Neon Security & compliance Releases Stability

Same endpoint hostname in dev + prod env files

Part of the Connection hygiene check · fix arrives as a guide

What it is

The same Neon endpoint hostname appears in both the development and production environment files.

Why it matters

Development is pointed at the production database. Every local test, seed script, and migration experiment runs against real customer data, and a mistaken DELETE in a scratch script is a production incident.

How to fix it

Create a separate Neon branch for development and point the local environment at it. Branches are cheap and copy-on-write, so a development branch gives realistic data without touching production.

Run them all on your app

Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.