diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..9249060 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,39 @@ +# Security Policy for Atop + +## Overview + +Atop is a system and process monitor for Linux written in C. This document outlines our security policy regarding the handling of vulnerabilities and security issues that may arise with the use of Atop. + +## Reporting Security Issues + +If you discover a security vulnerability in Atop, please report it as soon as possible to the maintainers. You can reach us via the following channels: + +- Email: security@atopmonitor.org +- GitHub Issues: https://github.com/Atoptool/atop/issues + +## Security Updates + +We routinely monitor the security landscape for vulnerabilities that may affect Atop. Security updates will be addressed promptly, and you will be notified through the channels mentioned above. + +## Responsible Disclosure + +We encourage responsible disclosure of vulnerabilities to ensure that users are protected from potential threats. Please do the following: + +- Do not disclose the vulnerability publicly until the issue has been resolved. +- Provide us with sufficient information to reproduce the issue, including steps and any relevant code snippets. + +## Security Best Practices + +To ensure the security of your installation of Atop, we recommend the following best practices: + +- Keep your installation up to date: Regularly update to the latest version of Atop. +- Review configurations: Ensure your configurations are secure and follow default security recommendations. +- Monitor system logs: Regularly check your system logs for unusual activity that may indicate a security issue. + +## License + +Atop is open-source software licensed under the GNU General Public License v2.0. + +--- + +This security policy is subject to change. For the latest information, please refer to this document. We appreciate your cooperation in keeping Atop secure.