Cloud-native CNAPP profile
Google Security Command Center
The provider-native posture and threat detection tool for Google Cloud, comparable to AWS Security Hub and Microsoft Defender for Cloud.
Visit cloud.google.comSecurity Command Center is Google Cloud's built-in risk and security management service, covering vulnerability detection, misconfiguration management, and threat detection for Google Cloud environments. It is offered in tiered editions, from an always-on default tier to premium and enterprise tiers.
Who it fits
Organisations running workloads on Google Cloud that want native security posture and threat detection
Use cases
- —Cloud vulnerability detection
- —Misconfiguration and posture management
- —Threat detection for Google Cloud resources
- —Compliance monitoring
Strengths
- —Native, always-on coverage with no separate agent for the base tier
- —Deep integration with Google Cloud services and IAM
- —Tiered options from default to premium threat detection
Considerations
- —Scope is limited to Google Cloud, so multi-cloud estates need additional tooling
- —Advanced detection and posture features require a paid tier
Integrations
- —Google Cloud services including Compute Engine, GKE and BigQuery
- —Google SecOps
- —Third-party SIEM via export
- —Google Cloud IAM