Product
Security Command Center
Google Cloud Security Command Center (SCC) is a centralized security and risk management platform for Google Cloud that provides visibility into security threats, misconfigurations, and compliance violations across GCP resources.
Chokepoint findings from Google Cloud Security Command Center Security Graph, identifying resources or resource groups where high-risk attack paths converge based on attack path simulations.
misconfiguration_finding
MediumMisconfiguration findings from Google Cloud Security Command Center Security Health Analytics, identifying incorrect or suboptimal configurations of GCP resources that create security vulnerabilities.
observation_finding
MediumObservation findings from Google Cloud Security Command Center, describing events, configuration details, or issues that may not be problems themselves but could be concerning if the environment were compromised.
posture_violation
MediumPosture violation findings from Google Cloud Security Command Center, identifying resource configurations that don't align with your organization's security posture or Compliance Manager cloud controls.
scc_error
LowSCC Error findings from Google Cloud Security Command Center, identifying problems in the configuration of Security Command Center or one of its services that prevent Security Command Center from detecting security issues.
scc_finding
MediumSecurity findings from Google Cloud Security Command Center V2, including custom threats, vulnerabilities, and policy violations detected across GCP resources and projects.
threat_detection
MediumThreat findings from Google Cloud Security Command Center Event Threat Detection, identifying active attacks, malware, brute force attempts, data exfiltration, and other malicious activities detected in GCP resources.
Toxic combination findings from Google Cloud Security Command Center Security Graph, identifying groups of security issues that together create attack paths to high-value resources.
vulnerability_finding
MediumVulnerability findings from Google Cloud Security Command Center, including OS vulnerabilities, container vulnerabilities, web application vulnerabilities, and weak security configurations detected by various scanners.