Heroku's constant endeavor is to let developers focus on creating the apps, whereas Heroku provides everything from build, deployment, and scalability services to infrastructure management services. When it comes to security, Heroku applies best practices and manages platform security so that the customers can devote their energies entirely to building robust, highly available, and performant web apps on the Heroku platform.

The Heroku platform protects its customers from security threats—from physical to application, isolating user applications and related data—by enforcing tighter controls at every layer of the platform. Heroku's ability to rapidly deploy security updates without customer intervention or service interruption makes it a compelling PaaS environment to use for deploying applications of any scale.

If we break down the Heroku application development process into subparts, we'll see that any Heroku application's life cycle comprises the following: