Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in Performance Monitor, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, please email [email protected] with:

A description of the vulnerability
Steps to reproduce the issue
The potential impact
Any suggested fixes (optional)

You should receive a response within 72 hours. We will work with you to understand the issue and coordinate a fix before any public disclosure.

Scope

This policy applies to:

SQL collection and reporting stored procedures
Dashboard and Lite WPF applications
Installer utilities
SQL installation scripts

Security Best Practices

When using Performance Monitor:

Use Windows Authentication where possible
Use dedicated service accounts with minimal required permissions
Enable encryption for SQL Server connections
Keep your SQL Server instances patched and up to date
Review the installation documentation for recommended security configurations

There aren’t any published security advisories