--- title: Northflank Breached | daily.dev description: Northflank is reporting a major outage across several core services. Networking, Certificates, Services, Addons, Jobs, Builds, and Logs and Metrics are all... canonical: https://daily.dev/posts/northflank-breached-jr3j8oubn twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Northflank Breached | daily.dev og:description: Northflank is reporting a major outage across several core services. Networking, Certificates, Services, Addons, Jobs, Builds, and Logs and Metrics are all... og:url: https://daily.dev/posts/northflank-breached-jr3j8oubn og:image: https://api.daily.dev/og/posts/jr3J8OUbN.png og:image:alt: Northflank Breached og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Northflank Breached **[Hacker News](https://daily.dev/sources/hn)** · 1 min read · 0 upvotes · 0 comments ## Summary Northflank is reporting a major outage across several core services. Networking, Certificates, Services, Addons, Jobs, Builds, and Logs and Metrics are all listed as experiencing a major outage. The Northflank App, API, Marketing Site, and Documentation remain operational. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community take How the wider developer community reacted, aggregated from 1 discussion and 103 comments across hackernews (as of 2026-10-30). **TL;DR:** Discussion centers less on Northflank's specific breach details and more on what it signals: a wave of PaaS/infra breaches (alongside Railway) is pushing people to debate whether hyperscalers are actually safer, whether enterprises will retreat to big clouds while individuals go back to self-hosting or cheap VPS, and how AI/LLM-assisted attacks are accelerating this. **Sentiment:** 5% positive · 30% mixed · 65% skeptical **The case for** - Some argue AI and automation now make self-hosting and locking down a VPS much easier than a few years ago. - A few note that when a major shared provider goes down or is breached, customers don't get singled out for blame the way they would with a self-inflicted outage. **The pushback** - Many argue boutique/PaaS providers can't match hyperscaler security investment, incident response, or liability exposure. - Several point out hyperscalers themselves have serious, repeated security failures (e.g. Azure cross-tenant bugs), undercutting the 'just use a hyperscaler' argument. - Commenters flag that PaaS secret-management UX (showing env vars/secrets in dashboards) inherently weakens credential isolation if the management plane is compromised. - Some see this as part of a broader 'Black October' pattern of breaches driven by move-fast startup culture colliding with increasingly capable AI-assisted attackers. - Irony is noted that a platform marketed around secure sandboxing/execution was itself breached, following a similar OpenCode secrets leak. **By community** - hackernews (heated): A long, contentious thread debating whether this breach (plus Railway's) will push enterprises back to hyperscalers, with strong pushback on whether hyperscalers are actually more secure, alongside tangents on AI-accelerated attacks and PaaS secret-handling design flaws. **Hottest debate:** Whether this breach proves infra startups are fundamentally less trustworthy than hyperscalers, versus the view that hyperscalers have their own serious, recurring security failures and are just bigger targets. **Open questions** - Is there actually a more secure PaaS/cloud option, or is 'security' mostly about deniability rather than real safety? - How should customers evaluate a newer PaaS provider's security posture before trusting it with sensitive workloads? - To what extent did the breach affect downstream customers like Sentry, given conflicting information about whether Sentry used Northflank in production? **Highlights** > Modern PaaS is tough because there's a general expectation that users (and agents) are able to see and read back environment variables in their management UI or CLI - which means that you can't segregate credential values from the public web environment. See e.g. the visibility icons on https://northflank.com/docs/v1/application/secure/inject-sec... And sure, you can encrypt at rest, and perhaps even enforce that only re-encrypted versions are ever seen by the management/API web server. But fundamentally this display requirement means that if your management/API web server is compromised, users' secrets can be obtained by a process of impersonation. > — [btown on hackernews](https://news.ycombinator.com/item?id=50305985) > IMO, There is no "middle-ground" to the situation. I wanted to write a blog post about it as I was thinking the same but I guess a comment will help me get my thoughts across just as much. Either we are gonna see a convergence to hyperscalers as you mention, or we would go back to completely indie companies which compete on perf/price. There could still be some value to "nicer to use" certainly but with AI, we are gonna see almost every product as being "good-enough" if I am able to convey my sentiment. An anecdote is: Proton's an middle-ground company. I am seeing the Verge article which states that their CEO has gone a little crazy over the use of AI and the wording makes me lose trust within it. Proton's whole point is security and yet it's having this, It has some stocks in non profit and is a swiss company. It shouldn't have been this way and would've been one of my least anticipated companies but I guess they want growth at all costs and the growth has been slightly lesser than expected and now they are burning the good-will in many ways. I have to wonder that even if proton might have good engineers, then within this pressure by their CEO/CTO. I cannot trust the engineering talent because of these issues because they are very much forced by their company to use AI. Proton is also really expensive. Now just today, also, with a company so big as binance getting hacked and losing 6.5 Billion$. My trust within security just because its a large company is less. On the other hand, I know a guy called Vikas on lowendtalk who operates his own mail platform called mailbig. I know he vibe-coded the landing page and might've vibe-coded something but it is really cheap. I also know francisco whom I have talked to who runs namecrane. (I think mailbig uses namecrane in many ways) Perhaps E-mail can be a sensitive matter because you have to place trust in the provider even more because the protocol is not really that much secure but suppose it's an matrix instance (where it is genuinely encrypted) then that shifts it even further. I do trust NameCrane and NameBig from what I can gather. I'd much rather support them and their cheaper deals than some other middle-corp. Sure some security factor can come in but also, the difference feels comparatively less and the balance has been made The market will slightly squeeze as Hyperscalers will introduce the solutions of the middle-ground and the new players will everyday enter into the field with more competitive pricing just as well. So in short, Enterprise will move towards the hyperscalers. Generic Consumers will move towards the cheapest option. The moat of the middle ground where UI/UX was the differentiator is being turned down. There would be some mix and match and there will be cost-savings for Enterprise to move from hyperscalers but it would depend on a lot of factors. > — [Imustaskforhelp on hackernews](https://news.ycombinator.com/item?id=50307410) > With a lot of PaaS type vendors you are effectively exposed to both the vendor themselves and the public cloud they run their stack on top of. Broadly I think you're much more likely to be the victim of a platform-level breach involving an immature startup PaaS than a hyperscaler cloud, however I think for small teams the alternate risk you take on is that AWS/GCP/Azure are full of landmines and extremely easy to misconfigure in insecure ways if you don't know what you're doing. Especially if you have AI telling you confidently wrong things. > — [macNchz on hackernews](https://news.ycombinator.com/item?id=50306672) > Good point. I don't see Northflank listed, https://sentry.io/legal/subprocessors/. If I go on wayback a few days, I can see Sentry: https://web.archive.org/web/20261026032756/https://northflan... > — [gavxn on hackernews](https://news.ycombinator.com/item?id=50306255) > Run agents and everything they build. Secure execution from the first sandbox Getting hacked while in the business of selling a secure sandbox isn't really a good look. It seems like can't even trust anything these days. The other day OpenCode got hacked and leaked everyone's secrets inside .env to attackers and now this. Sigh. > — [neya on hackernews · 1 comments](https://news.ycombinator.com/item?id=50306599) **Source threads** - [hackernews](https://news.ycombinator.com/item?id=50305025) · 156 points · 103 comments ## Similar posts on daily.dev - [Cloudflare meltdown knocks major websites offline](https://daily.dev/posts/cloudflare-meltdown-knocks-major-websites-offline-otuxwqu3b) · TechCentral · 0 upvotes · 0 comments - [Cloudflare Global Network experiencing issues](https://daily.dev/posts/cloudflare-global-network-experiencing-issues-bqwigmlzw) · Hacker News · 4 upvotes · 0 comments - [The Cloudflare Outage May Be a Security Roadmap – Krebs on Security](https://daily.dev/posts/the-cloudflare-outage-may-be-a-security-roadmap-krebs-on-security-a9zczwqjp) · Krebs on Security · 0 upvotes · 0 comments --- [View this post on daily.dev](https://daily.dev/posts/northflank-breached-jr3j8oubn) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Northflank Breached","url":"https://daily.dev/posts/northflank-breached-jr3j8oubn","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/northflank-breached-jr3j8oubn"},"datePublished":"2026-10-30T16:33:26.173Z","dateModified":"2026-10-30T23:22:24.518Z","description":"Northflank is reporting a major outage across several core services. Networking, Certificates, Services, Addons, Jobs, Builds, and Logs and Metrics are all...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b47e3972d4769e338e5a17086fdc41ac?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b47e3972d4769e338e5a17086fdc41ac?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/northflank-breached-jr3j8oubn","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"Northflank Breached"}]} ```