Issue passing Challenge Pages&Turnstile 8thJuly,2024-Incident Report for Cloudflare

Website, Application, Performance Turnstile
1

What is the name of the domain?

What is the error message?

We use Cloudflare Turnstile in non-interactive mode to secure our website from bot fraud, but due to the issue occurred on 8th July (between July 8th 11:00 UTC and July 9th 02:09AM UTC), about 60% of real users could no longer pass the captcha. This was the huge downtime for our users and our business was hugely impacted due to this issue. Could you please let us know that are you taking any steps to prevent this going forward or could you please suggest steps we should take on our side so that our business is not impacted due this?. Did you send any notification for this issue and if yes then could you please share us the link wherein we could be proactively prepared for this kind of critical situation?. Cloudflare Status - Issues passing Challenge Pages and Turnstile

What is the issue you’re encountering

Issues passing Challenge Pages and Turnstile – 8th July , 2024 - Incident Report for Cloudflare

What steps have you taken to resolve the issue?

We ultimately have to disable our turnstile captcha verification code but by the time we published our changes business was already got impacted and we started receiving mails from clients.

1 Like
2

What happened on July 8th? TODAY, we found our Turnstile implementation wasn’t working and we disabled Turnstile. During my investigation, I found what ultimately caused our problem and things seem to be working ok now. What was the issue and what was the resolution?

Thanks!

3

If you want any kind of post-mortem, RCA, or anything like that, see

please suggest steps we should take on our side so that our business is not impacted due this

From the Turnstile documentation:

On continuous failures, this is indicative of an automated device and you must verify the visitor’s authenticity by other means.

My personal recommendation would be to fall-back to using hCaptcha if Turnstile reports the user to be automated. It may have more friction, but it shouldn’t affect 99% of users, since they should solve Turnstile correctly.