolve 4 h 10 min Apr 2026: 3 incidents (2 major, 1 minor) · typical time to resolve 1 h 4 min May 2026: 3 incidents (3 minor) · typical time to resolve 2 h 41 min Jun 2026: 2 incidents (2 minor) · typical time to resolve 10 h 22 min Jul 2026: 2 incidents (2 minor) · typical time to resolve 4 days Aug 2026: 2 incidents (1 minor, 1 no impact stated) · typical time to resolve 2 h 54 min Sep 2026: 1 incident (1 minor) · typical time to resolve 1 h 19 min Oct 2026: 0 incidents Nov 2026: 0 incidents Dec 2025Jan 2026Feb Mar Apr May Jun Jul Aug Sep Oct Nov

critical major minor no impact stated before or partly before our history

Components affected

ComponentIncidentsBar
Core Authentication Service1

As Duo Security's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

Incidents reported by Duo Security's subprocessorsCSV of incidents reported by vendors Duo Security lists · Atom feed of incidents reported by vendors Duo Security lists

299 reported incidents in the last 30 days, by 6 of the vendors Duo Security lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that Duo Security was involved.

DateCompanyIncidentImpactLasted
SnowflakeINC20000347 minorongoing
TwilioMMS Delivery Failures from Twilio to GCI United States minor3 min
TwilioSMS Delivery Failures from Twilio 10DLC to AT&T United States minorongoing
TwilioSMS Delivery Failures from Twilio to Orange Sierra Leone minorongoing
TwilioSMS Delivery Failures From Long Code Numbers to AT&T in the US minor1 h 19 min
TwilioSMS Delivery Delays from Twilio to MTS Kazakhstan minorongoing
TwilioSMS Delivery Failures from a Subset of Twilio Phone Numbers to Tcell Tajikistan minorongoing
TwilioMMS Delivery Delays from a Subset of Twilio Long Codes to Multiple Small Networks in United States minorongoing
TwilioSMS Delivery Failures from a Subset of Twilio Phone Numbers to K-Cell Kazakhstan minorongoing
BandwidthJFK Calling Incident - Inbound/Outbound Calling minor2 h 19 min
SentryUS issues feed throwing intermittent errors minor51 min
TwilioVoice Call Failures in JP1 minor3 h 51 min
TwilioSMS Delivery Failures from Twilio to Turkcell Turkey minor3 h 54 min
SentryAccount emails not being delivered major42 min
TwilioRetroactive Incident Impacting Twilio Usage APIs no impact stated1 min
TwilioIssue resolved minor1 h 43 min
SentryEU region replay ingestion latency minor48 min
TwilioSMS Delivery Receipt Delays from Twilio Phone Numbers to Movistar Venezuela minor3 h 26 min
BandwidthBandwidth Local Market Impairment - 536 - Oklahoma City, OK critical8 h 57 min
BandwidthToll-Free Port Activation Delays minor23 h 57 min
BandwidthBandwidth Local Market Impairment - 532 - Wichita, KS no impact stated2 h 50 min
TwilioGateway API (Lookup API) Failure Increase on Verizon in United States minor10 h 23 min
TwilioWhatsApp Business API Message Send Failures minor16 h 29 min
TwilioVoice Call Failures from a Subset of Twilio Phone Numbers to Chile minor19 h 20 min
TwilioVoice Call Audio Quality Degradation, Silent and One-Way Audio between Twilio and Multiple Networks in United Kingdom minor5 h 18 min

And 274 more. All of them: CSV · Who is around them.

ChangesCSV of Duo Security's changes · Atom feed of Duo Security's changes

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for Duo Security's site

Duo Security transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/duo-security"><img src="https://thirdpartyindex.com/badge/duo-security.svg" alt="Duo Security transparency rating on Third Party Index" height="20"></a>
[![Duo Security transparency rating on Third Party Index](https://thirdpartyindex.com/badge/duo-security.svg)](https://thirdpartyindex.com/vendors/duo-security)