Struck in red is what Auth0 removed; blue is what they added. Muted text is unchanged context.
BeforeAfter
AddedTitle#1
Before: not present
After: We have detected an issue.
AddedImpact#2
Before: not present
After: major
AddedStatus#3
Before: not present
After: resolved
AddedStart time#4
Before: not present
After: 2026-09-16 03:06 UTC
AddedResolved time#5
Before: not present
After: 2026-09-16 03:55 UTC
AddedAffected components#6
Before: not present
After: US-5 Authentication, US-5 Machine to Machine
AddedUpdateinvestigating#7
Before: not present
After: We are currently investigating an incident that impacted our services. Our team is actively working to understand the root cause and mitigate the issue. We will provide updates as we gather more information.
AddedUpdateinvestigating#8
Before: not present
After: We are continuing to investigate the issue and will provide further updates with changes in the incident status as our mitigation efforts progress.
AddedUpdatemonitoring#9
Before: not present
After: The Auth0 Engineering team has applied the mitigation and observed the service is restoring. We're monitoring the environment to ensure stability.
AddedUpdateresolved#10
Before: not present
After: Services have been restored. A root cause analysis (RCA) will be posted here within 7 business days. We sincerely apologize for the impact this had on you and your users.
AddedUpdatepostmortem#11
Before: not present
After: A root-cause analysis for this issue has been performed and is now available at: [https://cdn.auth0.com/website/2026-09-16_-_Elevated_Errors_on_US-5_Public_Cloud_Environment.pdf](https://cdn.auth0.com/website/2026-09-16_-_Elevated_Errors_on_US-5_Public_Cloud_Environment.pdf)
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.