how to secure app and source code in heroku

Solution 1:

At the company level, you need to share with others, right?

Don't share your account. Every user should have their own account.

Share your apps.

You can create a Team for your company. Apps can then be owned by the team, and users can be assigned roles for each app the Team owns. You can even transfer apps from your personal account to the Team after creating it.