Question 1

How is a key different than the license?

Accepted Answer

Unlike a license, which outlined a commercial relationship between the code consumer and us, the key simply provides a free mechanism for us to gather insights into how our tools are used.

Question 2

I was using custom runners or a DIY self-hosted caching solution. What should I do?

Accepted Answer

It's important to note that not all custom task runner use-cases were caching related. If you want to execute some code before or after tasks are executed, we have a new API for you to leverage which is documented here: https://nx.dev/deprecated/custom-tasks-runner#deprecating-custom-tasks-runner.
 If you were leveraging the custom tasks runners API to facilitate remote caching then you now have the choice between the three remote caching options outlined on this page: Nx Cloud, Self-Hosted via Nx Plugins, and Self-Hosted via your own OpenAPI server.

Question 3

How do I implement custom authentication for my self-hosted cache?

Accepted Answer

You implement custom authentication by using our OpenAPI solution

Question 4

What cache poisoning vulnerabilities affect self-hosted solutions?

Accepted Answer

CREEP (Cache Race-condition Exploit Enables Poisoning) is a critical vulnerability (CVE-2025-36852) that affects self-hosted remote cache solutions.
It allows any developer with pull request access to inject malicious code into your production builds through a race condition in the caching system. The attack is undetectable because it happens during artifact creation, before any security measures take effect.

Question 5

Is my self-hosted cache setup secure enough?

Accepted Answer

Most self-hosted cache setups offer basic functionality but lack critical security features. Without enforced input validation, branch isolation, and real-time access control, self-hosted caches are vulnerable to cache poisoning, where compromised or unverified artifacts can silently pollute your builds. We recommend using Nx Cloud, which provides infrastructure-level protections, making it a safer choice for organizations in highly regulated industries.

Question 6

What security measures does Nx Cloud offer beyond the official plugins and third party plugins?

Accepted Answer

Nx Cloud includes enterprise-grade security features designed to give organizations more control over access and data protection:

- Access Management: Nx Cloud supports **individual user authentication tied to personal accounts, enabling precise control over who can access cached data. If a user leaves the company or changes roles, their access can be revoked immediately — without impacting others.
- Personal Access Tokens: Teams can issue and revoke multiple access tokens, allowing fine-grained control over automation and integrations.
- No Cache Overrides: Nx Cloud prevents unauthorized cache modifications.
- SOC 2 Compliance: Nx Cloud is SOC 2 certified, demonstrating a high standard for security, availability, and confidentiality.
- Secure Deployment Options: Nx Cloud though Nx Enterprise, includes single-tenant or on-prem options for teams needing full control over their data storage and access policies.

Nx Remote Cache

Nx Cloud remote cache

Self-hosted cache

Build your own

Have questions?

Ready to
build smarter and ship faster?

Nx Cloud remote cache

Self-hosted cache

Build your own

Ready tobuild smarter and ship faster?

Ready to
build smarter and ship faster?