2 ms·

Depends. Often yes but at Heroku/Salesforce’s scale you really need a lot of security expertise in-house too.