Google Security Command Center

Google Cloud Security Command Center (SCC) is a security and risk management platform for Google Cloud workloads, data, and AI assets. The Enterprise tier extends coverage to AWS and Azure. Capabilities described: - Cloud posture management: agentless scanning for misconfigurations and software vulnerabilities, with high-risk findings shown on a risk dashboard. - Virtual red teaming: simulates attacks against a digital twin of the cloud environment to identify attack paths, toxic combinations, and chokepoints, with attack exposure scoring. - Built-in threat detection: detectors for suspicious activity in services such as Compute Engine, GKE, BigQuery, and Cloud Run. The page cites 175+ proprietary detectors. - AI protection: discovers AI assets, screens prompts and responses with Model Armor (prompt injection, sensitive data leakage, harmful content), and detects AI-specific threats. - Data Security Posture Management: uses 150+ classifiers from Sensitive Data Protection, data map visualization, and data controls for Cloud Storage, BigQuery, and the Gemini platform. - Compliance Manager: unifies policy definition, control configuration, monitoring, and audit. Audit Manager generates evidence for auditors. - Shift-left security: IaC scanning, posture controls, and access to Assured Open Source Software packages. - CIEM: shows who has access to which cloud resources, gives ML-generated recommendations to reduce unused permissions, and provides response playbooks. It works with Google Cloud IAM, Entra ID, AWS IAM, and Okta. Tiers: - Standard: no cost, for Google Cloud only. - Premium: subscription or pay-as-you-go pricing, with a 30-day free trial. - Enterprise: subscription pricing, multi-cloud, with automated case management and remediation playbooks. Pricing is based on the number of assets protected.