Fluid Attacks

fluidattacks.com

Fluid Attacks declares 22 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. No published changes since we first read it on Nov 6, 2026.

Subprocessors CSV · Atom DORA draft CSV what's this? · 

22 third parties.

NamePurposeLocationListed since
Amazon Web Services Cloud computing platform, offering fully featured services from data centers globally. It allows users to rent computing power, storage, and databases.; Cloud providerUSA
Anthropic AIAnthropic is an AI safety and research company founded in 2021 by former OpenAI employees to build reliable, interpretable, and steerable AI systems.; EngineeringUSA
Auth0
Auth0 is an Identity-as-a-Service (IDaaS) platform providing authentication and authorization services. It acts as a subprocessor to manage user identity, secure logins, and token-based access control, storing user profiles and credentials.; Identity provider
USA
Cloudflare
Cloud monitoring; Cloudflare is our SaaS provider for some infrastructure solutions like DNSSEC, DDoS Protection, Rate limiting, Auto-Renewable SSL certificates, Content delivery network, Web Application Firewall, Anti-bot capabilities, among others.
USA
Datadog
Cloud monitoring; Datadog is a cloud-based monitoring and analytics platform that provides comprehensive observability for applications, infrastructure, and logs. It helps organizations track performance metrics, detect issues, and troubleshoot problems across their entire technology stack through real-time dashboards, alerting, and automated monitoring capabilities.
USA
dbt Labs Data analytics; dbt allows you to test business logic, ensuring data quality, and fix issues proactively before they impact your business.USA
Deepinfra Deepinfra is a serverless AI inference cloud that provides high-performance, cost-effective API access to run and scale open-source machine learning models.; OtherUSA
GitLab
Gitlab is the platform we use for developing our software. It provides essential services like Git repositories, Merge requests, Development planning, CI/CD, among many others.; Version control
USA
Google Drive Document management; Google Drive allows to upload, submit, store, send and receive content.USA
Google Workspace Google Workspace is a collection of cloud computing, productivity and collaboration tools, software and products.; Identity providerUSA
Kandji
Endpoint Secure Management; Iru is the AI-powered platform that unifies identity & access, endpoint security & management, and compliance automation to give IT & security time and control back.
USA
Kiflo
Kiflo is a modern, cloud-based Partner Relationship Management (PRM) software designed for businesses to recruit, onboard, manage, and reward partners (affiliates, resellers, and referrals)
Partner Relationship Management (PRM)
Okta Identity provider; Okta is the IAM platform we use for managing access to hundreds of applications used across our company.USA
OpenAI AIEngineering; Generative AI servicesUSA
Refiner
Customer feedback and survey platform; Run highly customizable microsurvey campaigns with advanced user targeting for segmented & specific insights. Achieve high response rates, discover invaluable user feedback, and make winning product decisions with a dedicated in-app survey software.
FR
rudol It acts as a bridge between technical data assets and business users, aiming to reduce data downtime and prevent issues before they impact end-users.Rudol.ai is an end-to-end, AI-driven data quality and governance platform designed to help organizations discover, monitor, and trust their data.
Snowflake Database for analytical purposesUSA
Vanta Continuous security and compliance monitoring; SecurityUSA
Voyage AI
Voyage AI delivers state-of-the-art embedding and reranking models that supercharge intelligent retrieval for enterprises, driving forward retrieval-augmented generation (RAG) and reliable LLM applications.
USA
Zoho Cloud Software Suite for Businesses; ITUSA
Zoho Desk
Zoho Desk collates interactions from various media (email, phone, chat, social media, a self-service portal, forums and forms) and presents them in one place. Tasks such as ticket assignment, service escalations, notification rules and time-based actions can be automated by setting workflow rules.
USA
Zoho People Cloud-based Human Resource Management System (HRMS) designed to automate HR processes and manage the entire employee lifecycle—from onboarding to exit.USA

Web TechnologiesCSV · Atom

Fluid Attacks's homepage made 350 requests to 11 domains, and 5 services controlled by another company.

Advertising (1): Google CloudAnalytics (1): CloudflareCookie compliance (1): CookiebotOther (2): reviewed as Digital asset management: Cloudinary; Page builders: Framer

5 third parties by category: Advertising 1Analytics 1Cookie compliance 1Other 2

Third parties 5 · 346 requests
Framer Framer Sites 69% of the page's requests 240
Google Cloudsubprocessor DoubleClick Floodlight Google Analytics Google Tag Manager 24% of the page's requests 83
Cloudinary cloudinary.com 4% of the page's requests 15
Cookiebot Cookiebot 1 1% of the page's requests 5
Cloudflaresubprocessor Cloudflare Browser Insights <1% of the page's requests 3
First party 1 · 4 requests
Fluid Attacks Cloudflare Cloudinary Cybot Framer Motion Google Font API HSTS HTTP/3 Open Graph Priority Hints React 1% of the page's requests 4

3 tracked companies loaded by the homepage are not in Fluid Attacks's subprocessor list. A website can use a service without it processing customer data.

ComplianceCSV · Atom

Certified
Says it complies with

Certifications as Fluid Attacks's trust center lists them; reports are usually shared on request (evidence)

Service statusCSV · Atom

Aug 14: no incident reportedAug 15: no incident reportedAug 16: 1 incident (1 no impact stated)Aug 17: no incident reportedAug 18: 1 incident (1 no impact stated)Aug 19: no incident reportedAug 20: no incident reportedAug 21: no incident reportedAug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: 1 incident (1 no impact stated)Aug 26: no incident reportedAug 27: no incident reportedAug 28: no incident reportedAug 29: no incident reportedAug 30: no incident reportedAug 31: no incident reportedSep 1: no incident reportedSep 2: no incident reportedSep 3: no incident reportedSep 4: no incident reportedSep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: no incident reportedSep 9: no incident reportedSep 10: no incident reportedSep 11: no incident reportedSep 12: no incident reportedSep 13: no incident reportedSep 14: no incident reportedSep 15: no incident reportedSep 16: no incident reportedSep 17: no incident reportedSep 18: no incident reportedSep 19: no incident reportedSep 20: no incident reportedSep 21: no incident reportedSep 22: no incident reportedSep 23: no incident reportedSep 24: no incident reportedSep 25: no incident reportedSep 26: no incident reportedSep 27: no incident reportedSep 28: no incident reportedSep 29: no incident reportedSep 30: no incident reportedOct 1: no incident reportedOct 2: no incident reportedOct 3: no incident reportedOct 4: no incident reportedOct 5: no incident reportedOct 6: no incident reportedOct 7: no incident reportedOct 8: no incident reportedOct 9: no incident reportedOct 10: no incident reportedOct 11: no incident reportedOct 12: no incident reportedOct 13: no incident reportedOct 14: no incident reportedOct 15: no incident reportedOct 16: no incident reportedOct 17: no incident reportedOct 18: no incident reportedOct 19: no incident reportedOct 20: no incident reportedOct 21: no incident reportedOct 22: no incident reportedOct 23: no incident reportedOct 24: no incident reportedOct 25: no incident reportedOct 26: 1 incident (1 critical)Oct 27: no incident reportedOct 28: no incident reportedOct 29: no incident reportedOct 30: no incident reportedOct 31: no incident reportedNov 1: no incident reportedNov 2: no incident reportedNov 3: 1 incident (1 major)Nov 4: no incident reportedNov 5: no incident reportedNov 6: no incident reportedNov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: no incident reportedNov 11: no incident reported

90 days agotoday

  • 6 incidents in 90 days
  • 2 major or critical
  • 24 h 32 min typical time to resolve
  • 24 h 32 min longest major
BeganIncidentImpactLasted
Degraded service availabilityminor2 days
Bitbucket Repository Cloning and OAuth Connection Unavailablemajor24 h 32 min
MCP Server, AI Chat and PR Assistant Unavailablecritical2 h 28 min
API has failedno impact stated8 h 22 min
Automated Cloning, Reattack and SBOM Flows Failingno impact stated—
API has failedno impact stated47 h 57 min
Cloning Failures for Repositories Using ZTNA or Egress Connectivityno impact stated—
Analytics Charts Showing Outdated Datano impact stated26 h 17 min

Incidents per month

0 3 6 Dec 2025: 2 incidents (1 major, 1 no impact stated) · partial: our history begins Dec 1 · typical time to resolve 2 h 3 min Jan 2026: 2 incidents (2 no impact stated) · typical time to resolve 2 days Feb 2026: 3 incidents (1 major, 1 minor, 1 no impact stated) · typical time to resolve 33 min Mar 2026: 5 incidents (2 critical, 1 major, 2 no impact stated) · typical time to resolve 2 h 47 min Apr 2026: 2 incidents (2 no impact stated) May 2026: 6 incidents (2 minor, 4 no impact stated) · typical time to resolve 1 h 17 min Jun 2026: 0 incidents Jul 2026: 2 incidents (1 minor, 1 no impact stated) · typical time to resolve 26 h 17 min Aug 2026: 4 incidents (4 no impact stated) · typical time to resolve 47 h 57 min Sep 2026: 0 incidents Oct 2026: 1 incident (1 critical) · typical time to resolve 2 h 28 min Nov 2026: 1 incident (1 major) · typical time to resolve 24 h 32 min Dec 2025Jan 2026Feb Mar Apr May Jun Jul Aug Sep Oct Nov

critical major minor no impact stated before or partly before our history

Components affected

ComponentIncidents
API1
Cloning1
Platform1

As Fluid Attacks's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

Incidents reported by Fluid Attacks's subprocessorsCSV · Atom

72 reported incidents in the last 30 days, by 7 of the vendors Fluid Attacks lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that Fluid Attacks was involved.

DateCompanyIncidentImpactLasted
AnthropicElevated errors on Fable 52 and Mythos 52 no impact stated1 min
dbt LabsDegraded run performance due to dbt State service disruption no impact stated—
OpenAIIncorrect cost data in Costs API exports no impact stated2 h 20 min
OpenAIElevated Errors On API minor42 min
OpenAIElevated ChatGPT Conversation Errors minor52 min
OpenAIElevated errors with image generation minor1 h 49 min
AnthropicDegraded performance for Claude Fable 5.1 minor26 min
SnowflakeINC20000337 minor2 h 5 min
SnowflakeINC20000336 minor3 h 20 min
OpenAIElevated error rates with some U.S. business Mastercards no impact stated3 days
OpenAIChatGPT Work and Dots Errors minor13 h 6 min
OpenAIElevated error rates across paid ChatGPT plans minor1 h 54 min
dbt LabsJobs list and Environment pages failing to load minor3 h 24 min
dbt LabsGit errors for projects connected to GitHub over SSH major—
VantaMissing check results for GitHub pull requests minorongoing
dbt Labsdbt Studio error loop with restarting dbt Studio minor1 h 25 min
dbt LabsExpired GitLab project access tokens not refreshing causing failures in posting commit statuses minor1 h 50 min
OpenAIFile upload errors in ChatGPT minor4 h 52 min
Voyage AIElevated 5xx errors on voyage-4 no impact stated—
SnowflakeINC20000321 minor3 h 25 min
OpenAIElevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences minor1 h 35 min
OpenAIElevated errors for GPT Image 2 API image edits minor4 h 1 min
VantaIncorrect security-training and background-check test results no impact stated—
dbt Labsdbt Wizard SQL execution failing major1 h 27 min
SnowflakeINC20000319 minor21 h 27 min

And 47 more. All of them: CSV · Who is around them.

ChangesCSV · Atom

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for Fluid Attacks's site

Fluid Attacks transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/fluid-attacks"><img src="https://thirdpartyindex.com/badge/fluid-attacks.svg" alt="Fluid Attacks transparency rating on Third Party Index" height="20"></a>
[![Fluid Attacks transparency rating on Third Party Index](https://thirdpartyindex.com/badge/fluid-attacks.svg)](https://thirdpartyindex.com/vendors/fluid-attacks)