My tickets Create a ticket Enterprise Resources
Home > Search

Knowledge Base 10

MFA - Security Key What is a security key?
How does Heroku handle security vulnerabilities that affect the platform? I have read about a security vulnerability and I wanted to see if action was required on my part.
How can I increase/configure the expiration time of Heroku Dashboard sessions? Heroku dashboard requires login frequently.
How does Heroku Connect Secure My Data in Transit? You want to know what security measures are taken by Heroku Connect as it copies data from your Salesforce Organization to a Heroku Postgres database.
Why does my Heroku app support weak cipher suites for SSL/TLS? I have my Heroku app tested for SSL/TLS security. The result shows that the app supports weak cipher suites.
How do I disable support for TLS 1.0 or 1.1 on a Heroku App?
How do I rotate the credentials for a Heroku Postgres database? I want to rotate the credentials used to access a Heroku Postgres instance.
Why am I seeing information about other PostgreSQL processes or databases that aren’t related to my Heroku Postgres Essential database?
Why am I seeing connection errors for my Heroku Postgres database from an unexpected IP address? What are these unauthorized connection attempts? I'm seeing failed connection attempts in my Heroku Postgres logs, but I'm not creating these connections and they come from an IP address that I don't recognize. It looks like someone might be trying to hack my database: ``` sql_error_code = 28000 FATAL: no pg_hba.conf entry for host "122.180.247.11", user "postgres", database "postgres", SSL off ``` Variations of the above error might include the `user` being set to `root`, `admin`, `test`, or other default usernames.
Where do I get copy of DPA from Heroku? Customer is looking for a copy of DPA from Heroku for their business requirements

Dev Center articles 3

Security and Heroku/Salesforce Integrations When using Heroku and Salesforce together, particularly in the calling the Salesforce REST API, Salesforce Platform Events and Apex HTTP callouts scenarios, security posture may be improved with an exclusive trust relationship, preventing undesired traffic from the public internet.
Security Keys Use security keys for multi-factor authentication (MFA).
Heroku Security & Compliance Resources and Features This article introduces available compliance collateral, approaches for managing compliance on the Heroku platform and security features that can help reduce risk and meet compliance objectives.

Community

Engage with a community of passionate experts to get the answers you need

Heroku Status

Check for known issues on the Heroku Status website

heroku.com Blogs Careers Documentation
Terms of Service Privacy Cookies Cookie Preferences © 2025 Salesforce.com Your Privacy Choices