Skip to main content

Documentation

Get Started

Get Started with Google Cloud
Product List
Cloud Customer Care

Featured Products

Agent Platform
Apigee API Management
BigQuery
Compute Engine
Cloud CDN
Cloud Run
Cloud Storage
Cloud SQL
Gemini Enterprise
Google Kubernetes Engine
Looker

Cross-product Tools

Access and resources management
Costs and usage management
Infrastructure as code
SDK, languages, frameworks, and tools

Technology Areas

AI and ML
Application development
Application hosting
Compute
Data analytics and pipelines
Databases
Distributed, hybrid, and multicloud
Industry solutions
Migration
Networking
Observability and monitoring
Security
Storage

/

Console

English
Deutsch
Español
Español – América Latina
Français
Indonesia
Italiano
Português
Português – Brasil
עברית
中文 – 简体
中文 – 繁體
日本語
한국어

Sign in

Security Command Center

Start free

Overview Guides Reference Samples Resources

Documentation
- More
- Overview
- Guides
- Reference
- Samples
- Resources
Console

Discover
Product overview
Service tiers
Activate Security Command Center
Overview of activating Security Command Center
Standard tier enhanced and automatically activated for some customers
Plan for the activation
Activate Security Command Center Standard or Premium
Activate Security Command Center Enterprise for an organization
Configure additional security services
Modify Security Command Center Standard or Premium tier
Investigate findings, issues, and assets
Use Security Command Center in the Google Cloud console
Assess risk using Risk overview dashboards
Work with issues
Work with findings
- Overview of findings
- Review and manage findings in the console
- Query findings in the console
- Mute findings in Security Command Center
- Annotate findings with security marks
Configure exports and notifications
Work with assets and resources
Explore the security graph using queries
Generate risk reports
- Risk reports overview
- Download risk reports
Gemini in Security Command Center
Manage security posture and compliance
Compliance Manager
Data security posture management
Security posture service
Detect vulnerabilities and misconfigurations
Services that detect software vulnerabilities
Detect possible attack paths with Risk Engine
Security Health Analytics
- Overview
- Use Security Health Analytics
- Remediate Security Health Analytics findings
- Custom modules for Security Health Analytics
Artifact Registry vulnerability assessment
Cloud Infrastructure Entitlement Management (CIEM)
Vulnerability Assessment for Google Cloud
- Enable and use Vulnerability Assessment for Google Cloud
- Allow Vulnerability Assessment to access VPC Service Controls perimeters
Vulnerability Assessment for AWS
Sensitive data discovery
- Sensitive data discovery overview
- Enable and use sensitive data discovery
Web Security Scanner
Validate your infrastructure against organization policies
Detect exposed resources
Investigate vulnerabilities
- View vulnerability findings
- Prioritize the remediation of vulnerabilities
Protect AI workloads and applications
Protect AI workloads with AI Protection
Protect AI applications with Model Armor
Detect and respond to threats
Detect threats
- Threat detection in Security Command Center
- Detect threats to GKE containers
- Detect threats to Cloud Run containers
- Detect threats to agentic workloads
- Detect threats from event logging
  - Event Threat Detection overview
  - Test Event Threat Detection
  - Use Event Threat Detection
  - Allow Event Threat Detection to access VPC Service Controls perimeters
  - Custom modules for Event Threat Detection
    Overview of custom modules for Event Threat Detection
    Create and manage custom modules
- Detect and review sensitive actions
- Detect threats to VMs
- Detect external anomalies
- Identify correlated threats
  - Correlated Threats overview
  - Test Correlated Threats
Investigate and respond to threats
Secure code and integrate with CI/CD
Assured Open Source Software (Assured OSS) for code security
- Integrate with Assured OSS for code security
- Configure Assured OSS support for VPC Service Controls
- Configure and download packages from a remote repository
- Download packages from Artifact Registry
- Access security metadata and verify packages
- Security metadata fields
- Supported packages
Create artifact guard policies
Detect package vulnerabilities in Colab Enterprise notebooks
- Enable and use Notebook Security Scanner
- View Python package vulnerabilities
Additional configuration
Integrate with other products
Connect to other cloud providers in the Enterprise tier
- Amazon Web Services (AWS)
  - Connect to AWS for configuration and resource data collection
  - Modify the connector for AWS
- Microsoft Azure
  - Connect to Azure for configuration and resource data collection
  - Modify the connector for Azure
Use Mandiant Attack Surface Management with VPC Service Controls
Work with cases in the Enterprise tier
Work with cases
Work with playbooks
Use the Security Command Center API
Create and manage findings
Create, manage, and filter Notification Configs
- Create and manage Notification Configs
- Filter notifications
Create and manage security sources
Discover and list assets
- Configure asset discovery
- List assets
Monitor and troubleshoot
View audit logs
Troubleshooting steps
Error messages
Frequently asked questions

Get Started
Get Started with Google Cloud
Product List
Cloud Customer Care
Featured Products
Agent Platform
Apigee API Management
BigQuery
Compute Engine
Cloud CDN
Cloud Run
Cloud Storage
Cloud SQL
Gemini Enterprise
Google Kubernetes Engine
Looker
Cross-product Tools
Access and resources management
Costs and usage management
Infrastructure as code
SDK, languages, frameworks, and tools
Technology Areas
AI and ML
Application development
Application hosting
Compute
Data analytics and pipelines
Databases
Distributed, hybrid, and multicloud
Industry solutions
Migration
Networking
Observability and monitoring
Security
Storage

Home
Documentation
Security
Security Command Center
Guides

Assured OSS audit logging

Premium and Enterprise (Deprecated) service tiers (requires organization-level activation)

The Security Command Center Enterprise service tier will shut down on May 21, 2027. If your organization uses the Enterprise service tier, then the organization will automatically move to the Premium service tier on or after May 21, 2027. Contact your account representative or a

Assured OSS audit logging Stay organized with collections Save and categorize content based on your preferences.

Assured OSS audit logging