# Twingate: Twingate Service Incident - Aug 19, 2023

- Impact (vendor’s label): minor
- Status: postmortem
- Started: 2023-08-19 08:01 UTC · Resolved: 2023-08-19 08:21 UTC · Duration: 20 min
- Updates: 4 · Affected components: Authorization, Controller - Connection Authorization, Admin Console, Admin Console - Admin Web Interface, Admin API, Public API, Authentication - Enterprise, Controller - User Authentication, Connector Heartbeat, Controller - Controller
- [Vendor status page: https://stspg.io/lc97v6pz5hrv](https://stspg.io/lc97v6pz5hrv)
- [Company: Twingate](https://rewindex.com/company/twingate.md)

## Timeline of updates

- **investigating** 2023-08-19 08:01 UTC: We are seeing issues with Twingate service and investigating.
- **investigating** 2023-08-19 08:01 UTC: We are continuing to investigate this issue.
- **resolved** 2023-08-19 08:21 UTC: This incident has been resolved. We'll publish RCA as soon as we can.
- **postmortem** 2023-08-23 06:11 UTC: \*\*Summary\*\* On August 19 at 7:51 AM UTC, Twingate received alerts of issues with the login services. Within a few minutes, the Twingate engineering team began investigating. The team quickly identified that our backend was seeing excessive timeouts from a 3rd-party API, preventing it from being able to process other requests such as authentication. After some initial fixes were unsuccessful, Twingate contacted the 3rd party and also disabled support for real-time updates that make use of these specific 3rd-party API calls. As a result, the issues started resolving at 8:10 AM UTC. Most of the services recovered quickly and full resolution occurred at 8:15 AM UTC. The vendor later confirmed and fixed the issue, and Twingate re-enabled the real-time update feature shortly after on the same day, August 19. \*\*Root cause\*\* The Twingate backend was exhausted due to timeouts from a 3rd-party API. \*\*Post-incident Analysis\*\* Twingate had already separated out most services to their own deployments, allowing those services to function throughout the incident. Therefore, only some users that needed to authenticate or re-authenticate were affected; any user that had authenticated prior to the incident was not impacted. Analysis of logs post-incident showed that the incident started at 7:49 AM UTC and fully recovered at 8:15 AM UTC. \*\*Corrective actions\*\* Short Term: \* Separate Authentication and real-time services to their own deployments - COMPLETED Medium / Long Term: \* Reevaluate and optimize timeout values for various backend and 3rd party services \* Simplify the internal Twingate process for enabling and disabling features


---
Canonical: https://rewindex.com/company/twingate/incidents/h0xjx67kx3db · Markdown: https://rewindex.com/company/twingate/incidents/h0xjx67kx3db.md · JSON: https://rewindex.com/api/v1/companies/twingate/incidents/h0xjx67kx3db · Generated 2026-10-20T01:32:13.963Z