Feature Requests

Currently, there’s no way to securely use an API key while controlling my web application. I’m developing an API to monitor the server's boot status and attempted to use the List Events feature. However, I can't keep the API key completely safe due to platform limitations. It would be beneficial to have the option to restrict the API key's access to specific actions, like only allowing it to use the List Events API.

My bank card does not allow international payments, and Render currently only accepts debit/credit cards processed in USD. This makes it difficult to upgrade from countries where international transactions are restricted. It would be very helpful if additional payment options (such as local payment methods like UPI or alternative billing options) were supported

My PostgreSQL database (dpg-d98iv06rnols73fdbr4g-a) repeatedly changes from Available to Unavailable every few minutes. The logs show repeated archive-push failures with exit code 82, although the database occasionally recovers temporarily. My production Django application contains important pharmacy data, and the database becomes unavailable, causing my application to stop working and scheduled jobs (such as nightly emails) to fail. Could you investigate why the managed PostgreSQL instance is repeatedly becoming unavailable and help stabilize or recover it?

The bug isn't strictly security-related, but rather has to do with the logic behind service shutdowns. If you run a NodeJS web service and use a Long Polling connection internally, for example for Telegram bots (Telegraf library), and then stop the web service, HTTP connections stop working (as expected), and the console reports that the server is stopped. However, the bots continue to run (via Long Polling), meaning the server is still running, even though it's listed as stopped. Free Tier was used where a bug occurred. I would be happy to receive a nice bonus if this report helps make your services better. My Workspace ID: tea-csppavl6l47c73cudpd0

For financial services products (UK is a FinTech hub) many agreements require that data be located within the UK.

Render currently offers built-in, free DDoS protection powered by Cloudflare. We also offer Inbound IP Rules: https://render.com/docs/inbound-ip-rules . This post is about offering a broader, configurable Web Application Firewall. Please share specific features you'd like to see in a WAF.

My database provider (TigerData) requires a (AWS) Private Link's endpoint IP. This is currently a known limitation on Render (see the note on Private Link not supporting Private DNS: https://render.com/docs/private-link#limitations ), but I'm hoping that Private DNS for Private Link can be implemented soon 🤞🙏

At the moment, when you change any service's environment fromGroup field to another env group (on same line), it links that group to the service but the env group that was replaced on the fromGroup line remains as a linked env group. It would be nice to configure a blueprint to replace an environment group when you edit fromGroup inline. ex.: services: - type: web - name: test-service ... envVars: - fromGroup: test-env-1 ^ If we changed 'test-env-1' to 'test-env-2' on the same line, 'test-service' would have BOTH test-env-1 and test-env-2 linked. My request is that it just replaced the linked group.