Störungsverlauf von Hcaptcha

1. 11. September 2026 um 14:04 UTCinvestigating

   Wir beobachten in einigen Regionen eine höhere Latenz als erwartet und betreffen in erster Linie 0,0175% der Siteverify-Anfragen. Der betroffene Verkehr wird nun umgeleitet, und wir erwarten, dass sich die Latenz in Kürze erholen wird.

2. 11. September 2026 um 14:12 UTCmonitoring

   Ein Fix wurde implementiert und wir überwachen die Ergebnisse.

3. 11. September 2026 um 14:20 UTCresolved

   Dieser Vorfall wurde behoben.

Automatisch aus der offiziellen Störungsmeldung übersetzt.

1. 29. Juli 2026 um 17:31 UTCresolved

   429 Raten in mehreren Netzwerken für etwa 60 Sekunden kurzzeitig erhöht. Dieses Problem ist nun gelöst.

Automatisch aus der offiziellen Störungsmeldung übersetzt.

1. 5. Mai 2026 um 14:37 UTCresolved

   Between 14:15 UTC and 14:22 UTC, some loads of API assets returned 403s in some regions. This incident has now been resolved.

1. 19. Dezember 2025 um 15:57 UTCresolved

   We are monitoring sporadic latency impact related to network-level issues at an upstream WAF provider: https://www.cloudflarestatus.com/incidents/dz87vqwvl8wr This appeared to primarily affect some LATAM and EUR region POPs.

1. 21. Oktober 2025 um 21:29 UTCresolved

   This notice is purely informational. There was zero impact to hCaptcha from the AWS us-east-1 outage that took down many other online services this week.

1. 8. Oktober 2025 um 16:05 UTCmonitoring

   Passkey support is being updated; error rates for logins or 2FA verification on accounts using passkeys may increase for approximately 10 minutes.

2. 8. Oktober 2025 um 16:14 UTCresolved

   Maintenance is now complete.

1. 8. September 2025 um 15:22 UTCresolved

   Due to an issue at an upstream edge CDN, P99 times in several regions, primarily GIG and GRU, were elevated between 14:15 UTC and 14:45 UTC.

1. 21. August 2025 um 19:39 UTCmonitoring

   An upstream WAF provider is experiencing increased latency in the IAD region, which appears to be primarily affecting connections from AWS us-east to our API endpoints. Most traffic has been rerouted to nearby regions, so siteverify endpoints from servers connecting from AWS us-east regions that do not use our PrivateLink or Direct Routing options may see 20-50ms of increased latency until IAD is restored. Impact appears to be less than 0.005% of total requests, but may be concentrated on some network links.

2. 21. August 2025 um 19:47 UTCresolved

   We are no longer seeing elevated latency in IAD.

1. 12. Juni 2025 um 19:01 UTCidentified

   Due to an incident at Google, we are observing increased error rates on login authentication. Use GitHub SSO or contact [email protected] if you need assistance with alternate methods. You may track status here: https://status.cloud.google.com/incidents/ow5i3PPK96RduMcb1SsW#2c2sBHWU84yPDJ8y1ar4

2. 12. Juni 2025 um 20:45 UTCresolved

   Error rates for Google SSO appear to have returned to normal.

1. 11. März 2025 um 11:58 UTCresolved

   Due to an issue at an upstream mail gateway, some inbound support emails may have been delayed or rejected earlier today. This did not affect outbound email, and the issue has now been resolved.

1. 19. Februar 2025 um 22:49 UTCmonitoring

   A fix has been implemented and we are monitoring the results.

2. 20. Februar 2025 um 00:21 UTCresolved

   This incident has been resolved. As a reminder, please confirm that you are loading the JS SDK only via the recommended host: https://js.hcaptcha.com/1/api.js

1. 20. Juni 2024 um 19:58 UTCmonitoring

   Due to an incident at an upstream CDN provider starting at 18:00 UTC, we are observing elevated P99 latency (+100-200ms) on a minority of traffic in the Eastern US and Western Europe regions, caused by some traffic being rerouted to more distant POPs. We have put overrides in place and will continue to monitor performance; there is no impact to availability and no action is required.

2. 20. Juni 2024 um 20:23 UTCresolved

   P99 latency has returned to norm as of 20:05 UTC.

1. 22. März 2024 um 04:31 UTCresolved

   At Mar 22 01:21:56 2024 GMT, some users of dedicated mainland China region endpoints experienced an expired certificate error on some endpoints. The root cause has been identified and addressed. Global traffic was unaffected.

1. 15. März 2024 um 14:25 UTCresolved

   hCaptcha APIs use several SSL certificate authorities, maintaining both primary and backup certificates; our CAA record is authoritative. We also automatically rotate certificates every three months as part of our security best practices. We received several reports today from customers running servers with outdated root CA entries. They either needed to update these after our most recent automatic certificate rotation, or had locked their validation for our endpoints to a specific certificate chain rather than relying on CA validation and our CAA records. Please ensure your servers calling the siteverify endpoint have an updated root CA store. This is an important security practice, as root CAs are occasionally compromised and removed from OS vendors' stores. Similarly, if you would like to enforce additional restrictions on validating our TLS certificates, please rely on the CAA record rather than hard-coding a specific intermediate chain.

1. 13. September 2023 um 02:12 UTCresolved

   Some sites consuming hCaptcha risk scores briefly experienced an elevated score distribution, affecting approximately 3% of traffic. This incident was fully resolved by 01:28 UTC. This issue and its root cause have now been addressed, and adjustments scheduled to prevent any similar incidents in the future.

1. 19. Dezember 2022 um 22:08 UTCresolved

   Token verification endpoint error rates increased for several minutes on approximately 0.1% of sites during a token-related update. This was most commonly visible in an increased probability of a sitekey mismatch error.

1. 18. Dezember 2022 um 06:11 UTCresolved

   Error rates for some users located in mainland China and using dedicated regional routing endpoints were elevated during a rerouting event triggered by failures at an upstream provider. Mainland China users accessing standard global and first-party endpoints were unaffected.

1. 20. November 2022 um 05:39 UTCresolved

   Due to an upstream caching issue, some endpoints for mainland China users failed to update during certificate rotation and briefly served requests using an expired TLS certificate. This affected only users of dedicated China endpoints; China traffic using global endpoints was unaffected.

1. 12. November 2022 um 17:56 UTCresolved

   Challenge rates were briefly elevated for some traffic segments, with a duration of between 0 and 20 minutes depending on region. This issue has now been resolved.

1. 8. November 2022 um 15:11 UTCresolved

   A behavior change in an upstream deployment workflow caused some paths related to WAF customers' asset host paths to temporarily de-route. While most requests (>99%) were re-routed automatically with no user-visible impact, some WAF customer sites using custom asset hosts failed to load images for visual challenges. This issue has now been resolved.