Trust Center is now in the Netlify Dashboard
Netlify's security and compliance document library has moved into the Netlify Dashboard. To request access and learn more about the certifications and documents available, go to https://www.netlify.com/trust-center/. Any signed-in user, on any plan, can view our certifications, subprocessor list, and available compliance documents from their user settings. More sensitive documents, such as our…
Read the full story on Netlify BlogHave you worked with this?
The story is what was announced. Nobody has discussed it yet, so if it touches your team, a short post about what you’ve seen helps the next reader.
More from Netlify
Recent updates from Netlify, so you can tell whether this is a one-off or part of a pattern.
SvelteKit 3 just works on Netlify
SvelteKit 3 is out today, and it just works on Netlify on day one. To upgrade, run: npx sv migrate sveltekit-3 The migration tool handles most of the mechanical changes for you, including moving your config and updating imports. You can also check out the official migration guide. What’s new Some highlights include: Vite 8, SvelteKit 3 requires Vite 8, bringing faster builds powered by Rolldown.…
Security Update: Multiple vulnerabilities in Next.js
The Next.js team has disclosed seven security vulnerabilities in Next.js (one high, five medium, one low), patched on September 30, 2026 in 15.5.27 and 16.3.8. The issues span server-side request forgery (SSRF), cache poisoning, and information disclosure. Several of them do not affect apps hosted on Netlify. Here's what Netlify customers need to know. Summary Some of these vulnerabilities affect…
Security Update: Cross-site scripting in TanStack Start
The TanStack team has disclosed a critical cross-site scripting (XSS) vulnerability in TanStack Start. A crafted URL can cause an affected app to return attacker-controlled HTML from its own origin, which may run attacker-supplied JavaScript in a visitor's browser. Here's what Netlify customers need to know. Vulnerabilities GHSA-qx66-fv34-fjm8 (CVE-2026-102989): Unauthenticated reflected XSS in…
More in Developer Tools
What other companies in Developer Tools are doing. The category page shows who’s active, side by side.
Scale without limits: Multigres, OrioleDB, and dbarena
The app your agent built in minutes stays on the same Postgres from prototype to petabyte.
Operate with confidence
More data, more tools and more control so your agent has what it needs to observe your project, investigate issues and propose fixes, autonomously.
Build anything: Supabase from code, and an MCP server for your app
Your agent sets up the backend from code, your users' agents work with your app through its own MCP server, and long-running tasks run in Supabase Compute.
RustRover vs VS Code + rust-analyzer: What Changes in Your Rust Workflow
As the team behind a dedicated Rust IDE, we’re naturally curious to see how RustRover stacks up against other popular setups for Rust development and the strengths and trade-offs of each one. This article is the first in a series where we’ll look at different Rust workflows. We’re not unbiased, but we want to give […]