3 ms·
What in particular is Heroku missing to pass level 3 and 4? Hit and run comments aren't really useful. Some detail and if possible some suggestions for improve
by spitfire 12y ago
What in particular is Heroku missing to pass level 3 and 4?
Hit and run comments aren't really useful. Some detail and if possible some suggestions for improvement really help. Even if they can't be implemented for some reason.
- grandalf 12y ago> What in particular is Heroku missing to pass level 3 and 4? It's mostly documentation. If Heroku has built a secure system and documented it adequately, then it would easily pass SAQ A-EP. One easy example: Maybe Heroku keeps logs of all HTTP requests that include params containing credit card numbers. Nobody knows.