| Version | Supported |
|---|---|
| Latest | ✅ Yes |
| < Latest | ❌ No |
Do NOT create a public GitHub issue for security vulnerabilities.
This is especially important for a security-focused tool.
Please email: CaputoDav@gmail.com
Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
| Timeframe | Action |
|---|---|
| 24 hours | Acknowledgment |
| 72 hours | Initial assessment |
| 7 days | Status update |
| 30 days | Resolution target |
- Run with minimum required privileges when possible
- Review scripts before running on production systems
- Keep the tool updated for latest security checks
- Secure the scan logs in
/var/log/security-monitor/- they contain system information
# ❌ Bad - Running without review
curl https://... | sudo bash
# ✅ Good - Download, review, then run
git clone https://github.com/CaputoDavide93/EC2-Linux-Security-Monitor.git
less security-monitor.sh # Review the code
sudo ./security-monitor.sh- Running latest version of the scripts
- Scan logs have restricted permissions
- Cron job logs are secured
- Scripts are verified after download
Thank you for helping keep this project secure! 🙏