Has anyone done a security review of Heroku alternatives? I see lots of comments about moving there and using them instead of Heroku because of this incident. But that's hardly a justifiable reason alone, since those new platforms are probably worse off in security.

Fly have https://news.ycombinator.com/user?id=tptacek working for them so it's hard to imagine they would get security wrong.

Is render SOC 2 certified? ISO 27001? Those are fairly standard. If they don’t have either it’s going to be a hard time getting any serious business to migrate.

Render will have these certifications late summer (we're currently being audited for both).

Aptible has always prioritized security, and is a competitive alternative. https://www.aptible.com/heroku-alternative/