passiveincome

It seems like they still struggle with Security exploits--It's not a perfect system. For example:

https://blog.heroku.com/archives/2013/1/9/password_hijacking...

Also, you could get pretty solid protection and faster response time with something like unattended-upgrades

https://help.ubuntu.com/community/AutomaticSecurityUpdates

I think the value proposition mostly lies in the autoscaling, but seems like a waste in aggregate since most apps never hit any sort of scale.

That's the disconnect for me. There have to be prebuilt Amazon AMIs with push to deploy functionality for various stack flavors. I guess the simplicity and allure of Heroku's git integration makes it easy for developers to forego research on those. It still seems one hell of a price to pay especially when coupled with vendor lock-in (Disclaimer: I don't know if Heroku PaaS locks you in as much as say, GAE)

Am I correct that this represents a 10x cost over an IaaS provider like Digital Ocean? What features in the Heroku platform justify that? Not trolling, but looking for some brief and logical input that'll give me that 'aha' moment