My security people flagged MongoDB Compass as a potential security threat. One thing they mentioned is that it might have been flagged because it installs it’s own local database server. But looking at the features of Compass, I don’t see any historical tracking. Can I tell them that MongoDB Compass does not install/run a local db on my PC?
No, Compass does not install any local database server. It’s worth mentioning that in Compass’ settings directory in the user’s home you may see some folders named *leveldb. This is an internal, file-based database-like functionality that Compass (and all the other applications built on Electron) include to store applications settings and preferences. But definitely no database servers.