All Systems Operational

Workbench availability Operational
Workbench global network connectivity Operational
Workbench login Operational
Workbench features Operational
Investigative actions Operational
File uploads Operational
Dashboards Operational
Notifications Operational
Email Operational
Slack Operational
Teams Operational
Ticketing systems (via email, such as Jira) Operational
PagerDuty Operational
Opsgenie Operational
ServiceNow Operational
Assembler connectivity Operational
Alert ingestion Operational
Slack channels for customers Operational
Phishing submissions Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Workbench global network connectivity ?
Fetching
Workbench availability ?
Fetching
Aug 31, 2026

No incidents reported today.

Aug 30, 2026
Resolved - This issue is resolved. Email delivery from Workbench has been restored, and phishing email submissions are processing normally.

Suspected phishing emails submitted during this time were not received by Expel and could not be processed. Please ask your users to resubmit anything they reported during this period.

Notification emails generated during this time have been delivered. Some may arrive later than the timestamp they were originally generated.

Aug 30, 15:53 EDT
Monitoring - Email delivery from Workbench is now working and emails in the queue are being replayed. An update will be posted once the replay is complete.
Aug 30, 14:14 EDT
Update - We are continuing to work on remediation.

MDR services are unaffected. Alert ingestion, detection, and investigation are operating normally. Slack, Microsoft Teams, PagerDuty, Opsgenie, and Service Now notifications are still being delivered.

Email delivery from Workbench remains unavailable. No action is required at this time; we will confirm resubmission steps for phishing submissions once service is restored.

Next update: Monday, 31 August at 13:00 UTC (9:00 AM ET)

Aug 30, 08:58 EDT
Update - We have identified the cause are continuing to work on remediation. We have also confirmed that due to this issue, when someone submits a suspected phishing email, the email will not reach Workbench for review. Next update at 1pm UTC.
Aug 30, 07:10 EDT
Identified - Emails from Workbench are delayed since 12am UTC. We have identified the root cause and are working on a remediation. Phishing outcome responses, User Email notifications, and Org-Level Email Ticketing notifications are delayed since 12am UTC. SOC operations and alert ingestion are not affected. We will provide another update by 12:30pm UTC
Aug 30, 05:43 EDT
Aug 29, 2026

No incidents reported.

Aug 28, 2026

No incidents reported.

Aug 27, 2026

No incidents reported.

Aug 26, 2026

No incidents reported.

Aug 25, 2026

No incidents reported.

Aug 24, 2026

No incidents reported.

Aug 23, 2026

No incidents reported.

Aug 22, 2026

No incidents reported.

Aug 21, 2026

No incidents reported.

Aug 20, 2026

No incidents reported.

Aug 19, 2026

No incidents reported.

Aug 18, 2026

No incidents reported.

Aug 17, 2026

No incidents reported.