1. A computer program product, comprising a non-transitory computer usable medium having a computer readable program code embodied therein, the computer readable program code adapted to be executed to implement a method, the method comprising: storing data for each of multiple tenants in a database system; providing network access to the database system for each of the multiple tenants by an application server, wherein the application server is communicably coupled to the database system and to a network; polling the database system for query plans by a query plan detection module; analyzing the query plans by the query plan detection module; and determining by the query plan detection module whether at least one of the query plans is suspect.