Monitoring - On Wednesday, November 11, we started seeing more rate-limiting errors from the Microsoft 365 integration. These errors are stopping Expel from ingesting sign-in and audit logs. Our investigation points to the ongoing Microsoft outage, which is affecting the Microsoft Graph APIs the integration relies on. We're monitoring Microsoft's progress and will post an update when ingestion resumes.
Nov 13, 2026 - 16:36 EST
Workbench availability Operational
Workbench global network connectivity Operational
Workbench login Operational
Workbench features Operational
Investigative actions Operational
File uploads Operational
Dashboards Operational
Notifications Operational
Email Operational
Slack Operational
Teams Operational
Ticketing systems (via email, such as Jira) Operational
PagerDuty Operational
Opsgenie Operational
ServiceNow Operational
Assembler connectivity Operational
Alert ingestion Degraded Performance
Slack channels for customers Operational
Phishing submissions Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance

Scheduled Maintenance

Scheduled Infrastructure Maintenance Nov 21, 2026 00:00-03:00 EST

We will be undergoing routine maintenance between 00:00- 03:00 ET on 11/21/26. During the maintenance window, Workbench may be intermittently unavailable or slow.

All notifications and alerts will be processed during the maintenance window, but may be affected by intermittent delays.

Posted on Nov 13, 2026 - 14:27 EST
Workbench global network connectivity ?
Fetching
Workbench availability ?
Fetching

Nov 13, 2026

Unresolved incident: Degraded Microsoft 365 Integration.

Nov 12, 2026

No incidents reported.

Nov 11, 2026

No incidents reported.

Nov 10, 2026

No incidents reported.

Nov 9, 2026

No incidents reported.

Nov 8, 2026

Resolved - The incident has been resolved, and all systems are once again fully available. Email notifications and phishing submission ingestion were degraded from approximately 7:40 PM ET on November 7 (00:40 UTC on November 8) until 11:30 PM ET (04:30 UTC). All delayed phishing submissions have been received, and all delayed email notifications have been sent. No customer data was lost.
Nov 8, 00:23 EST
Identified - Starting at approximately 7:40 PM ET (00:40 UTC) on November 7, email notifications and phishing submission ingestion have been degraded. Email notifications are not being delivered, and phishing alerts are not being received. We have identified the root cause and are working on a remediation. Other alert ingestion is not affected. We will provide another update by 12:30 AM ET (05:30 UTC).
Nov 7, 23:29 EST

Nov 7, 2026

Nov 6, 2026

No incidents reported.

Nov 5, 2026

No incidents reported.

Nov 4, 2026

No incidents reported.

Nov 3, 2026

No incidents reported.

Nov 2, 2026

No incidents reported.

Nov 1, 2026

No incidents reported.

Oct 31, 2026

No incidents reported.

Oct 30, 2026

No incidents reported.