# Security Compliance Published articles for Security Compliance. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Developer portal security and governance best practices DevFeed: [Developer portal security and governance best practices]() Original publisher: [Read original article]() Author: Jesse Wang Published: 2026-09-17T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [internal developer portal](), [Security](), [Access Control](), [Automation](), [audit](), [Vulnerabilities](), [Terraform](), [Deployment]() Tags: [access-control](), [auditability](), [automation](), [developer](), [governance](), [hardcoded-credentials](), [internal-developer-portal](), [microservices](), [security](), [security-compliance]() ### AI overview This article presents security and governance practices for internal developer portals. It focuses on role-based access control, automated audit logging, centralized visibility, software catalog governance, and reducing risks from infrastructure drift and workflow sprawl. ### Source excerpt Enhance developer portal security, compliance, and auditability without slowing down engineering teams. See how Harness helps simplify IDP governance. | Blog ## Fine-Grained Access Control Now Available for All Heroku Customers DevFeed: [Fine-Grained Access Control Now Available for All Heroku Customers]() Original publisher: [Read original article]() Author: Alberto Sigismondi Published: 2026-08-21T17:07:29Z Content type: release Language: en Sources: [Heroku]() Topics: [Heroku](), [Access Control](), [Security](), [IAM](), [Zero Trust](), [legacy]() Tags: [access-control](), [deploy](), [heroku](), [iam](), [identity-and-access-management](), [least-privilege](), [legacy](), [news](), [permissions](), [pipelines](), [security](), [security-compliance](), [zero-trust]() ### AI overview Heroku announces that Fine-Grained Access Control is available to all customers. The feature replaces fixed legacy roles with capability-based roles and app-specific permissions for roles such as view, deploy, operate, and manage. ### Source excerpt Fine-Grained Access Controls is now available to all Heroku customers. Heroku's legacy system gave you predefined roles like admin, member, or collaborator, each with a fixed bundle of permissions. It replaces that system with fine-grained roles like view, deploy, operate, and manage, with specific capability sets. Access control is managed at an app-specific layer, giving [...] The post Fine-Grained Access Control Now Available for All Heroku Customers appeared first on Heroku. ## The tech leader's mandate: Use engineering to accelerate sales velocity DevFeed: [The tech leader's mandate: Use engineering to accelerate sales velocity]() Original publisher: [Read original article]() Published: 2026-02-04T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Security](), [supply-chain-security](), [Software Engineering](), [Development]() Tags: [chainguard](), [chainguard-containers](), [chainguard-for-startups](), [chainguard-libraries](), [chainguard-startups-pricing](), [container-images](), [containers](), [packages](), [sales](), [sboms](), [secure-by-default](), [security](), [security-compliance](), [software-supply-chain](), [velocity]() ### AI overview This article argues that security and compliance concerns can slow enterprise sales for startups. It recommends embedding security into the software development lifecycle and presents Chainguard's secure-by-default components as a way to reduce software supply chain friction while supporting product development and sales velocity. ### Source excerpt Chainguard can help your engineering team accelerate sales velocity by reducing security friction and enabling engineering to be a growth accelerator. ## Optimizing Enterprise Operations with Heroku's Advanced Logging Features DevFeed: [Optimizing Enterprise Operations with Heroku's Advanced Logging Features]() Original publisher: [Read original article]() Author: Julián Duque Published: 2025-05-13T15:00:13Z Content type: article Language: en Sources: [Heroku]() Topics: [Heroku](), [Logging](), [log management](), [distributed-systems]() Tags: [backend](), [cloud](), [cloud-infrastructure](), [distributed](), [distributed-systems](), [ecosystem](), [heroku](), [logging](), [monitoring](), [operations](), [performance-optimization](), [private-spaces](), [security-compliance](), [solarwinds](), [visibility]() ### AI overview The article explains how logging supports enterprise operations and presents Heroku's Private Space Logging as a way to centralize logs from applications and related services. It also mentions scalability, security, data residency, log drains, and compatibility with monitoring tools. ### Source excerpt Logging is the unsung hero of enterprise operations--quietly saving the day, one log line at a time. Imagine trying to maintain successful applications without knowing what's happening inside them. This would be like flying a plane blindfolded at night, in a storm, with no instruments. Spoiler alert: Neither scenario would end well! Today's distributed systems [...] The post Optimizing Enterprise Operations with Heroku's Advanced Logging Features appeared first on Heroku. ## Heroku AppLink Pilot Connects Heroku Applications to Agentforce and Salesforce Clouds DevFeed: [Heroku AppLink Pilot Connects Heroku Applications to Agentforce and Salesforce Clouds]() Original publisher: [Read original article]() Author: Zilin Zhou Published: 2025-03-04T15:02:00Z Content type: release Language: en Sources: [Heroku]() Topics: [Heroku](), [App](), [Development](), [Cloud]() Tags: [agents](), [applink](), [cloud](), [data-analytics](), [deploy](), [heroku](), [integration](), [integrations](), [news](), [product-features](), [salesforce](), [security](), [security-compliance]() ### AI overview Heroku introduces AppLink in pilot to simplify securely connecting Heroku applications with Agentforce, Data Cloud, and Salesforce Clouds. The article describes a single-command integration approach intended to improve setup, connection management, security, visibility, and governance. ### Source excerpt Developers love Heroku for its elegance and simplicity to easily build and deploy any type of app or service in the languages they love. This flexibility enables developers to build robust custom applications or specialized capabilities like agent actions, complex pricing calculations, or real-time transformations and processing. These are often capabilities where Salesforce Admins and [...] The post Heroku AppLink Pilot: The Shortest Path to Bring Your Code to Agentforce appeared first on Heroku. ## What is Data Residency? Data Residency Concerns for Global Applications DevFeed: [What is Data Residency? Data Residency Concerns for Global Applications]() Original publisher: [Read original article]() Author: Ethan Limchayseng Published: 2024-08-22T21:58:11Z Content type: article Language: en Sources: [Heroku]() Topics: [data](), [Data Management](), [Cloud](), [Security, Privacy and Abuse Prevention](), [Heroku]() Tags: [cloud](), [cloud-infrastructure](), [compliance](), [data](), [data-management](), [data-protection](), [dynos](), [engineering](), [heroku](), [privacy](), [private-spaces](), [security-compliance]() ### AI overview This article explains data residency, including the legal requirements governing where data is stored and processed. It discusses how global applications affect compliance obligations and notes that cloud regions and services such as Private Dynos from Heroku Enterprise may help address those requirements. ### Source excerpt Data Residency Compliance Is Possible with the Right Cloud Provider Because today's companies operate in the cloud, they can reach a global audience with ease. At any given moment, you could have customers from Indiana, Indonesia, and Ireland using your services or purchasing your products. With such a widespread customer base, your business data will [...] The post What is Data Residency? Data Residency Concerns for Global Applications appeared first on Heroku. ## Heroku Card Payments Are Back in India DevFeed: [Heroku Card Payments Are Back in India]() Original publisher: [Read original article]() Author: Tim Lawrence Published: 2023-08-03T20:00:00Z Content type: release Language: en Sources: [Heroku]() Topics: [Heroku](), [Authentication](), [Protocol (disambiguation)]() Tags: [authentication](), [authorization](), [customers](), [developers](), [email](), [heroku](), [india](), [news](), [notifications](), [partners](), [payments](), [platform-updates](), [protocol](), [security-compliance]() ### AI overview Heroku resumed accepting credit and debit cards issued by Indian financial institutions after implementing 3D Secure and support for Reserve Bank of India e-mandates. The article explains the technical and administrative work involved, including delayed webhook handling and user notifications. ### Source excerpt We re-enabled payments to Heroku in India! At the start of August, we resumed accepting credit and debit cards issued by Indian financial institutions. From the engagement on our public roadmap, we know that there are many developers in India eager to get back on the platform. We want to address the work done to [...] The post Heroku Card Payments Are Back in India appeared first on Heroku. ## Security Improvement: Subdomain Reuse Mitigation DevFeed: [Security Improvement: Subdomain Reuse Mitigation]() Original publisher: [Read original article]() Author: Andre Soto Published: 2023-07-20T19:06:48Z Content type: release Language: en Sources: [Heroku]() Topics: [Heroku](), [Security](), [Vulnerabilities]() Tags: [cloud-infrastructure](), [developer-tools](), [heroku](), [news](), [platform](), [redirection](), [security](), [security-compliance](), [vulnerability]() ### AI overview Heroku changed the built-in domain format for its apps on 14 June 2023 to mitigate subdomain reuse, also known as subdomain takeover. The new format appends a random identifier, preventing deleted application names from being reused to take over former subdomains and reducing associated cookie-harvesting, phishing, and OAuth-token leakage risks. ### Source excerpt Summary Subdomain reuse, also known as subdomain takeover, is a security vulnerability that occurs when an attacker claims and takes control of a target domain. Typically, this happens when an application is deprecated and an attacker directs residual traffic to a host that they control. As of 14 June 2023, we changed the format of [...] The post Security Improvement: Subdomain Reuse Mitigation appeared first on Heroku. ## Introducing the Apollo Trust Center DevFeed: [Introducing the Apollo Trust Center]() Original publisher: [Read original article]() Author: Tad Whitaker Published: 2023-02-07T08:35:00Z Content type: release Language: en Sources: [Apollo Blog]() Topics: [Security](), [GraphOS](), [soc 2](), [Cloud]() Tags: [announcement](), [backups](), [customer-trust](), [download](), [gdpr](), [graphos](), [registry](), [reports](), [routing](), [security](), [security-compliance](), [soc](), [trust-center]() ### AI overview Apollo launches the Apollo Trust Center, a centralized portal for security, compliance, reliability, and legal documentation. It includes SOC 2 reports, penetration-test summaries, security questionnaires, reliability metrics, and privacy-related legal materials. ### Source excerpt Today, we're launching our new Trust Center, a single source of truth for Apollo's security, compliance, reliability, and legal documentation. Here's what you need to know. Understanding the Apollo Trust Center The Apollo Trust Center is for anyone with questions or needs concerning Apollo's compliance, security, reliability, or legal policies.