id author title date pages extension mime words sentences flesch summary cache txt www-reddit-com-5014 Rails auto-scaling on Heroku : Heroku .html text/html 584 57 73 One issue with hirefire is they request account level oauth tokens that essentially give them ability to do anything with your apps, where Rails Autoscaling worked with us to create a partnership and integrate with our "official" add-on APIs that limits security concerns and are scoped to the application that's being scaled. A lot of heroku customers use hirefire so please don't think I'm spreading FUD, but you should be aware you're giving a third party very broad rights to do things to your apps. "Official" add-on providers are given limited scoped tokens to (mostly) only the actions / endpoints they need, minimizing blast radius if they do get compromised. The Heroku API Key provided full access to your account, but with OAuth we're able to limit our access scope. I wonder what keeps hirefire from being an official add-on provider and using more scoped access. ./cache/www-reddit-com-5014.html ./txt/www-reddit-com-5014.txt