Security Monitor server is running. See /api/threats and /api/stats.