Service Update: Orca Security Integration
Identified - We’re upgrading our API connection and that may impact delivery of some alerts to Workbench.

We are actively investigating and collaborating on a solution to ensure the consistent and complete delivery of all alert data.

Please reach out to Orca if you’d like additional information.

Thank you for your patience and understanding as we work through this.
Nov 12, 2025 - 10:28 EST
Service Update: Wiz Alert Status Syncing
Identified - On May 19th, we temporarily disabled the alert status syncing feature between Expel Workbench and Wiz due to an identified error.

Importantly, this does not affect Expel’s ability to deliver MDR services for Wiz. Workbench continues to ingest alerts from Wiz as expected, and our SOC is actively monitoring and responding.

We will share an update as soon as the fix is deployed and syncing is re-enabled.

Thank you for your understanding.
Jun 11, 2025 - 13:13 EDT
Workbench availability Operational
Workbench global network connectivity Operational
Workbench login Operational
Workbench features Operational
Investigative actions Operational
File uploads Operational
Notifications Operational
Email Operational
Slack Operational
Teams Operational
Ticketing systems (via email, such as Jira) Operational
PagerDuty Operational
Opsgenie Operational
ServiceNow Operational
Assembler connectivity Operational
Alert ingestion Operational
Slack channels for customers Operational
Phishing submissions Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
System Metrics Month Week Day
Workbench global network connectivity ?
Fetching
Workbench availability ?
Fetching
Jan 12, 2026

No incidents reported today.

Jan 11, 2026

No incidents reported.

Jan 10, 2026

No incidents reported.

Jan 9, 2026

No incidents reported.

Jan 8, 2026

No incidents reported.

Jan 7, 2026
Phishing Service Sending Multiple Notifications
Resolved - The hotfix for phishing submission outcome emails was successful and behavior has returned to normal. This incident is resolved.
Jan 7, 17:54 EST
Monitoring - The hotfix for duplicate phishing outcomes has been deployed and we are monitoring. Next update at 6pm EST.
Jan 7, 17:00 EST
Identified - We believe we have identified the root cause of duplicate phishing outcome emails and are preparing a hotfix. Next update at 5pm EST.
Jan 7, 16:11 EST
Investigating - Starting 1/6/25 at roughly 12:00 EST, we have identified an issue with our phishing service where outcome emails are being sent multiple times to some users and are investigating the root cause. Ingestion and email review are not affected. We will provide an update at 4pm EST.
Jan 7, 14:51 EST
Jan 6, 2026

No incidents reported.

Jan 5, 2026

No incidents reported.

Jan 4, 2026

No incidents reported.

Jan 3, 2026

No incidents reported.

Jan 2, 2026

No incidents reported.

Jan 1, 2026

No incidents reported.

Dec 31, 2025

No incidents reported.

Dec 30, 2025

No incidents reported.

Dec 29, 2025
Detection pipeline availability
Resolved - Detection pipelines are caught up. Service is nominal.
Dec 29, 17:09 EST
Monitoring - We have identified and implemented a fix and are monitoring; service queues are approaching normal.
Dec 29, 16:49 EST
Investigating - At 3:17, we began experiencing a problem with enrichment service that is impacting detections. We will provide an update by 4:45.
Dec 29, 16:26 EST
← Incident History Powered by Atlassian Statuspage