Anomalies can be detected and related mitigation actions can be executed. For example, a computing device receives, from a first source, first data associated with a first process of a payment service in support of transactions of a first plurality of users. The computing device generates first aggregated metrics based on the first data. The computing device determines, by using the first aggregated metrics as first input to a machine learning engine, an anomaly associated with the execution of the first process. The computing device determines, based on the anomaly and a history of anomalies associated with the execution of the first process, an indication of an outage associated with the first process. The computing device causes an execution of a mitigation action based on the indication of the outage. The execution of the mitigation action is in support of transactions of a second plurality of users.