On October 1, a distributed denial-of-service (DDoS) attack caused elevated token-request errors across all Ably Realtime regions for approximately six minutes and intermittent unavailability of ably.com. We restored token-request service by increasing capacity and added targeted traffic-blocking and rate-limiting rules to mitigate the attack. We are strengthening endpoint protection and reviewing our firewall controls to reduce the risk of recurrence.