PulseGuard is a local-first monitoring application. Please report suspected vulnerabilities through GitHub Security Advisories for this repository; do not publish sensitive exploit details in a public issue.

The application validates user-created outbound monitor URLs to reduce SSRF exposure. Built-in local system monitors and the Monitoring Lab are intentionally local-only exceptions. Never commit API keys, authorization headers, .env files, runtime databases, or logs containing sensitive values.

Security fixes are applied to the current main branch and the latest tagged release.