Skip to main content

Is Imperva Down?

No — Imperva is up

Reachable from all 8 checked regions

Average response time: 2304ms

Last checked · checks run every 6 hours

Official status page: https://status.imperva.com

[INC-1106] Elevated Latency for a Subset of Origin Fetch Traffic in Ashburn, VA (WDC)

minor identified

We have confirmed a solution which mitigates the sub-optimal routing and can be implemented by request on a per-customer basis for impacted websites while we continue to await the permanent fix by the third-party CDN provider.

Components the vendor reports as affected: Ashburn, VA (WDC) Degraded Performance Chicago 3, IL (MDW): August 2026 Under Maintenance Dallas 2, TX (DAL): September 2026 Under Maintenance Jakarta 2, Indonesia (HLP): September 2026 Under Maintenance New York 3, NY (JFK): September 2026 Under Maintenance

A component listed here does not necessarily mean a full outage — large providers routinely report maintenance on individual locations. It only affects the verdict above when the vendor marks it major or critical and our own checks also saw Imperva fail from enough regions to rule out probe noise.

Imperva uptime

100%
Last 7 days
Last 30 days
Last 90 days
Avg response, 30 days

Measured from multiple regions every 6 hours. Percentages count only checks that returned an availability answer — 3 days measured so far. A dash means that window does not yet hold enough measured days to publish a figure.

30-day history

3-day clean streak
Jul 25: no data
Jul 26: no data
Jul 27: no data
Jul 28: no data
Jul 29: no data
Jul 30: no data
Jul 31: no data
Aug 1: no data
Aug 2: no data
Aug 3: no data
Aug 4: no data
Aug 5: no data
Aug 6: no data
Aug 7: no data
Aug 8: no data
Aug 9: no data
Aug 10: no data
Aug 11: no data
Aug 12: no data
Aug 13: no data
Aug 14: no data
Aug 15: no data
Aug 16: no data
Aug 17: no data
Aug 18: no data
Aug 19: no data
Aug 20: no data
Aug 21: 100.00% uptime, 23 checks
Aug 22: 100.00% uptime, 32 checks
Aug 23: 100.00% uptime, 24 checks
Jul 25 Today
No downtime Partial Downtime Not measurable No data

Reachability by region

Each region runs its own request from a different part of the world. A service can be up for one continent and down for another, which is usually the first sign of a routing or CDN problem.

iad
1407ms
DNS 84ms TCP 1ms TLS 3ms TTFB 1400ms
jnb
2990ms
DNS 10ms TCP 0ms TLS 2ms TTFB 2048ms
lax
2144ms
DNS 171ms TCP 27ms TLS 29ms TTFB 1842ms
lhr
1959ms
DNS 34ms TCP 2ms TLS 5ms TTFB 1537ms
nrt
2968ms
DNS 76ms TCP 1ms TLS 6ms TTFB 2282ms
ord
323ms
DNS 217ms TCP 1ms TLS 3ms TTFB 276ms
sin
3265ms
DNS 166ms TCP 8ms TLS 10ms TTFB 2248ms
sjc
1558ms
DNS 22ms TCP 10ms TLS 11ms TTFB 1321ms
syd
3227ms
DNS 253ms TCP 0ms TLS 3ms TTFB 2388ms

What Imperva does

Imperva provides web application firewalling, DDoS mitigation, bot management and application delivery from a network of points of presence that customer traffic is routed through. Because sites sit behind it by DNS, an Imperva problem is seen by visitors as the customer's own site failing, even when the origin server is entirely healthy.

What an outage looks like

Visitors receive error pages served by the edge rather than by your application, or requests hang before reaching your origin. Legitimate traffic is challenged or blocked as though it were a bot. Latency rises sharply for users routed through one region while others are unaffected. Origin logs go quiet even though the site is being visited, which is the clearest sign the edge is not forwarding.

What to do about it

status.imperva.com lists 114 components, grouped into North American, EMEA, LATAM and APAC points of presence plus Protection Services and Management and Analytics Services. Find the named PoP your traffic uses, such as Ashburn or Atlanta, not the headline. Cloud WAF Protection and the Cloud Security Management Platform report separately, so the console can be down while protection keeps running. Support Ticketing System and Support Phone Systems are tracked too.

Is it down for everyone, or just you?

If this page says Imperva is up but it is not loading for you, the problem is between you and them. Run a check against any URL from all 18 regions to find out where it breaks.

Test it yourself

Related services

Imperva outage FAQ

My site is down. Is it Imperva or my origin server?
Request your origin directly, bypassing Imperva, using its IP address or an origin hostname. If the application answers normally there while visitors see errors, the fault is at the edge. Quiet origin logs during a period when the site is clearly being visited point the same way, because it means requests are not being forwarded.
Why are real users being blocked as bots?
Bot management and WAF rules run at the edge, so a misclassification during a degraded period looks identical to a policy change you did not make. Imperva tracks Cloud WAF Protection as its own component. If it is degraded, avoid loosening rules permanently to work around it, since those relaxed rules will still be in place long after the incident clears.
Is the whole network affected or only my region?
Usually only part. Imperva reports each point of presence individually across four regional groups, so an incident in one PoP affects the visitors routed to it and nobody else. This is why a site can be reported down by customers in one country and fine everywhere else, and why the named PoP row is more informative than the overall status.
Can I take Imperva out of the path during an outage?
Technically yes by changing DNS to point at your origin, but doing so removes your WAF and DDoS protection and exposes the origin directly. DNS changes also take time to propagate, so relief is not immediate. Treat it as a deliberate decision with a security cost rather than an obvious fix, and plan the rollback before making it.
Does an Imperva outage put my application at risk?
An availability incident at the edge is not itself a compromise. The risk is the workaround: routing around the WAF exposes an origin that has been shielded, possibly for years, and origins in that position often carry unpatched surface. If you do bypass it, restore the protected path as soon as the component recovers.

How we measure this

  • We request Imperva's public endpoint every 6 hours from Fly.io regions across six continents — 8 of them answered the most recent check.
  • A region counts as down only when it gets no usable HTTP response. A 403 or 429 means the origin answered and refused us, which we report as blocked, never as an outage.
  • A single failing region is treated as probe noise. We only change the verdict when two consecutive cycles agree.
  • Response times average only the regions that actually served the page, so a timeout never inflates the number.
  • Where Imperva publishes an official status feed we read it too. An all-clear from the vendor can soften an unconfirmed degradation; a vendor-declared outage only worsens our verdict when our own checks corroborate it.

Get alerted when Imperva goes down

This page refreshes every 6 hours. Your own monitors run as often as every 30 seconds, from the same 18 regions, and tell you the moment something breaks.

Start Free Monitoring
Free plan available No credit card required