Railway

A detailed report of the October 21st security attack blog.railway.com/p/incident-…

This week, we're giving you more control over credentials and bringing request tracing to your terminal Changelog #0315 • Workspace token management • Password rotation for HA databases • Tracing in the CLI railway.com/changelog/2026-1…

Postgres on Railway now has: • High availability with automatic failover • Built-in connection pooling • Backups and point-in-time recovery • Auto image updates, CVE patching, and major version upgrades • Agent skills & CLI support blog.railway.com/p/managed-p…

New Postgres, MySQL, MongoDB and Redis databases are private by default They’re only accessible over the private network, keeping them off the public internet and reducing the risk of known vulnerabilities being exploited If you need external access, you can add a public TCP proxy in one click

This week's updates focus on applying security fixes and keeping services connected after credential changes Changelog #0314 • Automatic security patches • Redeploys after credential regeneration railway.com/changelog/2026-1…

Regenerating database passwords or bucket credentials in the dashboard now automatically redeploys services connected through Railway variable references Redeploys reuse existing deployments with the updated credentials, without pulling in newer commits

Railway now automatically patches and redeploys services and functions affected by known vulnerabilities (CVEs) Workspace admins receive an in-app notification and an email after the update is applied. You can also review the upgrade in your project's activity feed

The security incident is resolved for existing users. We value transparency, and thus will continue to provide updates until all surface areas of Railway are fully operational. Why is Railway still not accepting new signups? Railway’s services are fully restored for our 5 million existing users. To securely and reliably support market demand, we have paused new signups as we prioritize uptime during this recovery period. We will reopen signups this week to continue supporting the ambition of product builders worldwide. How can I get a refund for fraudulent AI spend on other platforms? Railway is unable to refund customers for spend performed with compromised API keys. However, we encourage you to reach out to AI token providers directly. Afterwards, please submit a support request at station.railway.​com with timestamps, prompts, and addition proof of fraudulent spend so we can escalate the request on your behalf. More information to follow. What is Railway doing to improve security moving forward? This week, we have already or are actively implementing a new generation of builder, encryption, and logging systems. Railway has been acknowledged as critical cyber infrastructure, allowing us to utilize to previously inaccessible tooling to provide best-in-class security for our users. Our goal has never been to simply get back to where we were. As more of the world's software gets built and run by agents alongside humans, security stops being one team's concern and becomes everyone’s ground floor. With these improvements, Railway will continue to be the best place for humans and agents to bring software to life. We'll keep sharing updates in the link below status.railway.com/incident/…

The preliminary report related to the October 21st Security Incident is now available. blog.railway.com/p/prelimina…

An urgent notice from the Railway team blog.railway.com/p/security-…

“Who touched prod?” Now with filters Changelog #0312 • Activity feed filters • Guided IaC migration • Cron jobs in the CLI • Fixes and improvements railway.com/changelog/2026-1…

Railway has been named part of the #Disruptors60 by @TechCrunch 🎉 Our mission has always been to get compute in the hands of every builder. With agents, everyone is a builder. Build with us.

Congratulations to @tan_stack on TanStack Starts stable 1.0 release! Run your entire application on Railway. Frontend to API, databases, sandboxes and agents. We've made getting started easy. Docs: docs.railway.com/guides/tans… TanStack Start + Sandboxes: railway.com/deploy/tanstack-…

Lights. Camera. Models. Changelog #0311 - it's just Railway on iOS - Railway Authentication - OpenRouter Integration in PB railway.com/changelog/railwa…

We're adding @OpenRouter support to Priority Boarding users in Railway @OpenRouter lets you access wider models for all things agent, whether its our harness in a Cloud Agent, or our bots. Models like @grok 4.7, @Muse Spark 1.3 and more What models do you want next?

New for enterprise admins: Railway Authentication 🔒 Put staging previews and internal tools behind a Railway login, so only project members get through Set it for a whole environment and forks or one service at a time blog.railway.com/p/railway-a…

You can now use your @ChatGPT subscription in Railway Once connected, you can set your default model to GPT-6 Astra, GPT-6.1 Sol or GPT-6 Luna, and use them with the Railway Agent, Discord / Slack bots, or in "railway code" Enable it in Priority Boarding Happy building!