Engineering

We're always experimenting with new features and complex solutions, as well as improving our existing offerings. Read about how we do it, directly from Chatwoot engineers.

Sep 02, 2026

Incident Report - September 1, 2026

Our blog was compromised between May and September 2026. An attacker obtained an API key for the Ghost instance that hosts the blog and used it to insert spam links into published posts. We identified the activity on September 1, revoked the key, and removed the links. We regret that this happened. While we patched the underlying Ghost vulnerability, we failed to rotate credentials that may already have been exposed. We have since addressed that gap and made additional changes to how we handle

Vishnu NarayananVishnu Narayanan
Feb 10, 2026

Incident Report - February 4, 2026

Chatwoot Cloud experienced an incident on February 4 which lasted approximately 12 minutes, from 12:48pm to 01:00pm UTC. During this time, all Chatwoot Cloud users were unable to access the platform. No data was lost during this incident. Our sincerest apologies for the disruption. Reliability is the top priority for us at Chatwoot. We have identified the risks and have taken steps to mitigate such events in future. Timeline February 4, 2026 * 12:43 PM: Database instability began, connectio

Vishnu NarayananVishnu Narayanan