Salesforce incident

A recent security update for Common Runtime applications in the EU region may have unintentionally enforced a stricter policy for TLS certificates used for app default domain TLS termination (<app>.h

Resolved after 1 hour 11 minutes, affecting HEROKUEUROPE, on August 25, 2026.

monitoring Aug 25, 2026, 03:40 PM UTC

A recent security update for Common Runtime applications in the EU region may have unintentionally enforced a stricter policy for TLS certificates used for app default domain TLS termination (.herokuapp.com). This caused some clients to experience TLS handshake failures and to be unable to connect to apps. Engineers have identified the issue and we are working on remediating.

Started
Aug 25, 2026, 03:01 PM UTC
Resolved
Aug 25, 2026, 04:13 PM UTC
Duration
1h 11m
Detected by Pingoru
Aug 25, 2026, 03:01 PM UTC

Affected components

HEROKUEUROPE

Update timeline

  1. identified Aug 25, 2026, 03:01 PM UTC

    Degradation Started: herokuServiceDegradation

  2. monitoring Aug 25, 2026, 03:40 PM UTC

    A recent security update for Common Runtime applications in the EU region may have unintentionally enforced a stricter policy for TLS certificates used for app default domain TLS termination (.herokuapp.com). This caused some clients to experience TLS handshake failures and to be unable to connect to apps. Engineers have identified the issue and we are working on remediating.

Your product runs on more than Salesforce

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →