Web hosting review

Heroku

Heroku is a Salesforce cloud platform for apps that run in managed containers called dynos, with Postgres and other data services as add-ons. Its site clearly explains dyno and database prices, per-second billing, support hours and response times, Postgres backups and regions. A few things were harder to pin down from the website alone: a company registration number, refunds outside outages and tax exemptions, and malware protection.

Website
heroku.com
You sign with
Heroku, Inc., USA (card payments)
Founded · based
2007 · San Francisco, California, USA

All ten signals at a glance

7 clear × 10 + 3 partly clear × 5 + 0 not seen × 0 = 85 / 100

Price over time

No intro price, so nothing jumps at renewal

Heroku shows one price per dyno, with no intro discount and no renewal price. Usage is prorated to the second and capped at the monthly price, with no minimum term shown; databases and other add-ons are extra. Monthly prices in US dollars from heroku.com/pricing on 21 Oct 2026; a help article says VAT is not included.

Price per month, before and after renewalSame price throughout
Basic
$7.00
same
Standard-1X
$25.00
same
Standard-2X
$50.00
same
$0$20$40$60

What we found

Each finding links to the Heroku page it came from. Prices are the US-dollar prices on heroku.com/pricing; a Heroku help article says VAT is not included and is the customer's to pay.

An AI read Heroku's public pages to write these findings. When something is partly clear or not seen, it may be explained on a page we didn't read, or our scan may have missed it.
Price

Honest pricing

Clear · 10 pts

Heroku has no intro price and no renewal price: each dyno and add-on has one monthly price, which is the most you pay if it runs all month. Usage is prorated to the second, so a Basic dyno ($7/mo) costs roughly $0.01 an hour, and each month's bill covers the month before. The Eco plan is different: a flat $5 a month for a pool of 1,000 dyno hours, charged in full even if you join mid-month. A help article says VAT and similar taxes are not included in invoiced amounts; the pricing page itself doesn't mention tax, and we didn't see a minimum term.

People

Who runs it

Partly clear · 5 pts

The additional terms for credit card customers say you contract with Heroku, Inc., a Delaware corporation, alongside the Salesforce Main Services Agreement. The About page says Heroku was founded in July 2007 by James Lindenbaum, Adam Wiggins and Orion Henry, and is now a business unit of Salesforce. The contact page gives Salesforce's address at 415 Mission Street, Suite 300, San Francisco. We didn't see a company registration number, or which entity customers outside the US sign with, on the pages we read.

Problems

Uptime in public

Clear · 10 pts

Heroku's incidents and maintenance are posted on the Salesforce Trust status site, with the older status.heroku.com still posting during a changeover. The Dev Center explains that the site shows each Heroku region, the services in it, a History tab of past statuses and incidents, and a Maintenance tab, with email and SMS alerts you can filter by service and severity. Both status pages load with JavaScript, so we couldn't read the current incidents ourselves. The Postgres plans list downtime tolerance per tier, from under 4 hours a month (99.5% expected uptime) on Essential to under 15 minutes on Premium; we didn't see a contractual SLA for dynos.

People

Reachable support

Clear · 10 pts

Support runs 12×5, from 9am to 9pm Eastern time, Monday to Friday, excluding US holidays, through tickets on help.heroku.com; email is only for people locked out of their account. Technical support is for paid dynos and paid add-ons, while billing and account help is open to everyone. The free level gets "best effort" replies. Paid Success plans give stated response times: 2 business days on Standard, 1 hour for business-stopping issues on Premier, and updates every 15 to 30 minutes on Signature, with phone access on the top two. Prices for these plans aren't on the page.

Price

Fair terms

Partly clear · 5 pts

We didn't see a money-back period. A help article says Heroku doesn't refund for incidents, maintenance or outages, and does refund after an approved tax exemption. Card customers are invoiced monthly in arrears, and must raise any billing dispute within 60 days of the charge. A help article walks through closing an account from Account Settings, and says you can't close it mid-billing period once paid usage has built up. The terms let Heroku suspend or end access for any reason, without prior notice, and change the terms over time; we didn't see a notice period for price changes.

Data

Backups you can use

Clear · 10 pts

Every Heroku Postgres plan can take free daily scheduled backups, kept for 7 days, plus weekly backups kept 1 to 8 weeks depending on the tier, and 12 monthly backups on Premium. You can also make manual backups (5 kept on Essential, 25 on Standard, 50 on Premium) and restore or download any of them yourself. Standard and Premium add continuous protection with rollback to any point in the past 4 or 7 days. The docs say scheduled backups send no failure alerts, and suggest another method for databases over 20 GB. Dynos have an ephemeral filesystem, so files on the app itself aren't backed up.

Data

Security basics

Partly clear · 5 pts

Automated Certificate Management gives every app free Let's Encrypt certificates for custom domains, renewed automatically a month before they expire. Multi-factor login is required for all customers, using Salesforce Authenticator, an authenticator app, a security key, a built-in authenticator such as Touch ID, or recovery codes. The security policy describes DDoS mitigation, penetration tests and required SSL for Postgres connections, and Postgres data is encrypted at rest. We didn't see malware scanning on the pages we read.

Data

Data location

Clear · 10 pts

Standard apps run in one of two regions, United States or Europe, without a named city. Private Spaces add 10 named cities: Dublin, Frankfurt, London, Montreal, Mumbai, Oregon, Singapore, Sydney, Tokyo and Virginia. You choose the region when you create an app and can't move a standard app later. The docs say a region doesn't guarantee all data stays there, and logical Postgres backups are stored in the US wherever the database is. The GDPR article links the Salesforce data processing addendum, with binding corporate rules and standard contractual clauses.

EuropeEurope: standard region, city not namedIreland: DublinGermany: FrankfurtUK: London
AmericasUSA: standard region, plus Oregon and VirginiaCanada: Montreal
Asia-PacificIndia: MumbaiSingaporeAustralia: SydneyJapan: Tokyo
Product

Real specs

Clear · 10 pts

Every dyno lists its memory and a compute figure next to its price, from 0.5 GB for Eco and Basic up to 126 GB on Performance-2XL. CPU on standard dynos is given as a relative share (1x to 4x or 2x to 8x), not as cores; the newer Fir dynos list vCPUs. Postgres plans list storage and connections, starting at 1 GB and 20 connections for $5/mo. The limits page sets a 2 TB soft bandwidth limit per app a month and 100 apps per account. "Unlimited" is used only for process types and background workers on Standard and Performance dynos.

Product

Easy exit

Clear · 10 pts

You can download any Postgres backup with one command, or get a download link that works for 60 minutes. The Git docs say Heroku's Git remote isn't meant as a stable repository and suggest keeping your code on GitHub or similar, so your code stays with you. Heroku doesn't sell domains, so there is no domain to transfer out. A help article explains how to close an account and suggests downloading your invoices first. We didn't see a fee for leaving.

What you get per plan

Memory, compute and prices come from the pricing page and the dyno types docs. These are the three always-on dynos most apps start with. Bars compare each row against the largest plan.

LimitBasicStandard-1XStandard-2X
Memory
0.5 GB
0.5 GB
1 GB
Compute (relative)1x-4x1x-4x2x-8x
Price per month
$7
$25
$50
Process typesUp to 10UnlimitedUnlimited
Bandwidth2 TB per app a month (soft limit)2 TB per app a month (soft limit)2 TB per app a month (soft limit)
BackupsWith a Postgres add-on: free daily backupsWith a Postgres add-on: free daily backupsWith a Postgres add-on: free daily backups

Tech stack

Best for Node.js, Python and PHP apps

Hosts are built for different kinds of sites. Here is what Heroku says it runs, and on which plans. Tech fit is separate from the signal score.

Best fit: tools built for it on regular plansSupported: runs on some plans, with limitsVPS plans: you set it up yourself on a serverNot offered: look at another host

Node.js, Python & PHP

Best fit

Node.js, Python and PHP are among the 10 officially supported languages, along with Ruby, Java, Go and .NET. Heroku builds your app with its own buildpacks on git push; the PHP docs list PHP 8.2 to 8.5 with Apache or Nginx, and the Node.js docs list versions 22, 24 and 26.

Plans: Any dyno, from Eco ($5/mo) or Basic ($7/mo)

Docker & containers

Supported

You can push your own Docker image to Heroku's container registry and run it on dynos. The docs list limits: no volumes, an ephemeral filesystem, HTTP only for web processes, x86_64 images only, and no automatic base-image security updates. Heroku recommends buildpacks unless you need a custom image.

Plans: Any dyno, standard or Private Spaces

Static sites

Supported

Static and single-page sites are served from a dyno by the Front-End Web buildpack, from plain HTML or a JavaScript build. There is no built-in CDN: the docs suggest putting Cloudflare or Fastly in front.

Plans: Any dyno, from Eco ($5/mo) or Basic ($7/mo)

WordPress

Not offered

There is no WordPress hosting product. A help article says WordPress "can be made to work", but uploads must go to an outside service such as Amazon S3 and plugins that write files may misbehave, because the dyno filesystem resets.

Plans: Not offered

Sales practices

Worth a closer look

We check five common sales practices and note them next to the score, without changing it. Two need a pass through checkout, which this scan didn't do. We'll add them on the next recheck.

  • Not noticed
    "Unlimited" without a stated limit. "Unlimited" appears only for process types and background workers. Memory, database storage and connections are listed as numbers, and bandwidth has a stated 2 TB soft limit.
  • Not checked yet
    Add-ons ticked for you at checkout. This scan didn't go through checkout. The docs show databases and other add-ons being added one at a time, each with its own price.
  • Not checked yet
    Prices that change at the payment step. A help article says VAT is not included in invoiced amounts and is the customer's to pay. We didn't check a final invoice.
  • Not noticed
    Countdown timers that reset. No timers or sale banners on the pages we read.
  • Not noticed
    Reviews with no source. The quotes on the homepage and dynos page carry a full name, job title and company.

Questions to ask Heroku

Each partly clear or unseen signal leaves a question that the website didn't answer for us. Heroku's support can probably answer them before you buy.

  • Who runs itWhat is Heroku, Inc.'s company registration number, and which entity do customers outside the US sign with?
  • Fair termsDo you refund unused time or mistaken charges, and how much notice do you give before a price change?
  • Security basicsDo you offer malware scanning or protection for apps running on dynos?