This week, a serious security leak in OpenSSL came to light. The leak – named Heartbleed – also made AppSignal vulnerable. We have taken the following steps to secure our systems:
-
We immediately patched all our systems to use a version of OpenSSL with a fix for Heartbleed on Tuesday. This includes both our loadbalancers and Ruby installs.
-
We changed our SSL keys and reissued our certificates.
-
We replaced API tokens for external services we use.
-
We set a new session secret so all users have had to log in again.
We advise our users to change their password, user API token and Github credentials on AppSignal. We have no evidence of any malicious activity, but better safe than sorry. If any new information becomes available we will post it here and on our Twitter feed.
Wondering what you can do next?
Finished this article? Here are a few more things you can do:
- Try out AppSignal with a 30-day free trial.
- Reach out to our support team with any feedback or questions.
- Share this article on social media
Most popular AppSignal articles
Easily Monitor Multiple Heroku Apps with AppSignal
You can now monitor multiple Heroku apps from a single AppSignal instance.
See moreFine-Tune Your Charts with Minutely Metrics in AppSignal
Discover how minutely metrics in AppSignal deliver precise performance monitoring. Check out detailed performance data, spot anomalies quickly, troubleshoot issues more efficiently, and optimize your application's performance.
See moreSecure Your Sign-Ins with AppSignal's Single Sign-On
Secure team sign-ins and enhance access management with AppSignal's Single Sign-On Business Add-On. Integrate AppSignal with your identity provider for seamless, secure access management.
See more

Thijs Cadier
Thijs is a co-founder of AppSignal who sometimes goes missing for months on end to work on our infrastructure. Makes sure our billions of requests are handled correctly. Holds the award for best drummer in the company.
All articles by Thijs CadierBecome our next author!
AppSignal monitors your apps
AppSignal provides insights for Ruby, Rails, Elixir, Phoenix, Node.js, Express and many other frameworks and libraries. We are located in beautiful Amsterdam. We love stroopwafels. If you do too, let us know. We might send you some!
