We currently support the following versions of NetworkMonitor with security updates:

We take security vulnerabilities seriously. Please follow these steps to report a security issue:

1. DO NOT open a public GitHub issue if the bug is a security vulnerability.
2. Instead, please send an email to umerfarooq.dev@gmail.com with:
   • Subject line: "Security Vulnerability: NetworkMonitor"
   • Description of the vulnerability
   • Steps to reproduce (if possible)
   • Potential impact
   • Any suggested fixes (if you have them)

• Acknowledgment within 48 hours
• Regular updates on the progress
• Credit in the security advisory when the issue is fixed

When using NetworkMonitor:

1. Always run with minimum required privileges
2. Keep the software updated to the latest version
3. Monitor logs for suspicious activity
4. Follow network security best practices
5. Report any security concerns immediately

Our standard disclosure timeline:

1. 0 hours: Initial report received
2. 48 hours: Initial acknowledgment
3. 7 days: Initial assessment completed
4. 30 days: Fix developed and tested
5. 45 days: Fix released
6. 60 days: Public disclosure

This timeline may be adjusted based on severity and complexity.

Security updates are distributed through:

• GitHub Releases
• Security Advisories
• Email notifications (for registered users)

We maintain security through:

1. Regular dependency updates
2. Automated security scanning
3. Code review requirements
4. Security-focused testing
5. Regular security audits

We appreciate the security research community's efforts in responsibly disclosing vulnerabilities. Security researchers who have contributed will be credited in our Hall of Fame (unless they wish to remain anonymous).