Update - We are continuing to monitor for any further issues.
Jun 16, 2025 - 16:13 EDT
Jun 16, 2025 - 16:13 EDT
Monitoring - As part of a previously communicated Microsoft deprecation, Expel is no longer ingesting Microsoft Defender for Identity alerts (via the Microsoft Defender for Cloud Apps integration). Any customers who have onboarded a Microsoft Defender XDR device have coverage and alerts are being processed.
We recommend that customers who have the Microsoft Defender for Cloud Apps integration, but have not yet onboarded Microsoft XDR to Workbench, complete the onboarding as soon as possible (https://support.expel.io/hc/en-us/articles/38928860545299-Microsoft-Defender-XDR-Setup-for-Workbench).
Please contact your Customer Success Manager if you need assistance with onboarding or if you have additional questions.
Apr 28, 2025 - 10:34 EDT
We recommend that customers who have the Microsoft Defender for Cloud Apps integration, but have not yet onboarded Microsoft XDR to Workbench, complete the onboarding as soon as possible (https://support.expel.io/hc/en-us/articles/38928860545299-Microsoft-Defender-XDR-Setup-for-Workbench).
Please contact your Customer Success Manager if you need assistance with onboarding or if you have additional questions.
Apr 28, 2025 - 10:34 EDT
Identified - On May 19, Wiz made a change to its API that impacted Expel’s ability to sync alert statuses from Workbench back to Wiz. As a result, we have temporarily disabled the status syncing feature while we work on a fix.
Importantly, this issue does not affect Expel’s ability to deliver MDR services for Wiz. Workbench continues to ingest alerts from Wiz as expected, and our SOC is actively monitoring and responding to those alerts.
We’re actively collaborating with Wiz to update the integration and restore status syncing functionality. While we don’t have a specific timeline to share yet, we’ll provide an update as soon as the fix is deployed and syncing is re-enabled.
Thank you for your understanding.
Jun 11, 2025 - 13:13 EDT
Importantly, this issue does not affect Expel’s ability to deliver MDR services for Wiz. Workbench continues to ingest alerts from Wiz as expected, and our SOC is actively monitoring and responding to those alerts.
We’re actively collaborating with Wiz to update the integration and restore status syncing functionality. While we don’t have a specific timeline to share yet, we’ll provide an update as soon as the fix is deployed and syncing is re-enabled.
Thank you for your understanding.
Jun 11, 2025 - 13:13 EDT
Workbench availability
Operational
Workbench global network connectivity
Operational
Workbench login
Operational
Workbench features
Operational
Investigative actions
Operational
File uploads
Operational
Notifications
Operational
Email
Operational
Slack
Operational
Teams
Operational
Ticketing systems (via email, such as Jira)
Operational
PagerDuty
Operational
Opsgenie
Operational
ServiceNow
Operational
Assembler connectivity
Operational
Alert ingestion
Operational
Slack channels for customers
Operational
Phishing submissions
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Scheduled Maintenance
Database maintenance Jul 11, 2025 05:00-05:30 EDT
We will be undergoing routine maintenance between 05:00 - 05:30 ET on July 11. During the maintenance window, there is no anticipated downtime.
All notifications and alerts will be processed during the maintenance window. We will be updating the way we connect to the database. If something goes wrong, we will revert the way we connect to the database in a couple of minutes. This has been tested in staging with no downtime.
This will improve the reliability and speed of the site and API.
Posted on Jul 03, 2025 - 17:08 EDT
All notifications and alerts will be processed during the maintenance window. We will be updating the way we connect to the database. If something goes wrong, we will revert the way we connect to the database in a couple of minutes. This has been tested in staging with no downtime.
This will improve the reliability and speed of the site and API.
Posted on Jul 03, 2025 - 17:08 EDT