diff --git a/dashboard/app/app.yaml b/dashboard/app/app.yaml
index c30738886a67..04e3941f7aaf 100644
--- a/dashboard/app/app.yaml
+++ b/dashboard/app/app.yaml
@@ -25,7 +25,8 @@ handlers:
 - url: /static
   static_dir: dashboard/app/static
   secure: always
-- url: /(admin|cron/.*)
+# debug is for net/http/pprof handlers.
+- url: /(admin|debug|cron/.*)
   script: auto
   login: admin
   secure: always
diff --git a/dashboard/app/main.go b/dashboard/app/main.go
index 3b1749a45a0a..dbf95d5021f7 100644
--- a/dashboard/app/main.go
+++ b/dashboard/app/main.go
@@ -10,6 +10,7 @@ import (
 	"fmt"
 	"html/template"
 	"net/http"
+	_ "net/http/pprof" // app.yaml restricts this to admins
 	"net/url"
 	"os"
 	"regexp"