Since we introduced Heroku CI over a year ago, we've been hard at work developing features aimed at making your testing speed even faster and workflow more optimized. Today we are pleased to announce Heroku CI Parallel Test Runs and the Heroku CI API are now generally available (GA) for all Heroku customers. Parallel Test Runs allows you to split up and execute test runs on up to 16 nodes. With the Heroku CI API, you can create, trigger, and receive test run info from your own custom workflow or CD tools. Additionally, we are opening up our support for cross-browser UAT via integration with third-party providers to private beta participants.

Need for Speed

As applications grow and...


Today we are proud to announce that Heroku has achieved several important compliance milestones that provide third party validation of our security best practices:

  • ISO 27001 Certification: Widely recognized and internationally accepted information security standard that specifies security management best practices and comprehensive security controls following ISO 27002 best practices guidance.
  • ISO 27017 Certification: A standard that provides additional guidance and implementation advice on information security aspects specific to cloud computing.
  • ISO 27018 Certification: Establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect...

Today we are pleased to announce general availability of Heroku Shield Connect, the latest addition to our lineup of Heroku Shield services.

Heroku Shield, announced last year, enabled new capabilities for Dynos, Postgres databases and Private Spaces that make Heroku suitable for high compliance environments such as those that fall under the Health Insurance Portability and Accountability Act (HIPAA) regulations. Heroku Shield Connect extends this offering by enabling high performance, fully automated, and bi-directional data synchronization between Salesforce and Heroku Postgres for companies that need to build HIPAA-compliant applications - all in a matter of a few clicks.

With this...


Today we’re announcing two exciting TLS improvements for apps running in Private Spaces—Heroku’s runtime optimized for security-sensitive workloads that require network and tenant isolation:

  • Automated Certificate Management to automatically create, configure, and renew free TLS certificates for custom domains on Private Space apps
  • Expanded and updated cipher suite selections for TLS/SSL termination for Private Space apps

Together, ACM and greater TLS cipher suite flexibility makes building secure apps in Heroku Private Spaces simpler and less burdensome. Read on for details.

Automated Certificate Management

Automated Certificate Management (ACM) is now available at no extra cost for...


On May 10, 2018, we received notice about two critical vulnerabilities in Redis, both embargoed until this morning.

Upon this notice, our Data Infrastructure team proceeded to patch all internal and customer databases in response to these vulnerabilities. As of today, all customer databases have been patched successfully.

At Heroku, customer trust is our most important value - and we are grateful to have your trust in keeping a globally-distributed data fleet safe from harm. If you’re interested in more behind the scenes details, check out our engineering blog post on how our Data Infrastructure team undertook the effort to patch our entire Redis fleet.


Browse the archives for news or all blogs Subscribe to the RSS feed for news or all blogs.