18 posts
Prompt injection is the #1 risk on the OWASP LLM Top 10, and most agents in production today defend against it with one of two heuristics: a defensive system prompt, or a hand-rolled allowlist. Neither is deterministic. Both fail silently the day someone slips a [SYSTEM OVERRIDE] line into an issue body, an email, or […] The post Stop prompt…
Most developers never see the 11 pack releases we shipped in the last 14 months as pack CLI maintainers. That’s actually a good sign—it means the infrastructure just works. When a critical vulnerability emerges requiring an immediate upgrade, the fix is shipped within days. Here’s what most developers don’t see: that same security patch now […] The post Behind the…
Modern applications on Heroku don’t just consist of code. They are living ecosystems comprised of dynos, databases, third-party APIs, and complex user interactions. As these systems scale, so do the logs and metrics. To efficiently extract the signals from the noise you need to understand system health in the context of external factors, like resource […] The post From Fragmented…
Today, we are thrilled to announce the General Availability (GA) of the Heroku GitHub Enterprise Server Integration. For our Enterprise customers, the bridge between code and production must be more than just convenient. It must be resilient, secure, and governed at scale. While our legacy OAuth integration served us well, the modern security landscape demands […] The post Heroku and…
Partners are a critical part of the community in driving customer success in technology adoption. Today, we’re thrilled to announce new solution expertise and program benefits for Salesforce Consulting Partners to expand their practice with Heroku AI PaaS. Building on our announcement from earlier this year, today’s announcement is designed to deepen technical expertise and […] The post Elevate Your…
Logging is the unsung hero of enterprise operations—quietly saving the day, one log line at a time. Imagine trying to maintain successful applications without knowing what’s happening inside them. This would be like flying a plane blindfolded at night, in a storm, with no instruments. Spoiler alert: Neither scenario would end well! Today’s distributed systems […] The post Optimizing Enterprise…
Heroku has announced exciting updates that will help Salesforce Consulting Partners expand their offerings, deepen their expertise, and deliver pro-code solutions to their customers. The updates are designed to accelerate the adoption and successful implementation of Heroku for our customers. These changes make it easy for customers to identify Consultants with Heroku expertise who can […] The post Heroku Introduces…
If your cloud application performs poorly or is unreliable, users will walk away, and your enterprise will suffer. To know what’s going on inside of your million-concurrent-user application (Don’t worry, you’ll get there!), you need observability. Observability gives you the insights you need to understand how your application behaves. As your application and architecture scale […] The post Best Practices…
As maintainers of the open source framework Electron, we try to be diligent about the work we take on. Apps like Visual Studio Code, Slack, Notion, or 1Password are built on top of Electron and make use of our unique mix of native code and web technologies to make their users happy. That requires focus: […] The post Electron on…
Ryan Basayne of Coralogix sits down with Morgan Shultz of Copado to discuss his experience leveraging Coralogix on the Heroku Platform. Copado is an end-to-end, native DevOps solution that unites Admins, Architects and Developers on one platform. DevOps is a team sport, and uniting all 3 allows you to focus on what you need to […] The post How Copado…
Here at Xplenty (Integrate.io), we have a number of customers who use Xplenty’s Heroku Add-on with Heroku Connect to enable Salesforce integration at their organization. Since Xplenty and Heroku Connect both provide a bi-directional data connection to Salesforce, you might think that you should use one or the other for your integration needs. But our […] The post Salesforce Integration:…
Yesterday we announced a major step towards making buildpacks a multi-platform, open standard by contributing to Cloud Native Buildpacks, a Sandbox Project hosted by the Cloud Native Computing Foundation. Today, we are announcing that you can now easily share your buildpacks with the world, by registering them with the Heroku Buildpack Registry. As of this […] The post Heroku Buildpack…
Asynchronous provisioning allows add-ons to perform out-of-band provisioning in a first-class way. It’s intended for add-on services that need extended time to set up and help make automated app setup and orchestration easier and less error-prone. The customer will be billed as soon as the add-on starts provisioning. This means the time and cost of […] The post Updated Async…
Need to quickly catch up on this past quarter's announcements? Here are the top three topics to tune in on: The Platform API for Partners provides many official endpoints that allow you to introspect security settings, discover other customer instances of the same add-on, and much more. With the Platform API, add-ons have an OAuth […] The post FY18 Q4…
The Platform API for Partners provides many official endpoints that the App Info API doesn’t support. These endpoints let you introspect security settings, discover other customer instances of the same add-on, and much more. Platform API for Partners endpoints are also more consistent and “better traveled.” Heroku uses these endpoints internally, and customers also use […] The post Updated Platform…
Need to quickly catch up on this past quarter's announcements? Here are the top three topics to tune in on: Heroku has expanded regions availability for Private Spaces and introduced the general availability of the Dublin region on September 26, 2017. Heroku users are able to run apps in all of the following Private Spaces […] The post FY18 Q3…
Need to quickly catch up on this past quarter's announcements? Here are the top three topics to tune in on: Heroku announced the general availability of continuous integration (CI) on May 18, 2017. This new feature creates copies of staging apps to run tests, then destroys the app and its add-ons. With Heroku CI, you […] The post FY18 Q2…
Need to quickly catch up on this past quarter's announcements? Here are the top three topics to tune in on: The new add-ons canary service will attempt to provision and deprovision your add-on service on an app named 'addons-canary'. These daily tests will help us proactively detect any failed provisioning attempts and ensure customers can […] The post FY18 Q1…
// type to search
