For Heroku - Expedited WAF does filter (inbound) for log4j - but I'm not sure there's a good way to outbound, even with Private Spaces. You can start a dyno tha

For Heroku - Expedited WAF does filter (inbound) for log4j - but I'm not sure there's a good way to outbound, even with Private Spaces. You can start a dyno that only has access to the other apps in the space, but if log4j was on one of the connected web app servers you'd still be in trouble. https://expeditedsecurity.com/heroku/how-to-block-log4j-vulnerability-on-heroku/ https://expeditedsecurity.com/heroku/how-to-block-log4j-vuln...