# WorkOS: Degraded AuthKit Behavior

- Impact (vendor’s label): major
- Status: resolved
- Started: 2025-12-29 12:26 UTC · Resolved: 2025-12-29 14:13 UTC · Duration: 1.8 h
- Updates: 2 · Affected components: AuthKit, Core Services - AuthKit, Audit Logs, Core Services - Audit Logs
- [Vendor status page: https://stspg.io/dl942ydpcbzd](https://stspg.io/dl942ydpcbzd)
- [Company: WorkOS](https://rewindex.com/company/workos.md)

## Summary

WorkOS reported major AuthKit degradation causing intermittent errors from 2025-12-29 12:26 UTC to 2025-12-29 14:13 UTC, lasting 1 h 47 min. DDoS protection mitigated an attack but produced false positives, causing intermittent 404s for end users; WorkOS adjusted rule sensitivity and marked the incident resolved. _(machine-written, sol)_
## Timeline of updates

- **monitoring** 2025-12-29 12:26 UTC: We are seeing degraded performance of AuthKit resulting in intermittent errors.  The error rate has improved and we are monitoring.
- **resolved** 2025-12-29 14:13 UTC: Our DDOS protection mitigated an attack but also resulted in false positives causing end users to see intermittent 404s. We have adjusted the sensitivity of these rules to prevent further false positives.

## Rewindex changes for this incident

- 2025-12-29 12:26 UTC: [Major incident: Degraded AuthKit Behavior](https://rewindex.com/change/i681c6afa4716d7.md)


---
Canonical: https://rewindex.com/company/workos/incidents/zrjsy0n4fm2n · Markdown: https://rewindex.com/company/workos/incidents/zrjsy0n4fm2n.md · JSON: https://rewindex.com/api/v1/companies/workos/incidents/zrjsy0n4fm2n · Generated 2026-10-18T09:40:59.213Z